Privacy Policy

1. Who we are

Vendaru (vendaru.com) is a peer-to-peer courier marketplace for the UK. We are the controller of the personal data described in this policy, which means we decide why and how it is used.

• Trading name: Vendaru
• Legal entity: [OWNER TO CONFIRM: registered company name, company number and registered office address. The old pages said "Vendaru UK Ltd, London"; confirm before publishing]
• ICO registration number: [OWNER TO CONFIRM: ICO registration number, or confirm that an exemption applies]
• Data protection officer: we have not appointed one [OWNER TO CONFIRM: confirm whether one is required]
• Privacy contact: use the Help form (choose "Account") or email privacy@vendaru.com [OWNER TO CONFIRM: this mailbox exists and is monitored]

2. What we collect

Account details

• Your name, email address, an optional phone number (only our support team can see it) and password. The password is stored only as a one-way bcrypt hash, so we can't read or recover it.
• Delivery details you enter when placing an order: a contact name for each end of the trip (which can be someone else's, such as the recipient), how the parcel is to be handed over, any instructions (for example a gate code), and the parcel size. Only the courier who accepts the job sees the names and instructions. If you turn on PIN confirmation we also keep a 4-digit delivery PIN for that order, which is shown only to you. [OWNER TO CONFIRM: how long these are kept]
• Voice call records: which two people called each other about which order, when, and for how long. The audio itself goes directly between the two phones: it is not recorded, not stored and does not pass through our servers. Setting up a call uses a connection-helper (STUN) server, which sees the device's IP address while the call is being set up (Google's public STUN server by default). [OWNER TO CONFIRM: any TURN relay provider you add, and how long call records are kept]
• Whether you are a customer or a courier, when the account was created, and whether it is suspended (and the reason we showed you).
• When you agreed to our Terms and Privacy Policy, which version (currently 2026-09-19), and, for couriers, when you agreed to location sharing.

Jobs (parcels you post or deliver)

• The pickup and drop-off addresses you enter, and their map coordinates, the road route between them, the distance, the price, your chosen pickup time (or "now") and the time each stage happened (posted, accepted, collected, delivered or cancelled).
• Which customer and which courier a job belongs to.
• A private tracking link secret for each job, so the customer can share a limited tracking page with the person receiving the parcel.
• Other people's details. An address usually belongs to someone else, such as the person receiving the parcel. There is no separate recipient name or phone field, so please put only what a courier needs to find the address, and let the recipient know you are sending them something.

Location

• Customers: your device position is used only if you press "use my location". It is sent to our server to look up an address and is not stored on its own.
• Couriers: after you press Start order on an accepted job (accepting a job shares nothing), while the app is open, your device position is sent roughly every 10 seconds until the job ends. One latest position per job is kept and it is cleared when the job is delivered, cancelled or handed back.
• The full detail is in our Location Tracking Policy.

Photos and messages

• The courier's proof photos at pickup and at delivery. They can show people, houses, number plates or the inside of a doorway, and they may carry hidden details such as the time and place they were taken.
• Chat messages between the customer and the courier on an active job, with the sender's name and role and the time. Please don't put anything in chat you would not want the other person to keep.

Payments and refunds

• For each job: the amount, the payment status (unpaid, paid, partially refunded, refunded, void) and when it changed.
• Refund requests: the reason you chose (damaged, not delivered, courier no-show, wrong price, other), anything you wrote, the decision, the amount and the written reason we give if a request is refused.
• We do not take card payments yet and hold no card numbers. Payment is currently settled by hand (see the Terms). If we add a card processor, it will handle card details and we will update this policy first.

Support

• Support tickets and replies, including the name and email you give us if you write while signed out.

Security and technical data

• Sign-in: a session token kept in your browser's local storage for about 12 hours (see Cookies & Storage). Failed sign-in attempts are counted per account so we can lock out guessing.
• Abuse protection: short-lived counters keyed by IP address or account (for example how many requests, sign-ins or support messages in a period). They are cleaned up daily.
• Audit log: when someone at Vendaru takes an action on an account, job, payment or refund, we record who did it, what and when.
• Emails: we email you to confirm your address, to reset a password if you ask, and about the progress of your orders (listed, accepted, on the way, collected, delivered). These go through our email provider, Resend, and only ever mention the town and postcode area, never a full address. We do not send marketing emails.
• Hosting logs: our hosting provider (Vercel) logs standard request data such as IP address, browser type, the page or address requested and the time.

3. Why we use it, and our lawful basis

UK GDPR says we need a lawful basis for each use of personal data. These are ours. [SOLICITOR TO CONFIRM: the lawful bases below are suggested positions]

Where we rely on legitimate interests we have weighed them against your rights, and you can object (see "Your rights").

4. Who can see your data

We do not sell your data, rent it or trade it. We do not run advertising, and we do not use analytics or data brokers.

