Privacy Policy

1. Who we are and how to contact us

Cornwall Couriers Ltd, trading as Cornwall Couriers, is the controller responsible for deciding how personal information is used for the purposes described in this notice.

Company number: 14202355, registered in England and Wales
Registered office: 7 Drop Stamp Road, Camborne, England, TR14 8GW
ICO registration reference: ZC261006
Privacy enquiries and rights requests: info@cornwallcouriers.co.uk
Telephone: 01209 255224

You can contact us by email, telephone or post, ask for an accessible copy of this notice or raise a data-protection complaint. You do not need legal terminology or a particular form. Please tell us if you need help.

2. What this notice covers

This notice concerns people making enquiries, business contacts, customers, senders, recipients and others whose details are needed to arrange a delivery or deal with an issue.

The Cornwall Couriers website provides service information and planning tools. Its Trade Account form prepares an email enquiry; it does not open an account or approve credit. This website itself does not accept a booking or take payment.

Get a quote leads to a separate shared online form using Secure UK Couriers branding, another trading name of Cornwall Couriers Ltd. Our Customer Portal separately links to the existing EasyTrans service on mytransport.co.uk. The company's responsibilities for your information continue when it uses a service provider. Opening a link is not submitting an enquiry or creating an account. This website does not receive your portal password.

A privacy notice explains data use; it is not consent to unrelated processing or acceptance of carriage terms. Your legal data-protection rights continue to apply.

3. Information involved in an enquiry or delivery

The information needed depends on your enquiry or service. It can include:

Contact and business details: your name, role, company, email, telephone number, business address and any company registration or website details you provide.
Delivery requirements: collection and destination addresses, site contacts, dates, receiving windows, access instructions, goods descriptions, quantities, packaged measurements, weights, values and handling needs.
Correspondence: enquiries, instructions, changes, complaints, attachments and replies.
Booking and administration records: references, agreed service and price, applicable Terms and acceptance records, invoices and payment status.
Delivery or claim evidence, where relevant: collection or receiving details, proof of delivery, signatures, photographs, incident information and evidence of value. What is collected depends on the service and circumstances.
International shipment information, where required: relevant sender, recipient, goods and customs details.
Technical requests and service records: IP address, requested URL and browser request headers needed to serve and protect online pages, and records of email sending, delivery or failure. See section 9 about older quotation emails.

Please share only what is needed. Do not include payment-card details, passwords, bank-access credentials or unnecessary identity or health documents in an enquiry. Ask us to agree an appropriate channel if sensitive material is needed.

Required form fields help us understand your request. If necessary information is missing, a form may be unable to prepare or submit your enquiry, or we may be unable to arrange the service. Optional fields can be left blank.

4. Where information comes from

We receive information you send through an agreed contact channel. A customer, sender, recipient, driver or carrier may also provide details needed for a collection, delivery or investigation.

If you are a recipient or site contact, your details may have come from the person arranging the delivery. You can ask us about the source and use of your information. Anyone sharing another person's details should have a lawful basis and provide appropriate information; this does not remove our own duties.

5. Why we use information and the lawful basis

All entries remain available. Scroll sideways to compare columns.

Purpose	Lawful basis and relevant interest
Answer a quotation or Trade Account enquiry	Steps you request before a contract, where applicable. For someone acting for a business, legitimate interests in answering the enquiry and arranging an appropriate service.
Arrange and perform an agreed delivery	Contract where you are the contracting individual. For business contacts and recipients, legitimate interests in completing the requested delivery and coordinating a safe handover.
Administer accounts, prices, invoices and payments	Contract where applicable, legal obligations for required accounting or tax records, and legitimate interests in business administration and resolving payment queries.
Keep necessary instructions, acceptance and delivery evidence	Legitimate interests in making arrangements clear, showing what was agreed and done, preventing fraud and resolving disputes.
Operate and protect our website and communications	Legitimate interests in serving the requested pages, keeping the service secure, diagnosing faults and checking whether service messages were sent or delivered.
Measure how the website is used, in aggregate	Legitimate interests in understanding which pages and links are used so we can improve the website, using statistics only. You can switch website analytics off at any time (section 9).
Investigate an incident or claim	Legitimate interests in understanding what happened and establishing or defending legal rights. A legal obligation applies where a specific law, court or regulator requires it.
Handle privacy requests, complaints and lawful official requirements	Applicable legal obligations.

