UDELIVER LTD is the data controller responsible for your personal data, except where this section says otherwise. Company number: 16146442. Registered address: UDELIVER Ltd 82a, James Carter Road, Mildenhall, United Kingdom, IP28 7DE. Email: dpo@udeliver.co. UDELIVER owns and runs Club by UDELIVER (club.udeliver.co and the Club app on Google Play), a courier platform used by Exclusive Members, Solo Members, Business Members and their teams, and Partners. We also run our own courier association on Club: UDELIVER Groups, led by Group Leaders, supporting Exclusive Members. Who is responsible for your data: UDELIVER is the controller for Exclusive Members, Group Leaders, applicants, Solo Members, Partners and customers. If you are on a Business Member's team (as a courier or Team Manager), the Business Member is the controller of your team data (how the team runs, work allocation, rates, pay records and private details) and UDELIVER hosts that data as its processor, acting only on the Business Member's instructions. UDELIVER remains the controller for your Club login, platform security and your activity on Jobs. If you are on a Business Member's team, ask that business first about your team data; we will help them respond, and you can always contact us.

Account (everyone): name, email, phone, profile photo, Club reference, and sign-in and security records. Private details: home address, date of birth, bank details, driving licence details, identity and right-to-work documents, and an emergency contact name and phone. Work records: rounds, shifts, schedules and attendance, courier login IDs, daily work records including photos of the courier device screen, vehicle rentals and vehicle-check reports with photos, time-off requests, and earnings records (declarations, statements, rent ledger, Payment Discrepancy claims and Failure Adjustments; these are records only and no money moves in the app). Messages: chat messages and photos, and read receipts if you turn them on. Jobs (Club's marketplace, when you use it): jobs posted and claimed, completion evidence, disputes, and ratings and reviews. Partner and Business Member details: business name, contacts and the people who act for the business. Technical: when you were last active, push-notification subscriptions if you turn them on, and routine server logs such as IP address and sign-in times. Customers of UDELIVER: name, email, phone number, collection and delivery addresses, delivery instructions and booking details. Club uses your camera or gallery only when you choose to add a photo; it does not track your device location, show ads or use advertising IDs. We never sell personal data.

To provide Club and each relationship on it: accounts, schedules, work records, Jobs, messages and earnings records. For Exclusive Members, to run UDELIVER's association: securing and representing your work with Delivery Partners, Group Leader support and training, the Confidence Framework, administering earnings and pursuing Payment Discrepancies. For Business Member teams, only as the Business Member instructs. To keep tax and business records and meet legal duties, including right-to-work checks where they apply. To keep Club safe and fair: security, fraud prevention, vehicle checks, Jobs disputes and complaints.

We process personal data where necessary to perform our contract with you (running Club and your relationship on it), to meet our legal obligations (for example HMRC record-keeping and right-to-work checks), and for our legitimate interests in keeping Club safe, secure and fair. We send push notifications only with your consent, which you can withdraw at any time in the app or your phone settings. For Business Member teams, the Business Member decides the legal basis for its own team data.

You can see your own data. Group Leaders see their Group's Exclusive Members' work, schedule, contact, vehicle, time-off, message and earnings information. Team Managers see only their own team. Private details (home address, date of birth, bank details and identity documents) are visible only to you and those who administer your relationship: UDELIVER's Executives for Exclusive Members, and the Business Member's own administrators for Business Member teams. UDELIVER's Platform Admins never see a Business Member team's private details; Club's access rules are enforced in the database itself. On Jobs, the other side sees only what the Job needs: your name or business name, a general area (never your home address), the Job evidence and your ratings. Outside Club we share data only with: service providers who process it for us (Supabase for the database, sign-in and file storage, hosted in the EU; Netlify for hosting; Resend for account emails; Google for Google Play; browser push services for notifications; and Wix, LionWheel, Connecteam and Zapier for UDELIVER bookings and operations); Delivery Partners such as Evri, only for Exclusive Members' work, including arranging rounds and pursuing Payment Discrepancies; and authorities, insurers and others where needed for disputes, incidents, fraud prevention, or legal and regulatory requests, for example HMRC, the Home Office or the police.

Some of our service providers process data outside the United Kingdom, including in the EU and the USA. Where this happens, we rely on UK adequacy regulations (including the UK-US data bridge) or the ICO's approved contract terms.

Exclusive Members and applicants: kept while active and for up to 6 months after leaving. Business Member teams: kept as the Business Member decides; we delete it on their instruction or when they leave Club. Solo Members and Partners: kept while the account is open and for up to 6 months after it closes. Jobs records (evidence, disputes, ratings): up to 2 years after the Job, for disputes and trust. Pay, tax and payment records: 6 years after the end of the tax year they relate to, as HMRC requires. Customer data is retained as necessary to provide services and for a limited period for support, disputes or legal requirements. We keep data longer only if it is needed for a legal claim.

You have the right to access, correct or delete your data, restrict or object to processing, and receive a copy to take elsewhere. Contact dpo@udeliver.co; we reply within one month. On a Business Member team you can also ask the business directly. Deleting your Club account: Exclusive Members, Solo Members and Partners can email dpo@udeliver.co from their account email; Business Member team members can ask their Business Member, or email us and we will pass it on. We delete everything except records we must keep by law and confirm when it is done. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Data is encrypted in transit (HTTPS) and at rest by our database provider. Access is restricted by role and protected by passwords, and Club's access rules are enforced in the database itself, so each person reaches only the data they are allowed to see.

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated. If a change is significant, we will also tell Club users in the app.

For any questions or data requests, contact dpo@udeliver.co.