We ask that you read this privacy policy carefully as it contains important information on the personal information we collect about you, how we use it, your legal rights, and the situations in which we may share your information with other organisations when using these Apps.
Please note that the collection and use of your personal information is required for the Apps to operate properly. Any refusal, disruption or tampering with the Apps which affects how the Apps collect and use your personal information could result in the Apps not functioning as intended, which in turn may result in you being unable to provide and be paid for services to Yodel.
WHO WE ARE
THIS POLICY
THE DATA WE COLLECT ABOUT YOU
HOW WE USE YOUR PERSONAL DATA
PURPOSES FOR WHICH WE USE YOUR PERSONAL DATA
YOUR LEGAL RIGHTS
SHARING YOUR PERSONAL DATA
INTERNATIONAL TRANSFERS
DATA SECURITY
DATA RETENTION
COOKIES AND SIMILAR TECHNOLOGIES
1. WHO WE ARE
These mobile applications software, Yodel Driver and Courier and ICRA (the "Apps") are operated by Yodel Delivery Network Limited ("Yodel", "we", "us"), with company number 05200072 and registered office Skyways Hub, Speke Road, Speke, Liverpool, L70 1AB.
We are a "Data Controller" for the purposes of the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018 (the "Act" and "UK GDPR" respectively, and together the "Data Protection Legislation"). Where our activities fall within the scope of the EU General Data Protection Regulations 2016/679 (“EU GDPR”), we will also comply with its requirements. This means that we are responsible for, and control the processing of, your personal information. We are registered as a data controller with the Information Commissioner's Office (“ICO”), under registration number Z8874457.
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
If you have any questions about how we use your personal information, please contact data.protection@yodel.co.uk or you can write to us at Yodel Data Protection Team, Yodel Delivery Network Limited, Skyways Hub, Speke Road, Speke, Liverpool, L70 1AB.
You have the right to make a complaint at any time to the Information Commissioner’s Office ("ICO"), the UK supervisory authority for data protection issues or other competent supervisory authority of an EU member state if the Apps are downloaded outside the UK, about how we use your personal information for the operation of the Apps.
2. THIS POLICY
This policy (together with the Apps terms and conditions of use ("Ts&Cs") applies to your use of the Apps once you have downloaded copies of the Apps onto your mobile telephone or handheld device.
Changes to the privacy policy
We keep this privacy policy under regular review. It may change and if it does, these changes will be posted on this page and, where appropriate, notified to you when you next open the Apps. The new policy may be displayed on-screen and you may be required to confirm that you have read the changes to continue your use of the Apps. Each version of this privacy policy will become valid and in force at the time of publication.
3. THE DATA WE COLLECT ABOUT YOU
We may collect, use, store and transfer different kinds of personal data about you through your use of the Apps, as follows:
• Device Data – the type of mobile device that you use, a unique device identifier (for example, your Device’s IMEI number, the MAC address of the Device’s wireless network interface, or the mobile phone number used by the Device), and your mobile operating system;
• Login Data – your username and password;
• Usage Data – details of your use of and activities within the Apps, including analytics data ; and
• Location Data – your location data while the Apps are running on your mobile device.
• Vehicle Data – your vehicle registration and mileage
• Electronic ID Picture - your electronic portrait picture specifically stored on the Apps for the purposes of verifying your identity to other parties
We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offences for the purposes of the Apps.
4. HOW WE USE YOUR PERSONAL DATA (LAWFUL BASES)
We will only use your personal data where it is necessary, proportionate and permitted by data protection law. Most commonly, we will use your personal data under the following lawful bases:
• Where you have consented before the processing.
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. Where we process your personal data in pursuit of our legitimate interests, we take steps to ensure that we are only collecting information that we need to ensure that your fundamental rights are not overridden.
• Where we need to comply with a legal or regulatory obligation.
• Where necessary to perform our contract with you or to take steps at your request before entering into a contract.
5. PURPOSES FOR WHICH WE USE YOUR PERSONAL DATA
To install the Apps and register you as a new App user
We process your personal data to perform our contract with you, enabling app installation and user registration.
Type of Data
o Device Data
o Login Data
o Electronic ID Picture
To manage our relationship with you including notifying you of changes to the Apps
We process your personal data as necessary to manage our contract, including communication about updates or changes to the Apps and to comply with legal obligations (such as to inform you of any changes to our terms and conditions or this privacy policy).
Type of Data
o Device Data
o Login Data
To administer and protect our business and these Apps including troubleshooting, data analysis and system testing
Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security). Consent (in particular your consent for the use of analytics technologies on your device).
Type of Data
o Device Data
o Usage Data
To monitor the services that you are providing to us
Consent (on our using shared data and your consent for the use of analytics technologies on your device)
Type of Data
o Device Data
o Usage Data
o Login Data
o Location Data
o Vehicle Data
To monitor trends so we can improve the App for users
Consent (in particular your consent for the use of analytics technologies on your device). Necessary for our legitimate interests (to maintain records of App usage analytics and enhance the App experience).
Type of Data
o Device Data
o Usage Data
o Login Data
o Location Data
6. YOUR LEGAL RIGHTS
In addition to the right to be informed about how we use your personal information (as set out in this privacy notice), you have various other rights in respect of the personal information we hold about you – these are set out in more detail below. If you wish to exercise any of these rights, please contact us at the details in Section 1 above.
Access to your personal information: You can contact us to request copies of the information we hold about you, as well as supplementary information such as why we have that information, who has access to the information and where we got the information.