Other people on the platform

• Couriers browsing open jobs see the town and postcode of each end of a job (for example "Bolton BL1 1AA"), map pins rounded to about 100 metres (so they point to the postcode, not the door) and the road route between those pins. They do not see full addresses, exact coordinates or contact details until they accept it.
• Walker delivery — a courier with no car or bike can switch to Walker mode and is then offered a small parcel carried on foot, at most a mile by the walking route, between 7am and 9pm. They see the same limited information above while browsing, and only walker jobs; the reverse also applies, so a driver is never offered one.
• The courier who accepts a job then sees the full pickup and drop-off addresses and exact coordinates, the chat and the customer's name as shown on the job. Every open job is visible to every courier registered with us in the same mode, so please see this as a marketplace, not a private booking.
• The customer sees the courier's name, their proof photos, the chat and, while the parcel is on its way, the courier's live position.
• Anyone you give the tracking link to sees a limited page: the status, the drop-off area, a drop-off pin rounded to about 100 m and, only once the parcel has been collected, the courier's first name, rounded live position and distance remaining. They never see the pickup address, prices, photos, chat, other names or contact details. The link stops working 24 hours after the job is delivered or cancelled.

Vendaru

• The owner-only admin dashboard can see accounts, jobs, payments, refund requests and support tickets so we can handle refunds, payments and support. Admin actions are recorded in the audit log.

Service providers and others

See the next section for the companies whose services we use. We may also share data where the law requires it, for example with a court, regulator or the police, or where needed to protect someone's safety.

5. Third-party services

Some services we use are run by other organisations. Where a request comes from your device, that organisation sees your IP address. Where it comes from our server, they see our server's address and the content we send, not yours.

• The map library (Leaflet) is served from our own site, so loading it tells no third party that you visited.
• Photon, Nominatim, OSRM and the OpenStreetMap tile servers are free public services. We may replace them with contracted providers, and we will update this page if we do.
• We do not use analytics, advertising or error-tracking services and we set no cookies.

6. Transfers outside the UK

Vercel is a US company. Photon and OSRM are run from Germany, which the UK treats as adequate. Where personal data goes to a country without a UK adequacy decision we rely on approved safeguards, such as the UK Addendum to the standard contractual clauses in Vercel's data processing agreement. [OWNER TO CONFIRM: confirm the Vercel data processing agreement and UK Addendum are accepted on our account]

Our server functions are set to run in London. [OWNER TO CONFIRM: the region of the database and the photo store]

7. How long we keep data

Some of these periods are proposals we still have to confirm, and one or two are not yet automatic. We say so plainly rather than promise something the system doesn't do.

8. Your rights

Under UK GDPR you have the right to:

• be informed about how we use your data (this policy);
• access a copy of your data;
• correct data that is wrong;
• erasure, in some cases (we may have to keep records, such as financial records);
• restrict how we use your data, in some cases;
• data portability, to get your data in a usable format;
• object to uses based on legitimate interests;
• withdraw consent at any time, where we rely on it. This does not affect earlier use.

In the app you can download your data (as a JSON file), change your password and delete your account. For anything else, use the Help form or the privacy contact above. We reply within one month of receiving your request, and we may need to check who you are first. We don't charge a fee for a reasonable request.

If you are unhappy

Please tell us first so we can put it right. You can also complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, telephone 0303 123 1113.

9. Keeping data safe

• Connections to our site use HTTPS. Passwords are stored only as one-way hashes.
• We limit how often sign-in, support and other requests can be made, and lock an account out for a short time after 8 failed sign-in attempts in 15 minutes.
• Couriers see only the postcode and a pin rounded to about 100 metres until they accept a job.

No system is perfectly secure. If a personal data breach puts your rights at risk, we will tell you and the ICO as the law requires.

10. Extra care for courier location

A courier's live position is more sensitive than most of what we hold, because it shows where a real person is. That is why couriers agree to it separately at sign-up, only one latest position per job is kept, customers and recipients see less than we hold, and the position is cleared at the end of the job. We plan to carry out a data protection impact assessment (DPIA) for this. [OWNER TO CONFIRM: DPIA completed and date]

11. Age

Vendaru is for people aged 18 or over. We do not knowingly collect data from children. If you think a child has an account, please tell us through Help.

12. Automated decisions

We do not use automated decision-making or profiling that has legal or similarly significant effects on you. Prices come from a fixed formula, and decisions to deny a refund, suspend an account or remove someone are made by a person. A few refunds are approved automatically by rule (for example when you cancel before any courier accepts). Security limits, such as the sign-in lockout, apply automatically.

13. Cookies and local storage

We set no cookies. Your browser's local storage keeps your sign-in token and your light or dark theme choice. See Cookies & Storage for the list.

14. Changes to this policy

We will update this policy as the service changes. The version and date are at the top. If a change matters to you, we will tell you in the app and may ask you to accept the new version. Older versions are available on request.

15. Contact

Vendaru
Registered office: [OWNER TO CONFIRM: registered office address]
Help form: vendaru.com/help.html
Email: privacy@vendaru.com [OWNER TO CONFIRM: mailbox exists and is monitored]

See also: Terms, Location Tracking Policy, Cookies & Storage.