This Privacy Policy explains how Smugla Ltd (“Smugla”, “we”, “us”) collects, uses, stores and shares personal data when you use our UK courier marketplace websites, portals and related services. It is written for users in the United Kingdom under UK GDPR and the Data Protection Act 2018.
Controller: Smugla Ltd, trading as Smugla. Contact for privacy requests: privacy@smugla.com. General contact: hello@smugla.com. Registered in England and Wales. Registered office details are available on request at privacy@smugla.com and will be published on smugla.com once finalised.
1. Who this policy covers
This policy applies to customers booking deliveries, courier providers and their staff, freelance drivers using Smugla portals, waitlist and marketing sign-ups, and visitors to our websites.
2. Personal data we collect
Account and identity
- Name, email address, phone number, password (stored via our authentication provider)
- Business name, VAT status and company details (providers)
- Driver licence, identity and compliance documents where required for onboarding
- Profile and public display names used in the marketplace
Bookings and deliveries
- Pickup and delivery addresses, postcodes, contact names and phone numbers for a job
- Parcel descriptions, vehicle requirements, quotes, bids and booking history
- Tracking status, proof of delivery, messages between parties about a job
- Reviews and ratings associated with completed work
Payments and finance
- Payment status, amounts, currency and Stripe payment identifiers (card details are handled by Stripe; we do not store full card numbers)
- Payout, self-billing and commission records for providers and drivers
- Billing addresses and invoices where generated
Technical and usage data
- IP address, browser type, device information and approximate location derived from IP
- Cookies and similar technologies (see our Cookie Policy)
- Logs needed for security, fraud prevention and service reliability
3. Why we use your data (lawful bases)
- Contract: to create accounts, provide quotes, book and fulfil deliveries, process payments and support your use of the platform
- Legitimate interests: to secure the service, prevent fraud, improve product quality, analyse aggregated usage, and communicate operational updates
- Legal obligation: tax, accounting, regulatory and law-enforcement requests where applicable
- Consent: optional marketing emails and non-essential cookies where required — you may withdraw consent at any time
4. How we share data
We share personal data only as needed to operate the marketplace:
- With the courier provider and/or driver assigned to your job (addresses and contact details needed to collect and deliver)
- With payment processors (for example Stripe) to take payment or pay out earnings
- With infrastructure and communications providers (hosting, email, push notifications, error monitoring) under appropriate contracts
- With professional advisers or authorities where required by law or to protect rights, safety and the integrity of the platform
We do not sell your personal data. Marketplace visibility (for example provider profiles and ratings) is limited to what is needed for users to choose and trust a courier.
5. International transfers
Some processors may store or process data outside the UK. Where that happens we use appropriate safeguards such as the UK International Data Transfer Agreement / Addendum or equivalent lawful transfer mechanisms.
6. Retention
We keep account, booking and payment records for as long as your account is active and thereafter for as long as needed for disputes, tax, audit and legal claims (typically up to 6 years for financial records in the UK, unless a longer period is required). Compliance documents may be retained for the period needed to meet regulatory and insurance obligations. You may request deletion subject to those needs.
7. Your rights (UK GDPR)
You may have the right to access, rectify, erase, restrict or object to certain processing, and to data portability. You may also withdraw consent where processing is based on consent. To exercise rights, email privacy@smugla.com. You can complain to the UK Information Commissioner’s Office (ICO) if you are unhappy with how we handle your data (ico.org.uk).
8. Security
We use industry-standard measures including encrypted transport (HTTPS), access controls, and reputable authentication and payment providers. No method of transmission or storage is perfectly secure; please use a strong unique password and protect your devices.
9. Children
Smugla is aimed at businesses and adults arranging deliveries. We do not knowingly collect personal data from children under 16. If you believe a child has provided data, contact us and we will take appropriate steps.
10. Changes
We may update this policy when our practices or the law change. We will revise the “Last updated” date and, for material changes, provide a reasonable notice where practical.
11. Contact
Privacy requests: privacy@smugla.com. Support: support@smugla.com. Website: https://smugla.com.