Sign in Post a delivery

Privacy notice

ClickCourier is operated by ClickDesign. This notice covers the website at courier.clickdesign.uk and the ClickCourier Driver app for Android. It explains what we collect, why, who sees it and how long we keep it.

Last updated 8 September 2026.

Who we are

ClickDesign is the data controller for the information described here. For anything about your data, including a request to see or delete it, email marketing@clickdesign.uk.

What we collect, and why

Everyone with an account

  • Your name, email address and mobile number — to identify you, to sign you in, and so the other party to a delivery can reach you on the day.
  • Your password, stored only as a salted hash. We cannot read it, and neither can anyone who obtains a copy of our database.
  • Your company name and number, if you register as a business.

Customers posting a delivery

  • Collection and delivery addresses, contact names and phone numbers, and any access notes you add — a carrier cannot do the job without them.
  • What is being moved: description, quantity, weight, dimensions and any photographs you attach.

Carriers

  • Your insurance certificates — Goods in Transit and Hire & Reward — with the insurer, policy number, cover and expiry date. A person checks these before you can bid. That check is the point of the platform.
  • Your vehicles and drivers, and the quotes you place.

Drivers using the app

  • Your location, recorded only at the moment you confirm a collection or a delivery. It is attached to that proof as evidence of where the job was done. We do not track you between stops, and the app does not use location in the background.
  • Photographs you take as proof of delivery, and the signature captured on screen.
  • Your handset: make and model, app version, and a token that keeps you signed in. Your transport manager can sign a lost phone out without changing your password.

Our lawful basis

For running a delivery you have posted or accepted, the basis is performance of a contract. For verifying carrier insurance, keeping proof of delivery, and preventing fraud, it is our legitimate interests in operating a marketplace people can rely on — and, for insurance and tax records, legal obligation.

Who sees what

  • Carriers bidding on a job see the outward postcodes only — "M33 to B1" — never the full address, the contact name or the phone number. Those are released to the one carrier whose quote is accepted, and to nobody else. This is enforced by the software, not by policy.
  • The customer sees the proof of delivery: the signature, the photographs, the name of whoever signed, and the time and place.
  • Drivers see the job they are assigned to, and no others.
  • We do not sell your data, and we do not use it for advertising.

Who processes it for us

  • Google (Gmail) sends our email — confirmations, password resets and delivery updates.
  • Our hosting provider runs the servers holding the website and database, located in the United Kingdom.

Both act on our instructions and cannot use your data for their own purposes.

How long we keep it

  • Delivery records, signatures and proof-of-delivery photographs: six years. They are the evidence in a dispute about whether goods arrived, and HMRC requires the financial records behind them for the same period.
  • Your account: for as long as it is open, and then as part of the delivery records above.
  • Insurance certificates: while current, and for six years after the last job they covered.

Your rights

Under UK GDPR you can ask for a copy of your data, ask us to correct it, ask us to delete it, object to how we use it, or ask for it in a portable form. Email marketing@clickdesign.uk and we will respond within one month.

Deletion has one limit worth stating plainly. Where a delivery has taken place, we keep the record of it and its proof of delivery for the six years described above, because it is evidence in a dispute and a record we are required to hold. We will delete everything not covered by that.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk.

Security

  • Everything travels over HTTPS. The driver app refuses to send anything over an unencrypted connection at all.
  • Passwords are stored only as salted hashes.
  • Signatures and photographs are held outside the public web folder and are served only to people entitled to see that delivery.
  • Changing your password signs every device out, including the app on your phone.

Cookies

We set one cookie, to keep you signed in. There are no advertising or analytics cookies, so there is no consent banner to dismiss.

Children

ClickCourier is a business service and is not intended for anyone under 18. We do not knowingly collect data about children.

Changes

If we change this notice we will update the date at the top. If a change materially affects how we use your data, we will tell account holders by email.