Privacy Notice - Couriers
Welcome to Evri's Privacy Notice. We are committed to protecting your personal information, and this notice explains how we handle your data.
This notice applies when we engage your services to deliver parcels to customers. It also outlines your privacy rights and how the law protects you.
Please read our full privacy policy for more information.
At Evri, we take your privacy seriously. We are fully dedicated to safeguarding your personal information.
The company responsible for your data is Evri Limited, registered with the ICO under number Z4921268. If you have any questions about how we protect your privacy, you can find our contact details at the end of this notice.
We have a dedicated Data Protection Officer (DPO), Richa Bhuttar, who oversees all matters related to privacy and this notice.
It’s important to us that your information is accurate and up to date. Please let us know if your personal details change during your relationship with us.
The Data We Collect About You
We collect and process different types of personal data about you, categorised as follows:
- Identity Data: Includes your first name, last name, courier ID (or similar identifier), photo, and title.
- Contact Data: Includes correspondence address, business address, email address, and telephone numbers.
- Financial Data: Includes bank account details for payment purposes.
- Technical Data: Includes internet protocol (IP) address, login data, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access Evri sites or courier applications.
- Usage Data: Includes information about how you use our website, courier application, products, and services.
- Criminal Conviction Data: Includes a record of criminal convictions, as provided by the Disclosure & Barring Service (DBS) or Disclosure Scotland Certificate.
- Driving Event (Telematics) Data: Includes data about your driving behaviour, such as speed and braking patterns.
Collection of Personal Data
We process your personal data only when necessary. The grounds for processing are as follows:
- Contractual Necessity: We process your personal data where necessary for the performance of a contract with you, or to take steps at your request before entering into a contract. For example, we need your information to pay you, manage your courier role, and provide you with benefits.
- Legal Obligation: We process your data when required to comply with legal obligations, such as tax or employment laws.
- Legitimate Interests: We process your data based on legitimate business interests, provided these are not overridden by your rights or interests in your personal data. Examples include monitoring and improving our services and preventing fraud.
Special Category Data
Certain categories of personal data are considered sensitive and are subject to additional protections. Special category data includes data about your health, genetic or biometric data, sex life, sexual orientation, racial or ethnic origin, political opinions, religious beliefs, and trade union membership. For processing these categories, we rely on the following grounds:
- Employment Law Obligations: We process this data to fulfil our obligations under employment law, such as ensuring workplace safety.
- Substantial Public Interest: Processing may be necessary for reasons of substantial public interest, such as preventing and detecting unlawful acts or ensuring equal opportunities.
- Protection of Life: Processing may be necessary to protect your life or that of another person in emergencies.
- Legal Claims: Processing is necessary for the establishment, exercise, or defence of legal claims.
Evri may collect and process the following types of special category data:
- Data related to absence for the purpose of managing attendance and absence procedures.
- Information about your physical or mental health, medical condition, or disability status to ensure workplace safety and determine your fitness for work.
- Details about your racial and ethnic origin, sexual orientation, religion or beliefs, and disability status to support equal opportunity monitoring and reporting.
In some cases, we may ask for your consent to process certain types of data. If consent is required, we will request it from you directly (either through a fair processing notice or otherwise) or from a third party acting on our behalf. We will clearly explain what we are asking your consent for.
Please note that agreeing to any such request is not a condition or requirement of your relationship with us. You are free to decline any request for consent without it affecting your relationship with Evri.
How we use your information
We use your information in various ways, depending on the type of data we collect. Below, you'll find details on how we use your data, why we use it, and the legal grounds for doing so.
