Loading Vanly Marketplace

Getting things ready...

Privacy Policy

Policy Version: This Privacy Policy was created on 11 December 2025.

This website, vanly-marketplace.co.uk and any mobile application(s) (collectively, the “Site”) is operated by Vanly Marketplace Ltd, a UK-registered company (Company Number 15451462, Registered Office: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ).

Vanly is a digital logistics marketplace platform enabling Shippers to connect with independent Drivers and Fleet Operators. Vanly acts as principal to Shippers, contracting directly for delivery jobs and fulfilling them through vetted, self-employed Drivers and Fleet Operators. Vanly is a technology-driven intermediary for on-demand delivery and is not a courier company employing drivers.

To use services via the Site, you must create an account. Browsing the Site does not require registration. By creating an account as a Shipper, Driver, or Fleet Operator or by accessing the Site you agree to be legally bound by this Privacy Policy.

This Privacy Policy applies to all Users of the Site, including Shippers, Drivers, and Fleet Operators. It overrides any privacy policy imposed by application distribution platforms such as iOS or Android.

This Privacy Policy, together with our Terms & Conditions , explains what information we collect, how and why we use it, the lawful basis for processing, and your rights. Please retain a copy for your records.

Data Controller Information

Vanly Marketplace Ltd is the data controller of personal data collected via the Site. This means we are legally responsible for determining how and why your personal data is processed.

We process personal data in accordance with:

  • • The UK General Data Protection Regulation (UK GDPR);
  • • The Data Protection Act 2018; and
  • • Where applicable, the EU General Data Protection Regulation (EU GDPR).

Children

Our Site is not intended for individuals under the age of 18. We do not knowingly collect or store personal data relating to children.

If you believe that personal data relating to a person under 18 has been provided to us, please contact us so we can delete it.

Scope of This Policy

This Privacy Policy applies only to your use of the Site and related services.

The Personal Data We Collect

The personal data we collect depends on your User Category (Shipper, Driver, or Fleet Operator) and how you interact with the Site.

  • • Account and Profile Data: Name, business name (if applicable), username, password, account role, and profile information.
  • • Identity and Contact Data: Name, date of birth (where required), home or business address, email address, telephone number, and emergency contact details (where applicable).
  • • Verification and Eligibility Data (Drivers & Fleet Operators): Right-to-work evidence, identity documents (passport or driving licence), address verification (e.g., utility bill), criminal record check data (where lawful), driver licence status, vehicle documentation (V5C, MOT), and insurance documents.
  • • Company and Tax Data: Company registration details, director/owner information (where required), VAT numbers, and invoicing/tax details.
  • • Billing and Transaction Data: Invoicing address, order history, delivery job history, amounts charged or paid, refunds/credits, and payment status. (Full card details are not stored where payments are processed by third-party providers.)
  • • Delivery and Operational Data: Collection and drop-off addresses, delivery instructions, contact details for job fulfilment, item descriptions, time windows, service level selected, communications, and incident reports.
  • • Location Data (Drivers): GPS location data collected during active jobs for dispatch, tracking, fraud prevention, service verification, and customer support.
  • • Proof of Delivery Data: Delivery photos, signatures, timestamps, and related notes submitted through the platform.
  • • Communications Data: Messages between Users and Vanly support, and communications routed through the platform.
  • • Technical, Device and Usage Data: IP address, browser type/version, device type, operating system, approximate location (from IP), page views, clickstream data, logs, and cookies or similar technologies.
  • • Feedback and Preference Data: Reviews, ratings, survey responses, and platform preferences.

We collect and use this personal data for the purposes described in the section titled “How and Why We Use Your Personal Data.”

How Your Personal Data Is Collected

We collect personal data in the following ways:

  • • Information you provide directly to us: When you create an account, complete onboarding, request or accept delivery jobs, submit verification documents, contact us, communicate through the platform, complete forms, or otherwise correspond with us.
  • • Information generated when you use the Site: Records of delivery jobs requested, accepted and completed, operational metrics (timestamps, status updates), proof-of-delivery submissions, and (for Drivers/Fleet Operators) GPS location data during active jobs.
  • • Information collected automatically: Through cookies and similar technologies, including Technical, Device and Usage Data.
  • • Information from third parties (where applicable):
    • • Identity, right-to-work, driving licence, insurance, vehicle and background check providers;
    • • Payment providers and banking partners (we do not store full card details);
    • • Public registers such as Companies House;
    • • Customers, recipients or counterparties involved in a delivery.
  • • Information from complaints and disputes: If you raise or are subject to a complaint, dispute or query, we may retain related information and records of correspondence.

You are responsible for ensuring that any personal data you provide about other individuals (for example, recipient contact details) is provided lawfully and accurately.

How and Why We Use Your Personal Data

Under UK data protection law, we will only process your personal data where we have a lawful basis:

  • • Contract: To perform a contract with you or take steps before entering into one.
  • • Legal Obligation: To comply with legal or regulatory requirements.
  • • Legitimate Interests: Where necessary for our business interests and not overridden by your rights.
  • • Consent: Where you have given consent (which you may withdraw at any time).
  • • Legal Claims: For the establishment, exercise or defence of legal claims.

Where we rely on legitimate interests, we balance those interests against your rights. You may request further information by contacting us.

Purposes for Processing Your Personal Data

1. Providing and Operating the Platform (Contract / Legitimate Interests)

  • • Create and manage accounts;
  • • Enable job requests, acceptance and completion;
  • • Dispatch and manage delivery jobs;
  • • Provide customer support and resolve operational issues;
  • • Maintain service security and performance.