Legitimate interests must be balanced against your interests and rights. They do not permit unnecessary collection or indefinite retention. You can ask us to explain the interest and assessment involved.

Where an activity relies on consent, its purpose and choices must be explained when consent is requested. You can withdraw consent without affecting earlier lawful processing. A delivery enquiry, Terms acceptance or reading this notice is not a marketing subscription.

6. Who receives information

We share relevant information with people who need it for the particular enquiry or service. This may include authorised staff, drivers and carriers, senders and recipients, communications and business-system providers, payment providers for an agreed payment route, professional advisers, insurers or claims handlers, and authorities where disclosure is lawful or required.

Our principal website and enquiry providers are:

Vercel: hosting and delivering the Cornwall website.
Google (Google Analytics 4): aggregate website statistics, with advertising features switched off.
Cloudflare: managing our domain's DNS. This does not itself route your enquiry to a new recipient.
Google Workspace: company email and correspondence.
WhatsApp Business (Meta): messages you choose to send us on WhatsApp.
Lovable Cloud and Supabase infrastructure: the shared Quote application, its database and associated functions.
Resend: sending the shared Quote application's service emails and recording sending, delivery and failure information.
EasyTrans: the existing Customer Portal and the records handled through that service.

A provider should receive information relevant to its role, rather than the whole customer file by default. Some recipients act on our instructions. Others, such as a bank or public authority, may have their own legal responsibilities and privacy information. Other delivery channels and providers are explained where they are relevant to your particular service.

7. International deliveries and data transfers

An overseas delivery can require relevant sender, recipient, goods and customs information to be shared with carriers, partners or authorities in the countries concerned. IT and communications services can also involve processing outside the UK, including in the European Economic Area and the United States.

The main shared Quote database is configured in London. This is not a promise that every provider, backup, support operation or message remains in the UK. Resend's published arrangements specify US storage of email content and service records; choosing a European sending region does not move that storage to Europe.

Restricted transfers require a route permitted by UK data-protection law. Relevant providers' published arrangements include adequacy arrangements or contractual safeguards such as Standard Contractual Clauses with the UK Addendum. Resend's transfer information, Vercel's Data Processing Addendum and Google's data transfer information for Google Analytics describe their arrangements. A necessary international delivery is not a blanket exemption from transfer requirements.

You can contact us about the countries, recipients and safeguards relevant to your information and how to obtain a copy of applicable safeguards. We will explain the arrangement relevant to the actual service, rather than assume that a provider's brand or a database region establishes it.

8. How long we keep information

Our standard retention policy distinguishes the following records:

All entries remain available. Scroll sideways to compare columns.

Record	Standard retention period
Quotation enquiries that do not lead to a booking	Six months after the enquiry is closed.
Website analytics data (Google Analytics 4)	Up to 14 months, after which Google Analytics deletes it automatically. Reports showing only aggregated totals may be kept longer.
Unsuccessful, withdrawn or closed incomplete Trade Account applications	Six months after the decision or closure.
Essential Booking records, accepted Quote and Terms, acceptance evidence, necessary instructions and core proof of delivery	Six years after completion or cancellation. A later applicable accounting or legal requirement applies only to the information needed for it.
Invoices, credit notes and necessary accounting or payment records	Six years from the end of the last company financial year to which they relate, or a later applicable statutory deadline.
Additional delivery or cargo photographs	Twelve months after delivery. A photograph needed as core proof of delivery or for a specific dispute follows the relevant longer period.
General enquiries and administrative correspondence	Twelve months after closure. Messages forming part of a quotation, booking, accounting or claim file follow that file's relevant rule.
Ordinary resolved service complaints	Two years after the final response or closure. Specific disputes, claims and legal requirements are assessed separately.