How We Use Your Name, Identity, and Contact Details
| What We Do | Why We Do It | Lawful Basis for Processing |
|---|---|---|
| What We DoRegister you in our courier systems | Why We Do ItTo add you to our job systems and allow you to receive job alerts | Lawful Basis for ProcessingYou have provided your consent, or processing is necessary for Evri’s legitimate interests |
| What We DoContact you about opportunities or your application | Why We Do ItTo keep you updated with available roles and/or your application status | Lawful Basis for ProcessingYou have provided your consent, or processing is necessary for Evri’s legitimate interests |
| What We DoRegister you as a courier | Why We Do ItTo add you to our systems | Lawful Basis for ProcessingProcessing is necessary for the performance of a contract |
| What We DoContact you via post, email, or text message to send service messages or correspondence | Why We Do ItTo manage and maintain our relationship with you | Lawful Basis for ProcessingProcessing is necessary for the performance of a contract |
| What We DoTo arrange and/or confirm appropriate insurance | Why We Do ItTo ensure adequate insurance coverage for courier duties | Lawful Basis for ProcessingProcessing is necessary for Evri’s legitimate interests |
| What We DoAsk you to leave a review or take a survey | Why We Do ItTo better understand your experience with Evri, to continually improve services | Lawful Basis for ProcessingProcessing is necessary for Evri’s legitimate interests |
| What We DoAssess pension contributions and automate enrolment | Why We Do ItTo enable the ongoing assessment for automation into the pension scheme as well as calculating our contribution payable to the pension provider | Lawful Basis for ProcessingProcessing is necessary for Evri to comply with its legal obligations |
| What We DoPersonalisation of your courier profile | Why We Do ItTo enable better customer services by informing customers who will be delivering their parcel | Lawful Basis for ProcessingProcessing is necessary for Evri’s legitimate interests |
| What We DoWe provide necessary information to clients and law enforcement so they can take appropriate action if a crime, like parcel theft, is suspected | Why We Do ItThis helps ensure that any potential crime is investigated, and the right steps are taken to resolve the situation | Lawful Basis for ProcessingProcessing is necessary for Evri’s legitimate interests |
How We Use Your Financial Data
| What We Do | Why We Do It | Lawful Basis for Processing |
|---|---|---|
| What We DoIssue payments | Why We Do ItTo pay you for your work | Lawful Basis for ProcessingProcessing is necessary for the performance of a contract |
| What We DoFraud prevention and detection | Why We Do ItTo prevent and detect fraud against either you or Evri | Lawful Basis for ProcessingProcessing is necessary for Evri’s legitimate interests |
| What We DoProvide you with courier benefits | Why We Do ItTo enable you to access courier benefits and make the on-demand pay platform available | Lawful Basis for ProcessingYou have provided your consent, or processing is necessary for the performance of a contract |
How We Use Your Contact History With Us
| What We Do | Why We Do It | Lawful Basis for Processing |
|---|---|---|
| What We DoProvide support to our couriers | Why We Do ItTo ensure you receive appropriate assistance with any service enquiries you make | Lawful Basis for ProcessingYou have provided your consent, or processing is necessary for the performance of a contract |
| What We DoTrain our staff | Why We Do ItTo ensure we can provide you with the best possible service when you contact us | Lawful Basis for ProcessingProcessing is necessary for Evri’s legitimate interests |
How We Use Performance Data
| What We Do | Why We Do It | Lawful Basis for Processing |
|---|---|---|
| What We DoWe use information about your performance as a courier | Why We Do ItTo continually improve our service to clients and customers | Lawful Basis for ProcessingProcessing is necessary for Evri’s legitimate interests |
How We Use Technical Data
| What We Do | Why We Do It | Lawful Basis for Processing |
|---|---|---|
| What We DoUse data analytics to improve our website, products/services, marketing, customer relationships, and experiences | Why We Do ItTo define customer types for our products and services, to keep our website updated and relevant, and to inform our marketing strategy | Lawful Basis for ProcessingProcessing is necessary for Evri’s legitimate interests |
| What We DoAdminister and protect our business and website (including troubleshooting, data analysis, testing, system maintenance, support, reporting, and hosting data) | Why We Do ItFor running our business, providing administration and IT services, network security, and preventing fraud | Lawful Basis for ProcessingProcessing is necessary for Evri’s legitimate interests |
| What We DoCollect information related to the type of mobile device being used when installing the courier application | Why We Do ItTo manage the ongoing provision of the courier application | Lawful Basis for ProcessingProcessing is necessary for Evri’s legitimate interests |
How We Use Criminal Conviction Data
| What We Do | Why We Do It | Lawful Basis for Processing |
|---|---|---|
| What We DoRequest criminal conviction data in the event of an incident involving theft or fraud against our business or to protect our customers | Why We Do ItTo support any investigation relating to incidents or tips from the public to protect you, our customers or Evri | Lawful Basis for ProcessingProcessing is necessary for the performance of a contract |
How We Use Driving Event (Vehicle Telematics) Data
| What We Do | Why We Do It | Lawful Basis for Processing |
|---|---|---|
| What We DoUse telematics information collected from you to monitor driving statistics | Why We Do ItTo inform strategic decisions on our sustainability agenda | Lawful Basis for ProcessingProcessing is necessary for Evri’s legitimate interests |
| What We DoShare anonymised data with the provider of our courier insurance product | Why We Do ItTo allow the insurance provider to monitor their risk associated with the provision of their policy | Lawful Basis for ProcessingProcessing is necessary for Evri’s legitimate interests |
Anonymisation and Aggregation of Data
We may anonymise and aggregate personal data so that it no longer identifies you. This aggregated data is used for various purposes, including testing IT systems, conducting research, performing data analysis, improving our website and app, and developing new products and services.
