1. Who we are
Sendlie is operated by Sendlie Ltd, registered in England and Wales under company number 17238942. We are the "data controller" for the personal information described in this policy. You can contact us at hello@sendlie.co.uk.
2. What personal data we collect
From customers
- Name, email address, phone number, postcode.
- Pickup and drop-off addresses you submit with each task.
- Item descriptions and instructions you provide.
- Payment information (handled by Stripe; we do not store full card details).
- Communication history with Sendlie and with runners on the platform.
- Device information, IP address, and browsing behaviour on our website (via analytics).
From runners
- Name, email, phone number, postcode, date of birth.
- Government-issued ID for verification.
- Vehicle type and availability.
- Bank account details for payouts.
- Location data while logged into the runner app.
- Performance data: jobs accepted, completed, rated.
3. Why we collect it (legal bases)
Under UK GDPR, we rely on the following legal bases for processing your data:
- Performance of a contract — to deliver the Sendlie service you've booked.
- Legitimate interests — to run our business, prevent fraud, improve our service, and communicate with you about your bookings.
- Consent — for marketing emails, which you can opt out of at any time.
- Legal obligation — to comply with UK tax, HMRC, and Companies House requirements.
4. Who we share your data with
We share the minimum necessary data with the following service providers:
- Stripe — for payment processing.
- Twilio — for SMS notifications and number masking.
- Google Maps — for address validation and routing.
- Tally — for waitlist and application forms.
- Hostinger — for website and email hosting.
- Our accountants — for bookkeeping and tax compliance.
We also share limited information between customers and runners as needed to complete a task: the runner sees the customer's first name, masked phone number, pickup and drop-off addresses, and instructions. The customer sees the runner's first name, photo, vehicle type, and live location during the job. Full phone numbers and home addresses are masked through our platform.
We do not sell your personal data to anyone, ever.
5. How long we keep your data
- Active account data: while your account is active, plus 2 years.
- Booking and transaction records: 6 years (UK tax law requirement).
- Communication history: 2 years from your last interaction.
- Runner ID verification: 2 years after the runner leaves the platform.
- Marketing email preferences: until you unsubscribe or close your account.
- Website analytics: 26 months (Google Analytics default).
6. Your rights
Under UK GDPR you have the following rights:
- Access — to ask what data we hold about you.
- Rectification — to correct inaccurate data.
- Erasure — to ask us to delete your data (subject to legal retention requirements).
- Restriction — to limit how we use your data.
- Portability — to request your data in a portable format.
- Objection — to object to certain types of processing, including marketing.
To exercise any of these rights, email hello@sendlie.co.uk. We will respond within one month.
You also have the right to complain to the UK Information Commissioner's Office (ICO) if you believe we've mishandled your data. Their website is ico.org.uk.
7. Cookies and analytics
Our website uses essential cookies to function and analytics cookies (Google Analytics or similar) to help us understand how people use the site. You can disable cookies in your browser settings, though some site features may not work properly without them.
8. Security
We take the security of your data seriously. All connections to our website are encrypted with SSL. Sensitive data is encrypted at rest. Access to personal data is limited to staff who need it to do their jobs. We will notify you within 72 hours of becoming aware of any data breach that affects you.
9. International transfers
Some of our service providers (notably Stripe and Google) process data outside the UK. Where they do, we ensure adequate safeguards are in place — typically through Standard Contractual Clauses or adequacy decisions recognised by the UK government.
10. Children
Sendlie is not for children. You must be 18 or older to use our service. We do not knowingly collect personal data from anyone under 18. If you believe we have, contact us and we will delete it.
11. Changes to this policy
We may update this policy from time to time. The "last updated" date at the top reflects the most recent change. Material changes will be communicated by email to active customers and runners.
12. Contact
For any questions about this privacy policy or how we handle your data, contact us at hello@sendlie.co.uk.