Privacy notice
Updated 29 Sep 2026
What personal data we hold, why, who else handles it, how long we keep it, and what you can ask us to do. It covers visitors to this site, people who email us, people we contact first, and the staff of the businesses we work with.
Who we are
True Carriage is the trading name of Daniel Collison, based in the United Kingdom. He decides how the personal data described here is used, which makes him its controller under UK data protection law.
Contact: [email protected]. If the business becomes a company, this page will say so and name it.
When you visit this site
- No cookies, no tracking tags. The site sets no cookies of its own and runs no advertising or tracking code.
- Hosting. Cloudflare hosts the site. Like any web host, its servers receive your IP address and browser details in order to deliver the page and protect the site from attack. If its security checks ever challenge a visit, Cloudflare may set a strictly necessary cookie to remember that you passed.
- Fonts. The page's fonts load from Google Fonts, so Google receives your IP address when the page loads.
- Pounds or dollars. To choose which currency to show, the page reads your browser's language and time zone. That happens in your browser. Nothing is sent to us.
Lawful basis: our legitimate interest in running a secure website.
When you email us
Both buttons on the site open an email to [email protected]. We hold what you send: your name, email address, company, what you write, and any files you attach. We use it to reply, to arrange a call, and, if you ask, to run an audit and talk about working together.
Lawful basis: steps you have asked us to take before any contract, and our legitimate interest in answering business enquiries.
If you send us carrier invoices or contracts
Carrier invoices carry the names and delivery addresses of the people your business sends parcels to. For that data, your business is the controller and we are its processor. We use it only to run the audit you asked for, on your instructions and under the data processing terms we agree with your business before any file is sent. We don't use recipients' names or phone numbers in the audit, and we delete the files within 7 days of your request or of the audit ending, whichever comes first.
If you received a parcel and want to know what happens to your details, ask the business that sent it. We will help them answer.
If we contacted you first
We contact people at UK businesses that ship parcels, by email and on LinkedIn, about checking their carrier invoices. We find names and work contact details in public sources such as company websites, Companies House and LinkedIn. We hold your name, role, company, work email address and a note of our messages.
You can tell us to stop at any time, by replying to any message or emailing [email protected]. We won't contact you again, and we keep only your email address on a do-not-contact list so that it stays that way.
Lawful basis: our legitimate interest in telling businesses about a service that may reduce what they pay their carriers. We only contact people in their work role, about their work.
If your business works with us
We hold the names, work email addresses and phone numbers of the staff we deal with, so that we can run the service, send reports and invoices, and keep the business records the law requires.
Lawful basis: the contract with your business and our legitimate interest in running it; for accounting records, a legal obligation.
Who else handles it
We don't sell personal data, and we don't share it for anyone else's marketing. These service providers handle it on our behalf:
- Cloudflare hosts the site.
- Microsoft hosts our email (Microsoft 365), stored in the United Kingdom.
- Google serves the site's fonts.
For the invoice files a client's business sends us, the providers are named in the data processing terms we agree with that business. We may also share personal data with our professional advisers or insurers where we need to, and with authorities where the law requires it.
Outside the UK
Cloudflare, Microsoft and Google are US companies and may process personal data outside the UK. Where they do, the transfer is covered by the UK–US data bridge or by the contract clauses the UK has approved for international transfers. Ask us and we will tell you which applies.
How long we keep it
- Emails from people who don't become clients: deleted 2 years after our last contact.
- Records of people we contacted first: deleted 2 years after our last contact, or straight away if you ask, apart from the do-not-contact entry described above.
- Client staff contacts and business records: kept while we work together, then for 6 years, as accounting and legal records require.
- Carrier invoice files: as set out above, and in the terms we agree with your business.
- Hosting logs: held by Cloudflare under its own retention periods. We don't keep logs of visitors' IP addresses ourselves.
Your rights
You can ask us for a copy of the personal data we hold about you, and ask us to correct it, delete it, limit how we use it or send it to you in a portable form. You can object to how we use it, and you can always tell us to stop contacting you. Email [email protected]. We answer within one month, and there is no charge.
We make no decisions about people by automated means.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113. We would like the chance to put it right first.
Changes to this notice
We will update this page whenever anything on it changes, and the date at the top will say when.