Privacy Policy

1. Introduction

T&C Logistics ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our courier and logistics services.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

2.1 Personal Information

We collect personal information that you provide directly to us when booking our services:

• Contact Details: Name, email address, phone number
• Business Information: Company name, VAT number (for business accounts)
• Address Information: Collection and delivery addresses
• Payment Information: Billing address, payment method details (processed securely by our payment providers)
• Shipment Details: Description of goods, weight, dimensions, special handling requirements

2.2 Automatically Collected Information

When you use our website, we automatically collect:

• Device Information: IP address, browser type, device type, operating system
• Usage Data: Pages visited, time spent, links clicked
• Location Data: Approximate location based on IP address (for service availability)
• Cookies: See our Cookie Policy for details

2.3 Tracking Information

For shipment tracking, we collect GPS coordinates and timestamps from our delivery vehicles to provide real-time tracking updates.

3. How We Use Your Information

We use your personal information for the following purposes:

3.1 Service Delivery

• Processing and fulfilling your courier bookings
• Communicating with you about collection and delivery
• Providing real-time tracking updates
• Resolving delivery issues and customer support inquiries

3.2 Business Operations

• Processing payments and issuing invoices
• Maintaining business accounts
• Fraud prevention and security
• Legal compliance and record-keeping

3.3 Marketing and Communications

• Sending service updates and promotional offers (with your consent)
• Responding to your inquiries via email, phone, or WhatsApp
• Conducting customer satisfaction surveys

3.4 Website Improvement

• Analyzing website usage to improve user experience
• Testing new features and functionality
• Optimizing our quote calculator and booking system

4. Legal Basis for Processing

Under UK GDPR, we process your personal data on the following legal bases:

• Contract Performance: Processing necessary to fulfill our courier services
• Legitimate Interests: Fraud prevention, business analytics, service improvement
• Legal Obligation: Tax records, accounting, regulatory compliance
• Consent: Marketing communications (you can withdraw consent at any time)

5. Data Sharing and Disclosure

We may share your personal information with:

5.1 Service Providers

• Payment Processors: Stripe, PayPal (for secure payment processing)
• Cloud Services: Supabase (database hosting)
• Communication Services: WhatsApp, email providers
• Analytics: Google Analytics (anonymized data)

5.2 Business Partners

Subcontractor couriers (when necessary to fulfill delivery), airport handlers, customs agents.

5.3 Legal Requirements

Law enforcement, regulatory authorities, or courts when required by law or to protect our legal rights.

6. Data Retention

We retain your personal information for as long as necessary to:

• Active Bookings: Duration of service plus 6 months
• Business Accounts: 7 years (UK tax and accounting requirements)
• Marketing Data: Until you unsubscribe or request deletion
• Website Analytics: 26 months (Google Analytics default)

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restriction: Limit how we process your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests or marketing
• Right to Withdraw Consent: Withdraw consent for marketing or other consented processing

To exercise any of these rights, contact us at contact@tclogistics.uk. We will respond within 30 days.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• SSL/TLS encryption for data transmission
• Encrypted database storage (Supabase PostgreSQL)
• Access controls and authentication
• Regular security audits and updates
• Staff training on data protection

While we strive to protect your data, no method of transmission over the Internet is 100% secure. You acknowledge the inherent risks of online data transmission.

9. International Data Transfers

Some of our service providers are located outside the UK/EEA (e.g., Supabase servers in EU). We ensure adequate protection through:

• EU Standard Contractual Clauses (SCCs)
• Adequacy decisions by the UK Information Commissioner's Office
• Other approved transfer mechanisms under UK GDPR

10. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

11. Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for their privacy practices. We encourage you to read their privacy policies before providing personal information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Significant changes will be communicated via email or prominent website notice.