Privacy Policy

1. Data controller

The data controller responsible for your personal data is ITEMGO TECHNOLOGY LTD, a company registered in England and Wales (company number 17249762), with its registered office at Bartle House, Oxford Court, Manchester, M2 3WQ, United Kingdom.

You can contact our Data Protection lead at [email protected] or by post at the registered address above.

2. Information the ItemGO Driver app collects

To provide the delivery and moving service, ItemGO Driver collects and processes the following categories of data.

2.1 Account and identity data

• Full name, email address, mobile phone number
• Password (stored as a one-way hash; never stored in plain text)
• Date of birth, right-to-work status
• Driving licence number and expiry date
• National Insurance number, DBS check status and reference number
• Vehicle make, model, year, registration plate, insurance and MOT details
• Profile photograph (optional)

2.2 Location data

• Precise GPS location while the app is open or running in the foreground, used to match you with nearby bookings, provide navigation, and update customers on the status of their delivery.
• Approximate location derived from IP address and network metadata.
• You can revoke location permission at any time in your device settings. Some features will not work without location access.

2.3 Device and usage data

• IP address, device model, operating system version, app version, language, time zone
• Crash logs, performance metrics and diagnostics via Firebase Crashlytics
• Push notification token (FCM) used to send booking alerts

2.4 Photographs and documents

• Photographs you upload as proof of delivery (parcel delivered, signature, customer collection)
• Photographs of vehicle, driving licence, insurance, MOT documents used for verification

2.5 Payment and financial data

• Bank account details (sort code and account number) for driver payouts
• Payout history, earnings, and tax-relevant transaction records
• Card payments taken from customers are processed by Stripe Payments Europe Ltd; we do not see or store full card numbers on our servers.

2.6 Communications

• In-app messages you send or receive in connection with a booking
• Support correspondence (email, in-app chat)

3. How we use your data

We use the data described above for the following purposes. The lawful basis under UK GDPR is shown for each purpose.

4. Who we share your data with

Stripe processes payments for both apps. Your card details are entered directly with Stripe and never reach ItemGo: what we hold is a customer reference and a payment-method reference, so we can charge you when a driver accepts your booking, as described in our Terms of Service.

Resend delivers our transactional emails (booking confirmations, receipts and notices about your payment). It receives your email address and the content of that message.

This policy covers both the customer app and the driver app. If you use the customer app, we also hold the details needed to perform your bookings: your name and phone number, the pickup and delivery addresses you give us, what was carried, the progress of the booking, any photos you or the driver added as proof of delivery, and records of your payments.

We do not sell personal data, and we do not share it for marketing purposes. We share data only with the recipients below, and only the minimum required to deliver the service.

• Customers: first name, profile photo (if provided), current location during an active booking, and contact details needed to complete a pickup or delivery.
• Payment processors: Stripe Payments Europe Ltd processes card payments and bank payouts under their own privacy terms (https://stripe.com/privacy).
• Cloud and infrastructure: Google Firebase (hosting, authentication, Firestore, Cloud Functions, Cloud Storage, Crashlytics, Cloud Messaging) and Mapbox/OpenStreetMap (mapping tiles). These act as data processors under written DPAs.
• Verification partners: third-party identity and DBS check providers when you apply to drive with us.
• Authorities: HMRC, our accountants, auditors, insurers, and law-enforcement or regulators where we are legally required to do so.

5. International transfers

Some of our processors (notably Google Firebase and Stripe) may store or process data outside the United Kingdom, including in the United States and the European Economic Area. Where data is transferred outside the UK, we rely on the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or another lawful transfer mechanism recognised under UK GDPR.

6. How long we keep your data

• Active driver account data: retained while your account is open.
• After account closure: most personal data is deleted within 30 days, except where we are required to keep it longer (for example, tax and accounting records are kept for 6 years).
• Backups: residual data may persist in encrypted backups for up to 90 days before being overwritten.

7. Your rights under UK GDPR

You have the right to:

To exercise these rights, contact [email protected]. We will respond within 30 days.

You can also complain to the ICO at https://ico.org.uk/make-a-complaint/.

8. Children's privacy

ItemGO Driver is intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with data, contact [email protected] and we will delete it.

9. Account deletion

You can request account deletion at any time from the in-app Settings screen, or by emailing [email protected]. Deletion is processed within 30 days, subject to the legal retention exceptions in section 6.

10. Security

We use industry-standard safeguards: TLS 1.2+ encryption in transit, AES-256 encryption at rest in Google Cloud, role-based access control, audit logging, and segregation between production and development environments. No system is perfectly secure; if we become aware of a personal data breach affecting you, we will notify you and the ICO as required by law.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date above and, for material changes, notify you in the app or by email at least 14 days before the change takes effect.