Active account records are kept while needed to administer the relationship, with related quotation, booking and accounting records following their applicable rule. Technical and service logs are kept for the period needed for security, fault investigation or administration, taking account of the provider's arrangements. You can ask us about the period or criteria relevant to your information.

The policy is applied through record reviews and the available controls in each system; it is not a promise that every system automatically deletes every copy on the same day. Processor records and backups can have separate expiry arrangements. We do not promise an immediate removal from every backup.

These periods do not require unnecessary information to be kept for the maximum time. Where relevant material is needed for a specific legal obligation, dispute or claim, that justified need is reviewed separately. A new unrelated enquiry does not restart every older record's period. When there is no continuing purpose or retention requirement, the appropriate action is deletion or effective anonymisation; moving a record out of normal view is not necessarily permanent deletion.

9. Website tools, cookies and your choices

The Cornwall website serves its photographs, fonts and illustrative coverage maps as website assets. It does not use advertising cookies, tracking pixels or embedded third-party maps. It uses Google Analytics only to produce statistics about how the website is used, as explained below.

Website analytics

We use Google Analytics 4 to understand, in aggregate, how visitors find and use the website: for example which pages are viewed, the type of device and browser, the approximate region and the referring website. It also counts when a quote link, telephone link, WhatsApp link or email link is used, or when the Trade Account review step opens. This helps us improve the website and its information.

Analytics is not used for advertising, remarketing or building profiles of individual visitors. Google signals and advertising personalisation are switched off. Your form entries, names, contact details and delivery details are not sent to Google Analytics; quote link counts include only the page address and its source label.

Google Analytics stores first-party cookies named _ga and _ga_* on your device to distinguish visits. Because they are used only for these statistical purposes, we rely on the exception for statistical cookies in the Privacy and Electronic Communications Regulations, which requires us to explain their use and give you a simple way to object. Google provides the service to us and may process the data outside the UK under the safeguards described in section 7.

You can switch website analytics off at any time with the control below. Your choice is stored only in your browser's local storage on this device and applies on every page; clearing your browser data removes it. Analytics is also switched off when your browser sends a Global Privacy Control signal.

Website analytics runs only when JavaScript is enabled.

Trade Account enquiries

The form checks your entries and lets you review a prepared enquiry. Open email app opens a draft in your chosen email application; Copy details copies its text to your clipboard. Neither action sends an application. We receive it only when you choose to send it through an available channel. For a long enquiry, the email link may contain only the recipient and subject; copy the reviewed details into the message.

The required contact checkbox requests a reply about your enquiry. It is not marketing consent or acceptance of this notice as a contract.

Planning tools, map and checklist

Price Calculator, Service Finder and Vehicle Guide work within the page. They do not send your entered answers to us or automatically fill the external Quote form. Review and add your details yourself when requesting a quotation. A delivery summary can be reviewed and copied to your clipboard if you choose.

FAQ filtering, map selections and the collection checklist also operate within the page. Europe and Worldwide map links can prepare an email containing your selected country and journey direction; you decide whether to send it. Printing uses your browser's print function.

These tools do not save your form entries to a customer database, localStorage or sessionStorage. Your browser may independently restore fields or offer autofill. Clipboard history, synchronisation and email drafts are controlled by your device and applications; take care on shared devices.

Separate Quote and Customer Portal

The Quote link identifies Cornwall Couriers as the source. It does not contain your finder answers, contact details or goods description. EasyTrans Login and Register use fixed links without your form answers or customer references and are configured not to pass the referring page address. Each destination receives the request needed to open its page and handles the information you enter there. Its login or session technology is separate from the Cornwall website's local planning tools.

