Privacy Policy

Last updated: 8 September 2026

Who we are
What we collect
Why we use it and our lawful basis
Who we share it with
Where your data is stored
How long we keep it
Your rights
Cookies and local storage
Security
Contact and complaints

1. Who we are

Delidr (“we”, “us”, “our”) operates a delivery platform in London, United Kingdom and recruits self-employed delivery partners through this website.

For the purposes of the UK GDPR and the Data Protection Act 2018, the data controller is [COMPANY LEGAL NAME], a company registered in England and Wales with company number [COMPANY NUMBER], registered office [REGISTERED OFFICE ADDRESS, LONDON]. Our ICO registration number is [ICO REGISTRATION NUMBER].

2. What we collect

When you complete the “Join as a Driver” form we collect:

First and last name — required.
Email address — required, so we can contact you about your application.
Mobile number — required, so we can call or text you about your application.
Referral code — optional, so we can credit the partner who referred you.

We also record the date and time your application was submitted. Our hosting provider processes standard technical information such as your IP address and browser type as part of delivering and protecting the website.

We do not ask for special category data on this form. Please do not include health, biometric or other sensitive information in any free-text field.

3. Why we use it and our lawful basis

Purpose	Lawful basis (UK GDPR Article 6)
Assessing your application and contacting you about it	Article 6(1)(b) — steps taken at your request before entering into a contract
Crediting a referral code to the partner who referred you	Article 6(1)(f) — our legitimate interest in operating a referral scheme
Preventing spam and fraudulent submissions	Article 6(1)(f) — our legitimate interest in protecting our systems
Meeting our legal and regulatory obligations	Article 6(1)(c) — compliance with a legal obligation

We do not use your details for marketing unrelated to driving with Delidr, and we do not sell your personal data. We do not carry out automated decision-making that produces legal or similarly significant effects.

We share your data only with service providers who process it on our behalf:

Netlify — hosts the website and runs the form endpoint.
Amazon Web Services (AWS) — hosts the database your application is stored in.
Professional advisers, and regulators or law enforcement where we are legally required to disclose information.

Each provider is bound by a contract that restricts what they may do with your data.

5. Where your data is stored

Your application is stored in a database hosted by AWS in the Asia Pacific (Mumbai) region, in India. This is a transfer of personal data outside the UK. For such transfers we rely on the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses, together with a transfer risk assessment, so that your data receives an essentially equivalent level of protection to that guaranteed under UK data protection law.

You may request a copy of the safeguards we rely on using the contact details below.

6. How long we keep it

Unsuccessful applications — kept for [6 / 12] months from the date of your application, then deleted.
Successful applicants — retained for the duration of your engagement with Delidr and for [6] years afterwards, to meet tax and legal record-keeping requirements.

You can ask us to erase your application sooner — see your rights below.

7. Your rights

Under UK data protection law you have the right to:

be informed about how we use your data;
request a copy of the data we hold about you;
have inaccurate data corrected;
ask us to erase your data;
restrict how we use your data;
data portability, in a structured, machine-readable format;
object to processing based on our legitimate interests; and
withdraw consent at any time, where we rely on consent.

To exercise any of these, email [PRIVACY CONTACT EMAIL]. We will respond within one month. There is normally no charge.

8. Cookies and local storage

This site sets no advertising or analytics cookies. The admin area stores an access token in your browser's sessionStorage so staff stay signed in for the duration of the browser session; it is cleared when the tab is closed. Because these are strictly necessary for a service you have requested, no cookie consent banner is required.

9. Security

The site is served over HTTPS and your application is transmitted encrypted in transit. The database is protected by credentials held only by Delidr, and the admin area is restricted by an access token. No system is completely secure, but we take appropriate technical and organisational measures to protect your data, and we will notify the ICO and, where required, you, of any personal data breach that meets the relevant threshold.

10. Contact and complaints

Questions about this policy or how we handle your data: [PRIVACY CONTACT EMAIL], or write to us at [REGISTERED OFFICE ADDRESS, LONDON].

If you are unhappy with our response, you can complain to the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF — ico.org.uk/make-a-complaint, helpline 0303 123 1113. We would appreciate the chance to address your concerns first.

We may update this policy from time to time. The date at the top shows when it was last revised.