Cognito IQ Mobile/CiQ Mobile App Installation & Usage
The Cognito IQ Mobile/CiQ Mobile App operates in a secure, sandboxed area on your device, ensuring it can only access specific functionalities that are essential for its operation, as controlled by the permissions granted by you. These permissions include:
- GPS: To enable location tracking for correct parcel delivery, but only when you are logged in.
- Camera: To take photos for safe place delivery and to scan barcodes on parcels.
- Audio: Required by the Cordova application framework, though the app does not utilise this functionality.
- Phone: To retrieve signal strength and network status information. The app will not make or monitor phone calls.
- System: To enable navigation software to download and store maps and temporarily store photos while being processed (never transferred to the device).
Additionally, the mobile application does not access any files it has not created.
Sharing your information
We do not sell any of your personal data to third parties, including your name, address, email, or phone number. We are committed to earning and maintaining your trust, which is essential for our operations.
However, we may share your data with the following categories of companies, strictly as necessary to provide our services:
- Logistical service providers: Including companies managing handheld terminals, warehouses, and fleet management/insurance providers.
- Professional service providers: Including website hosts and companies that support our benefits or pension services.
- HM Revenue & Customs: And other regulatory authorities or law enforcement agencies in the United Kingdom who require reporting of certain activities.
- Clients: In the event they need to bring civil claims against couriers for incidents such as parcel theft.
- Independent assurance providers: Including auditors and external legal representatives.
- Benefits providers: To enable you to access courier benefits and make the on-demand pay platform available (eg Onsi).
We require all third parties to respect the security of your personal data and process it in compliance with applicable laws. We do not permit third-party service providers to use your personal data for their own purposes, and they may only process your data according to our instructions.
How Long We Keep Your Data
We will retain your personal data for as long as you are actively providing services as a courier for us, or for as long as it is necessary to provide the services to you.
If you cease providing services to us, we will retain your data for the duration necessary to meet our legal obligations, including for tax and accounting purposes. By law, we must keep basic information about our couriers (including Contact, Identity, Financial, and Transaction Data) for six years after you stop providing services, for tax and reporting requirements.
In certain situations, we may retain some of your information beyond this period, such as to resolve disputes, prevent fraud, or enforce our terms and conditions. Additionally, we may retain your data if it is necessary to comply with other legal or regulatory requirements.
If reasonably necessary, we may also retain your information to support legal claims or to ensure we can continue to provide assistance, such as for issues relating to deliveries or insurance.
Once your data is no longer required for these purposes, it will be securely deleted or anonymised.
All users
Cookies
For information on how we use cookies at Evri, please see our Cookie Policy at https://www.evri.com/cookie-policy
Cross-Border Transfers
Where permitted by law, we may transfer your personal data to countries within the European Economic Area (EEA). The safeguards in place for data transfers within the UK are deemed sufficient by the European Commission, so we don’t need additional controls.
In certain cases, we may also transfer your personal data to countries outside the EEA, which may not offer the same level of data protection as the UK. These transfers will be necessary to perform our contract with you or for the other purposes outlined in this notice.