2. Identity, Eligibility and Compliance Checks (Legal Obligation / Legitimate Interests / Contract)

  • • Verify identity and right-to-work;
  • • Verify driving licence, vehicle and insurance documentation;
  • • Conduct background checks where permitted;
  • • Manage vetting, approvals, suspensions and removals.

3. Location, Tracking and Proof of Delivery (Contract / Legitimate Interests)

  • • Collect GPS location data during active jobs only;
  • • Enable operational tracking and service verification;
  • • Capture proof-of-delivery signatures and photos.

Location data is not used for marketing, behavioural profiling, or advertising.

4. Payments, Billing and Accounting (Contract / Legal Obligation / Legitimate Interests)

  • • Process payments and invoices;
  • • Maintain accounting records;
  • • Comply with tax and financial regulations.

5. Communications and Service Messages (Contract / Legitimate Interests)

  • • Send job-related and administrative communications;
  • • Notify you of policy or service changes;
  • • Send security notices.

6. Fraud Prevention and Security (Legitimate Interests / Legal Obligation)

  • • Detect and prevent fraud or misuse;
  • • Enforce terms and protect Users and third parties.

7. Legal and Regulatory Compliance (Legal Obligation / Legal Claims)

  • • Comply with legal obligations;
  • • Respond to courts, regulators or law enforcement;
  • • Establish, exercise or defend legal claims.

8. Improving Our Services (Legitimate Interests)

  • • Analyse platform usage;
  • • Improve functionality and user experience;
  • • Develop new features.

At the time of this policy, we do not use analytics or marketing cookies (see “Cookies and Similar Technologies (Cookie Policy)”).

9. Marketing (Legitimate Interests / Consent)

  • • Send marketing communications to existing or former Users unless you opt out;
  • • Where required by law, obtain your consent before sending marketing communications.

Who We Share Your Personal Data With

  • • Other Users (for job fulfilment): Relevant delivery and contact details shared between Shippers and assigned Drivers/Fleet Operators.
  • • Service Providers and Vendors: Hosting providers, mapping services, communications providers, identity verification providers and technology partners.
  • • Payment and Banking Partners: Payment processors such as Stripe for payment handling and reconciliation.
  • • Professional Advisers: Lawyers, accountants, auditors and insurers (subject to confidentiality).
  • • Public Authorities and Regulators: Courts, regulators and law enforcement where legally required.
  • • Insurers: For claims handling, risk management and insurance compliance.

We require third-party service providers to protect personal data and use it only in accordance with applicable law. We do not sell your personal data.

How Long We Keep Your Personal Data

We retain your personal data only for as long as necessary for the purposes described in this Privacy Policy, including:

  • • For as long as you maintain an account with us and for a reasonable period afterwards to close the account and handle queries (account data may be retained for up to 6 years after closure);
  • • For as long as necessary to provide services and maintain records of jobs, payments, and communications;
  • • For any period required by applicable law or regulation (including accounting and tax requirements);
  • • For as long as reasonably required to establish, exercise or defend legal claims and conduct investigations.

Retention periods vary depending on the type of personal data and the purpose for which it was collected. When personal data is no longer required, it will be securely deleted or anonymised.

For clarity:

  • • GPS location data is retained for 12 months;
  • • Proof of Delivery data is retained for 3 years.

Transferring Your Personal Data Outside the UK and EEA

Data protection laws differ between countries. It may sometimes be necessary for us to transfer personal data outside the UK and European Economic Area (EEA).

We may transfer personal data to:

  • • Service providers located outside the UK and EEA, including in the United States;
  • • The UK, where personal data is transferred from the EEA.

We only transfer personal data outside the UK/EEA where lawful safeguards are in place, including:

  • • An adequacy regulation issued by the UK Government;
  • • An adequacy decision issued by the European Commission;
  • • Appropriate safeguards such as standard contractual clauses, together with enforceable rights and remedies;
  • • Where a specific exception under data protection law applies.

If we change the countries to which we transfer data or the safeguards we rely on, we will notify you.

Your Rights

Under the UK GDPR and EU GDPR, you have the following rights (free of charge in most cases):

  • • I. The right to fair processing and transparency;
  • • II. The right of access to your personal data;
  • • III. The right to rectification (correction of inaccurate data);
  • • IV. The right to erasure (“right to be forgotten”) in certain circumstances;
  • • V. The right to data portability in a structured, machine-readable format;
  • • VI. The right to object to direct marketing at any time;
  • • VII. The right to object to automated decision-making producing legal or significant effects;
  • • VIII. The right to object to processing in certain circumstances;
  • • IX. The right to restrict processing in certain circumstances.

For further information, please refer to guidance from the UK Information Commissioner’s Office (ICO).

To exercise any of these rights, please contact us at:

Vanly Marketplace Ltd
71-75 Shelton Street
Covent Garden
London
United Kingdom
WC2H 9JQ
Email: info@vanly-marketplace.co.uk

How to Complain

We hope to resolve any query or concern you may have regarding our use of your information.

You also have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner’s Office (ICO)
Website: https://ico.org.uk/concerns/
Telephone: 0303 123 1113

Changes to This Privacy Notice

The previous version of this Privacy Notice was last updated on 11 December 2025. We may update this Privacy Notice from time to time. Where we make material changes, we will notify you by email and/or by posting an updated version on the Site.

How to Contact Us

If you have any questions about this Privacy Policy or the personal data we hold about you, please contact:

Data Protection Officer
Vanly Marketplace Ltd
71-75 Shelton Street
Covent Garden
London
United Kingdom
WC2H 9JQ
Email: info@vanly-marketplace.co.uk