Privacy Policy

1. Introduction

T&C Logistics ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our courier and logistics services.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

2.1 Personal Information

We collect personal information that you provide directly to us when booking our services:

• Contact Details: Name, email address, phone number
• Business Information: Company name, VAT number (for business accounts)
• Address Information: Collection and delivery addresses
• Payment Information: Billing address, payment method details (processed securely by our payment providers)
• Shipment Details: Description of goods, weight, dimensions, special handling requirements

2.2 Automatically Collected Information

When you use our website, we automatically collect:

• Device Information: IP address and the browser user-agent string, which identifies your browser, device type and operating system
• Request Data: The address of each page or file you request, the page that referred you, the time of the request and the response code — recorded in our web server’s access log
• WhatsApp Button Clicks: Our WhatsApp button passes through a redirect on tclogistics.uk before it opens WhatsApp, so that click appears in the same access log
• Location Data: Approximate location inferred from your IP address (for service availability)
• Cookies: See our Cookie Policy for details

That is the whole list. We run no third-party analytics scripts in your browser — no Google Analytics, no tag manager, no heatmap or session-recording tool and no cross-site tracking. Everything above comes from our own server’s log, which means we cannot see how long you spent on a page or what you clicked within it.

2.3 Tracking Information

For shipment tracking, we collect GPS coordinates and timestamps from our delivery vehicles to provide real-time tracking updates.

3. How We Use Your Information

We use your personal information for the following purposes:

3.1 Service Delivery

• Processing and fulfilling your courier bookings
• Communicating with you about collection and delivery
• Providing real-time tracking updates
• Resolving delivery issues and customer support inquiries

3.2 Business Operations

• Processing payments and issuing invoices
• Maintaining business accounts
• Fraud prevention and security
• Legal compliance and record-keeping

3.3 Marketing and Communications

• Sending service updates and promotional offers (with your consent)
• Responding to your inquiries via email, phone, or WhatsApp
• Conducting customer satisfaction surveys

3.4 Website Improvement

• Analyzing website usage to improve user experience
• Testing new features and functionality
• Optimizing our quote calculator and booking system

4. Legal Basis for Processing

Under UK GDPR, we process your personal data on the following legal bases:

• Contract Performance: Processing necessary to fulfill our courier services
• Legitimate Interests: Fraud prevention, business analytics, service improvement
• Legal Obligation: Tax records, accounting, regulatory compliance
• Consent: Marketing communications (you can withdraw consent at any time)

5. Data Sharing and Disclosure

We may share your personal information with:

5.1 Service Providers

• Invoicing and Payments: QuickBooks (Intuit) and Tide. We raise invoices in these and take payment by bank transfer, or by a payment link issued through them. Where you pay by card, that payment page is hosted by the provider — your card details are never entered on this website, and we neither see nor store full card numbers.
• Cloud Services: Supabase (database hosting)
• Communication Services: WhatsApp, email providers
• AI Assistant: OpenAI. Messages you type into the chat widget on this site are sent to OpenAI to generate the reply. Please do not type anything into it that you would not want processed by a third party — use the booking form, phone or email for sensitive details.
• Operational Messaging: Telegram. Quote requests are relayed to our dispatch team’s Telegram so that a human sees them quickly; the relay carries the quote reference, the collection and delivery postcodes and the distance.

No analytics providers. We share nothing with an analytics or advertising company, because we do not use one.

5.2 Business Partners

Subcontractor couriers (when necessary to fulfill delivery), airport handlers, customs agents.

5.3 Legal Requirements

Law enforcement, regulatory authorities, or courts when required by law or to protect our legal rights.

6. Data Retention

We retain your personal information for as long as necessary to:

• Active Bookings: Duration of service plus 6 months
• Business Accounts: 7 years (UK tax and accounting requirements)
• Marketing Data: Until you unsubscribe or request deletion
• Server Access Logs: 30 days. They rotate daily and the thirty-first day is deleted automatically.

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restriction: Limit how we process your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests or marketing
• Right to Withdraw Consent: Withdraw consent for marketing or other consented processing

To exercise any of these rights, contact us at contact@tclogistics.uk. We will respond within 30 days.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• SSL/TLS encryption for data transmission
• Encrypted database storage (Supabase PostgreSQL)
• Access controls and authentication
• Regular security audits and updates
• Staff training on data protection

While we strive to protect your data, no method of transmission over the Internet is 100% secure. You acknowledge the inherent risks of online data transmission.

9. International Data Transfers

Some of our service providers are located outside the UK: Supabase’s servers in the EU, our hosting provider in Germany, OpenAI and Telegram, and QuickBooks, whose parent Intuit is based in the United States. Tide is UK-based. We ensure adequate protection through:

• EU Standard Contractual Clauses (SCCs)
• Adequacy decisions by the UK Information Commissioner's Office
• Other approved transfer mechanisms under UK GDPR

10. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

11. Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for their privacy practices. We encourage you to read their privacy policies before providing personal information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Significant changes will be communicated via email or prominent website notice.