Updated: 12th February 2020
For the purpose of data protection legislation, the Data Controller is DPDgroup UK Ltd, Roebuck Lane, Smethwick, B66 1BY.
If you have any queries, complaints or requests, please contact our DPO at firstname.lastname@example.org.
- What information do we collect from you?
- How do we use this information?
- How long do we keep hold of your information?
- Who might we share your information with?
- How is your data stored and kept secure?
- What are your rights?
- How can you access the information we hold about you?
- Changes to this Policy
- Contact Us
What information do we collect from you?
We will collect and process the following data about you:
- Information you give us. This is information about you that you give us by providing information through our website www.dpd.co.uk and via green.dpd.co.uk.
- Dependant on the options chosen - i.e. to take part in one of our Green competitions, send us an email or apply for the
- Information we collect from your use of our site. With regard to each of your visits to our site we will automatically collect the following information:
- technical information, such as the Internet protocol (IP) address used to connect your device to the Internet, whereabouts you connected to our service, your internet service provider (ISP), and what type of device you are using to access our service;
- Information about your use of our services such as details of your visit to our site, pages you view and the resources that you access.
- Information we collect when you call us. If you call us we will automatically collect the following information:
- the phone number used to call us
- a recording of all inbound and outbound calls.
How do we use this information?
We will use your personal information in the following ways:
- General emails will be processed by DPD authorised staff who will respond to you in order to answer any questions, queries, and complaints raised.
- Should you wish to take part in any of the Green Petitions, the link provided on the website will direct you to change.org. DPD UK will not process any of your personal data and Change.Org will become the Data Controller of any information shared by you.
- When entering any Green competitions, your personal data and ideas will be processed by authorised DPD staff in order to assess your idea, decide on the successful entrant and respond to you if necessary, regarding the outcome of your entry. Successful entrants surname and county will be publicised on green.dpd.co.uk.
- When applying for the DPD Social Fund, your application will be assessed by authorised DPD staff and personal data will be processed for such purposes. Should you be successful you may be asked for images to publicise the project.
- to administer our site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
- to improve our site to ensure that content is presented in the most effective manner for you and for your device;
- as part of our efforts to keep our site safe and secure;
- to measure or understand the effectiveness of advertising on the green.dpd.co.uk page.
How long do we keep hold of your information?
- We will keep information for the period of time that is necessary to fulfil the original purpose for which we collected the information, up to a maximum of 7 years after the end of our relationship with you unless applicable law requires retention for a longer period of time.
- Telephone records. We will keep these for a maximum of 3 years from the time the recording was made.
- Your DPD App Profile Data. We will retain this data to preserve your shipping profile as a consumer to aid further deliveries. Your data will be held indefinitely but can be removed through the Your DPD App by opting to delete your profile at any time from the 'Settings' menu or by contacting DPD customer services.
Who might we share your information with?
For the purposes set out in the 'How do we use this information?' section above, we may share your personal information with selected third parties, some of whom we appoint to provide services, including:
- business partners, subsidiaries, suppliers and sub-contractors for the performance of any contract we enter into with you;
- analytics and search engine providers that assist us in the improvement and optimisation of our site;
- customer survey providers in order to receive feedback and improve our services.
- cyber security services as part of our efforts to keep our site safe and secure.
- Any member of our group, including parent companies and any subsidiaries of us and such parent companies, for the purposes for which the data was collected.
- to send notifications or account update information (including when new offers for existing or new services have been made available by us) to you by email, SMS text or app push notifications.
Additionally, we will disclose your personal information to the relevant third party:
- In the event that we sell or buy any business or assets, in which case we will disclose your personal data to the prospective seller or buyer of such business or assets.
- If we are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.
How is your data stored and kept secure?
At DPDgroup, we take your safety and security very seriously and we are committed to protecting your personal and financial information. All information kept by us is stored on our secure servers. Where we have given you (or where you have chosen) a password that enables you to access certain parts of our service, you are responsible for keeping this password confidential. We ask you not to share a password with anyone. By agreeing to this policy and using our website, app or other interactive services you acknowledge that the transmission of information over the internet is inherently insecure, and we cannot guarantee the security of data sent over the internet.
We may transfer your data outside the European Economic Area ("EEA"). We will only do so if adequate protection measures are in place in compliance with data protection legislation. We use the following protection measures:
- transferring to European Commission approved countries;
- using European Commission approved model contractual clauses;
- requiring companies we transfer data to in the US to be signed up to the Privacy Shield certification.
Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
What are your rights?
Where processing of your personal data is based on consent, you can withdraw that consent at any time.
You have the following rights. You can exercise these rights at any time by contacting us by email at email@example.com or writing to us at DPDgroup UK Ltd, Roebuck Lane, Smethwick, B66 1BY.
You have the right:
- to ask us not to process your personal data for marketing purposes. We will inform you (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes;
- to ask us not to process your personal data where it is processed on the basis of legitimate interests provided that there are no compelling reasons for that processing;
- to ask us not to process your personal data for scientific or historical research purposes, where relevant, unless the processing is necessary in the public interest.
- to request from us access to personal information held about you;
- to ask for the information we hold about you to be rectified if it is inaccurate or incomplete;
- to ask for data to be erased provided that the personal data is no longer necessary for the purposes for which it was collected, you withdraw consent (if the legal basis for processing is consent), you exercise your right to object, set out below, and there are no overriding legitimate ground for processing, the data is unlawfully processed, the data needs to be erased to comply with a legal obligation or the data is children's data and was collected in relation to an offer of information society services;
- to ask for the processing of that information to be restricted if the accuracy of that data is contested, the processing is unlawful, the personal data is no longer necessary for the purposes for which it was collected or you exercise your right to object (pending verification of whether there are legitimate grounds for processing);
- to ask for data portability if the processing is carried out by automated means and the legal basis for processing is consent or contract.
Should you have any issues, concerns or problems in relation to your data, or wish to notify us of data which is inaccurate, please let us know by contacting us using the contact details above. In the event that you are not satisfied with our processing of your personal data, you have the right to lodge a complaint with the relevant supervisory authority, which is the Information Commissioner's Office (ICO) in the UK, at any time. The ICO's contact details are available here: https://ico.org.uk/concerns/.
We use the following cookies for the following purposes:
- Strictly necessary cookies. These are cookies that are required for the operation of our site. They include, for example, cookies that enable you to log into secure areas of our site.
- Analytical/performance cookies. They allow us to recognise and count the number of visitors and to see how visitors move around our site when they are using it. This helps us to improve the way our site works, for example, by ensuring that users are finding what they are looking for easily.
- Functionality cookies. These are used to recognise you when you return to our site. This enables us to personalise our content for you and remember your preferences.
- Targeting cookies. These cookies record your visit to our site, the pages you have visited and the links you have followed to allow us to improve the page layout and navigation preferences.
You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our site.
In order to optimise our service we apply Google Analytics and our own statistical analyses.
- Google Analytics is a web analysis service provided by Google, which is used for purposes of market research and ensuring that the service meets user requirements. Google Analytics uses "cookies", which are placed on your computer to make it possible to analyse how you make use of the service. The information generated by the cookies about your use of the service (including your pseudonymised IP address) is as a rule transmitted to and stored by Google on servers in the United States . Google uses this information in order to evaluate your use of the service and to create reports on activities for the operator of the service. Google may also transmit this information to third parties if this is prescribed by law, or if third parties process the data on behalf of Google. On no account will Google connect your IP address with other Google data. At https://tools.google.com/dlpage/gaoptout?hl=en-GB you can, with effect for the future, opt out of the recording and saving of your data at any time. In addition we use Google Analytics remarketing and reports on demographic features and interests in order to display to website visitors relevant advertisements on the partner websites of the Google display and search network. The saving of cookies makes it possible to analyse user behaviour and activate interest-based advertising.
DPD uses third-party software to improve service, monitor website performance and ensure a reliable service.
- Fabric.IO / Crashlytics (www.crashlytics.com) - Allows our developers and technical teams to measure and monitor the performance of applications and infrastructure
- New Relic (https://newrelic.com/about)- Allows our developers and technical teams to measure and monitor the performance of applications and infrastructure
- Localz (https://localz.com/last-mile-delivery/) to provide the push notification and location services. The location services in use within the YourDPD app are provided to us using an API from Localz that notifies us if an App user is close to the original delivery point. This informs our drivers whether or not they should return to the delivery point to attempt to re-deliver any parcels that were not successfully delivered earlier in the day.
You may also write to us at;
DPDgroup UK Ltd, Roebuck Lane, Smethwick, B66 1BY