Quotation emails

Newly generated shared Quote emails do not include our custom email-open tracking image. Sending, delivery and failure records are retained for service administration; those are different from monitoring whether you read a message.

Older quotation emails may still contain an image which reports an opening to the Quote system against the quotation reference and time. Existing open records are retained only where relevant to the enquiry or record concerned. An image request is not reliable proof that a particular person read the email: an email application may load images automatically. Contact us if you want to object to that use or ask about records relating to you.

Hosting and technical requests

Opening a page sends the technical request needed to deliver it, even without analytics. Vercel handles website requests; Cloudflare manages DNS. Necessary service and security information may be recorded by the provider. This is separate from the form answers processed locally on the page.

This website does not use advertising technologies. If other optional technologies are introduced, we will explain them and provide any choices required before they operate.

10. Marketing and automated decisions

This website does not send marketing messages or add enquirers to a mailing list. A quotation or Trade Account enquiry requests help with that matter; it is not a marketing subscription.

The website's indicative price and selection tools do not approve credit, open an account, accept a booking or make a decision with legal or similarly significant effects. We will provide further information and applicable safeguards before introducing an activity of that kind.

11. Your data-protection rights

Depending on the circumstances and lawful basis, you may ask to access your personal information, correct it, erase it, restrict its use or receive certain information you supplied in a portable format. Where processing relies on consent, you can withdraw it. Rights have conditions and exceptions; for example, some records may be needed for a legal obligation or claim.

Your right to object

You can object to processing based on legitimate interests for reasons relating to your particular situation. We must consider the objection and may continue only where the law permits, such as where overriding compelling grounds or legal claims justify it. You can object to direct marketing at any time; your information must then no longer be used for that marketing.

Contact us by email, telephone or post. We may request proportionate information to verify identity or authority before disclosing information. You do not need to mention GDPR or complete a particular form.

We must respond without undue delay and normally within one month. Where the law permits extra time, necessary identity checks, clarification or a restriction, we will explain the reason. For a subject access request, a necessary extension can be up to two further months for complexity or multiple requests, with notice and reasons within the initial period.

12. How to raise a data-protection complaint

Email info@cornwallcouriers.co.uk, call 01209 255224 or write to Data Protection, Cornwall Couriers Ltd, 7 Drop Stamp Road, Camborne, TR14 8GW. Describe the concern and how to contact you. Include a relevant reference but avoid unnecessary sensitive information. A subject line such as “Data protection complaint” may help direct the message, but is optional. Tell us if you need help making the complaint.

We must acknowledge a data-protection complaint within 30 days, make appropriate enquiries, keep you informed and communicate the outcome without undue delay. This is an acknowledgement deadline, not a promise that every investigation will finish within 30 days.

You can also complain to the Information Commissioner's Office (ICO). Your right to do so does not depend on completing our procedure.

13. Keeping information secure

Information must be protected by appropriate technical and organisational measures, with access and sharing limited to relevant purposes. No website or communication method can guarantee absolute security.

Keep private booking and tracking links confidential. Contact us before sending sensitive material or if you suspect a security issue. ICO registration is not a certification of every security control or company-wide compliance. A personal-data breach must be assessed and reported to the regulator or affected people where the law requires.

14. Changes to this notice

Privacy notice v2.5 describes the Cornwall website, the shared Quote application, company email and the existing Customer Portal. It includes our standard retention policy and explains the difference between newly generated quotation emails and older email-open records.

The publication information at the top of this page identifies the notice's status and date. We will keep it consistent with the services actually used and explain a materially different use of information before starting it where the law requires. For questions about this notice or your information, email Cornwall Couriers.

Privacy notice v2.7 · Published · Effective 10 October 2026 at 10:01 BST (UK time)

Back to the top ↑