How Falux Courier (Falux One LTD) collects, uses, stores and protects personal data under the UK GDPR and Data Protection Act 2018.
The data controller for personal data collected through faluxcourier.co.uk and Falux Courier services is Falux One LTD, a company registered in England and Wales with registered address at 1 Water Vole Way, Doncaster, DN4 5JP. You can contact our data team at support@faluxone.co.uk.
We collect: your name, email address, phone number, collection and delivery addresses, payment details (processed by our PCI-compliant provider — we do not store full card numbers), the contents and weight of your consignment, signatures and proof-of-delivery photographs, and basic technical data (IP address, browser type, pages visited) when you use our website. We also collect consignment tracking events — including collection scan, depot arrival, vehicle departure, delivery attempt and final delivery confirmation — as part of our service delivery records. Where you use the quoting tool or booking form, session data including your input history may be temporarily held in a server-side session for up to 24 hours to support your booking journey.
We process your personal data on three lawful bases under Article 6 of the UK GDPR: contract performance (to fulfil your booking, deliver your consignment and invoice for the service); legal obligation (HMRC record keeping, anti-money-laundering checks where applicable); and legitimate interest (to manage our business, prevent fraud, train staff and improve our service). Where we send marketing emails, we do so only with your explicit opt-in consent and you can withdraw that consent at any time.
Booking, POD and invoice records are retained for seven years to satisfy HMRC and accounting requirements. Marketing contact records are kept until you unsubscribe. Website analytics are retained for 26 months. CCTV footage from depot premises (where applicable) is retained for 30 days unless required for an investigation.
We share your data only where strictly necessary to fulfill your contract: with our nominated payment processor; with Meta (WhatsApp Ireland Limited) for our operational instant messaging communications; with Microsoft (Azure / Microsoft Graph) for our transactional email infrastructure; with HMRC and other regulators where legally required; and with our professional advisers under confidentiality.
To complete your delivery, we securely share your consignment details (including delivery name, delivery address, and receiver contact phone numbers) with our vetted third-party subcontractor drivers and transport network partners. These subcontractors are legally and contractually bound to handle this data securely and are strictly prohibited from using your personal information for any alternative purpose, marketing, or retention. We do not sell personal data to third parties under any circumstances.
Under the UK GDPR you have the right to: access the personal data we hold about you; correct inaccurate data; have your data erased (subject to our retention obligations); restrict or object to processing; receive your data in a portable format; and withdraw consent. To exercise any of these rights, email support@faluxone.co.uk with your full name, the email address associated with your booking, and a clear description of your request. We will acknowledge within five working days and provide a substantive response within one calendar month. Where a request is complex or we receive multiple requests simultaneously, we may extend this period by a further two months and will notify you of the extension and reason within the first month.
Our website uses essential cookies for session management and load balancing. We do not use marketing or behavioural-tracking cookies without your consent. Analytics cookies, where used, anonymise IP addresses. You can refuse non-essential cookies through your browser without losing access to the booking system.
Some of our service providers (including Microsoft Azure) may store data in EEA, UK or other countries with adequate data protection arrangements. Where data is transferred outside the UK or EEA, we rely on Standard Contractual Clauses or equivalent safeguards approved by the UK ICO.
We protect data with TLS encryption in transit, encrypted-at-rest databases, role-based access controls and regular security review. All staff with access to personal data are trained in handling and confidentiality obligations and operate under a written data-handling policy. In the event of a personal data breach that is likely to pose a risk to individuals, we will notify the ICO within 72 hours and, where required, inform affected data subjects without undue delay. We conduct periodic access reviews to ensure staff permissions remain appropriate as roles change.
Our website may contain links to third-party sites, including payment portals and trust-signal pages. These sites operate their own privacy policies and we are not responsible for their data-handling practices. We encourage you to review the privacy policy of any third-party site you visit via a link from faluxcourier.co.uk before submitting personal data to that site.
If you believe we have mishandled your personal data, please email support@faluxone.co.uk first so we can investigate and resolve the matter promptly. You also have the right to lodge a complaint directly with the Information Commissioner's Office (ICO) at ico.org.uk or by phone on 0303 123 1113. We would, however, appreciate the opportunity to address your concerns before you contact the ICO.
We review this policy at least annually. Material changes are notified by email to active customers and posted on this page with a revised 'last updated' date. The current version was last updated on 21 June 2026.
Last updated: 21 June 2026.