To ensure your data is protected when transferred outside the EEA, Evri has implemented safeguards such as standard contractual clauses or supplementary measures to secure the transfer of your data to those countries.
Artificial intelligence (AI) and Your Personal Data
We are committed to protecting your privacy and ensuring the responsible use of AI technologies. Please note the following regarding our use of AI:
- Special Category Data: We do not authorise the use of special category data within generative AI systems. This includes sensitive information such as racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, health data, and data concerning a person's sex life or sexual orientation.
- Personal Data: Personal data may be utilised within generative AI systems. However, it is processed within a protective AI environment designed to safeguard your information. Importantly, this data is not used to train the AI model, ensuring that your personal information remains secure and confidential. We recommend, where possible, that personal data is not used. If processing personal data is necessary, it will be limited to the purpose it is aiming to achieve.
Data Security
We take the security of your personal data seriously and have implemented appropriate measures to prevent it from being accidentally lost, accessed without authorisation, or misused. We limit access to your personal data to only those employees, agents, contractors, and third parties who need it for business purposes. They will only process your data based on our instructions and are obligated to keep it confidential.
In the event of a suspected data breach, we have procedures in place to address it. If required by law, we will notify you and the relevant authorities of any breach.
Your Legal Rights
You have several rights regarding your personal data. These include:
- Request Access: You have the right to access the personal information we hold about you, enabling you to receive a copy and check that we are processing it lawfully.
- Request Correction: You can request that we correct any inaccurate personal data we hold about you. You can also update most of this information through your account.
- Request Deletion: You have the right to request that we delete or stop processing your data in certain circumstances, especially if we no longer have a valid reason to process it. We may not always be able to fulfil your request for deletion if we need to retain the data for legal reasons, but we will inform you if this applies.
- Request Transfer: You can request that we transfer your data to you or another service provider in a structured, commonly used, and machine-readable format. This applies to data we process based on your consent or when fulfilling a contract with you.
- Object to Processing: If we are processing your data based on legitimate interests (or those of a third party), you can object if you feel it impacts your rights and freedoms. In some cases, we may demonstrate that our legitimate interests outweigh your rights.
- Request Restriction of Processing: You can ask us to suspend the processing of your personal data in certain situations, such as:
- If you want us to verify the accuracy of the data.
- If you believe the data is being processed unlawfully but don’t want it deleted.
- If you need the data for legal claims even if we no longer need it.
- If you’ve objected to our use of the data and we need to verify whether we have overriding grounds to continue using it. - Withdraw Consent: If we are processing your personal data based on your consent, you can withdraw it at any time. This will not affect the lawfulness of any processing before you withdrew your consent. Please note that if you withdraw your consent, we may not be able to provide certain products or services to you, and we will inform you if that’s the case.
- Direct Marketing: If you receive direct marketing from us, you can withdraw your consent via the ‘Unsubscribe’ link in the email or through your account settings.
You will not typically have to pay a fee to access your personal data or to exercise any of the rights listed above. However, if your request is clearly unfounded, repetitive, or excessive, we may charge a reasonable fee or refuse to comply with your request.
To process your request, we may need to verify your identity to ensure that personal data is not disclosed to anyone who shouldn’t have access to it. We may also contact you for additional information to help speed up our response.
Contacting Us
If you have questions about this privacy notice, wish to exercise your legal rights, or make a complaint about how we are processing your personal data, you can contact us by:
- Email: Reach our Data Protection Officer (DPO) at data.protection@evri.com
- By Mail: You can also write to us at:
Data Protection Team
Evri
Capitol House
1 Capitol Close
Morley
Leeds
LS27 0WH
We aim to respond to all legitimate requests within one month. If your request is complex or if you've made multiple requests, it might take us longer, but we will notify you and keep you updated.
Complaints
If you're unhappy with how we collect or use your personal data, you can file a complaint with us by emailing data.protection@evri.com or sending it by regular mail to the address above.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection authority. You can find more information on their website at www.ico.org.uk. Our ICO registration number is Z4921268.
This notice was last updated in June 2025.