Withdrawing consent: If you have given us your consent to use your personal information, you can withdraw your consent at any time. This will not affect the lawfulness of our use of your information before you withdrew your consent.Correction of your personal information: If the information we hold about you is out of date, incomplete or incorrect, you can ask us to update it. You can also update your information at any time by logging into your user accounts on the Apps.
Erasure of your personal information: You can request that we erase the information we hold in certain circumstances, such as where it is no longer needed for the purposes for which it was collected. However, this right is not absolute. For example, if you work with us as a driver or courier, we may need to retain some of your personal data to manage our ongoing working relationship, meet legal or regulatory obligations, or defend against potential legal claims. When you submit a request, we will assess it carefully and confirm whether your data has been deleted or explain why we are unable to delete it at that time.
Objection to processing your personal information: You have the right to request that we stop processing your information where we are relying on a legitimate interest (or those of a third party). Upon receiving the request, we will contact you to tell you if we are able to comply or if we have legitimate grounds to continue – for example, we may need to continue to hold your information for regulatory or legal reasons.
Restriction: You can ask us to temporarily limit the use of your personal information, for example where you have questioned the accuracy of your information or how it is being used, but you do not want us to delete it. Please note that if you ask us to restrict the processing of your personal data in a way that inhibits the full functionality of the Apps, this may result in you being unable to provide and be paid for services to Yodel.
Portability: You can ask us to provide you or a third party with some of the personal information that we hold about you in a structured, commonly used, electronic form, so it can be easily transferred. Once we have received your request, we will comply where it is feasible to do so.
Please note, some of these rights only apply in certain circumstances and we may not be able to fulfil every request. If we receive a request from you to exercise any of the above rights, we may ask you to verify your identity before acting on the request in line with Article 12(6) GDPR; this is to ensure that your data is protected and kept secure.
You can make a complaint to us by contacting us at the details in Section 1 above or to the data protection supervisory authority – in the UK, this is the ICO, at https://ico.org.uk/.
7. SHARING YOUR PERSONAL DATA
We may pass your information to the following third parties for limited purposes:
other members of our corporate group for administration or reporting purposes;
technology service providers who provide IT support for the running of the Apps;
third party processors or controllers engaged by us to assist with the processing and analysis of personal data collected on the Apps or to provide payment for services;
customer service providers who work with us to assist you in providing services to us; and
our IT contractors who help with the operation and support of the Apps.
Occasionally, we may need to disclose your personal information to third parties where necessary for the legitimate interests of our business or in order to comply with legal obligations, for example:
in the event that we sell or buy any business or assets, in which case we may disclose your personal information to the prospective seller or buyer of such business or assets;
if we have to disclose or share your personal information in order to comply with any legal obligation or request from a regulator or governmental agency, or to detect or prevent fraud or crime;
with our professional advisers, including lawyers, bankers, auditors and insurers who provide various services to us; and
to enforce or apply our App Ts&Cs or other agreements, to protect the rights, property or safety of our group, our customers or others, and in connection with legal claims.
8. INTERNATIONAL TRANSFERS
We may need to transfer your personal information to countries which are located outside the EEA and UK for the purpose of improving our service.
Where we transfer personal data to certain service providers located in other countries, (i) we will assess whether that country offers protections for personal data which are essentially equivalent to those offered in the UK and EU; and (ii) we will use specific contractual terms to give personal data appropriate safeguards (e.g., UK International Data Transfer Agreement and/or EU Standard Contractual Clauses).
If you would like further information, please contact us at the details in Section 1 above.
9. DATA SECURITY
Your use of the Apps
When you are using the Apps, you will have access to the personal data (including names and addresses, contact phone number and safe place images) of parcel recipients. You should handle this information with utmost care and in compliance with your data processing obligations under your service agreement with Yodel. If you become aware of any suspected or actual breach of the security or confidentiality of this information, you must inform our data protection team immediately using the details in Section 1 above.
In the event that you lose your device or otherwise disclose any of the personal data without authorisation, you must contact your allocated service centre manager immediately.
Your personal data held on the App
All information you provide to us is stored on our secure servers. Where we have given you (or where you have chosen) passwords that enable you to access the Apps, you are responsible for keeping these passwords confidential. We ask you not to share a password with anyone, for any purposes. Any password chosen by you must be unique, complex and not recycled from any of your existing personal or work related passwords.
Once we have received your information, we will use strict procedures and security features to prevent your personal data from being accidentally lost, used, disclosed or accessed in an unauthorised way.
We have put in place procedures to deal with any suspected personal data breach involving the Apps and where this affects your data, we will notify you and any applicable regulator when we are legally required to do so.
If you would like any further information about our policies and procedures relating to the security of your personal data, please contact us using the details in Section 1 above.
10. DATA RETENTION
We will not retain your personal information for any longer than is necessary for our purposes, including for the purposes of satisfying any legal, accounting or reporting requirements. If you would like further information, please contact us using the details in Section 1 above.
In some circumstances you can ask us to delete your data: see Section 6 above for further information.
In the event that you do not use the Apps for a period of thirty (30) days then we will treat your account as expired and access to your account will be disabled.
11. COOKIES AND SIMILAR TECHNOLOGIES
We use certain technologies to store and access information on your device in connection with your use of the Apps. For detailed information on our use of these technologies, the purposes for which we use them and how you can exercise your choices regarding our use of these technologies, see our Cookie Policy.