Privacy policy

Londry Ltd is the data controller for the information described here. We are registered with the Information Commissioner's Office.

What we collect

• Account details — your name, email address and phone number.
• Addresses — the addresses you save for collection and delivery, plus any access notes you write.
• Order history — what you booked, when, and what it cost.
• Photographs — of your bag at collection, packing and delivery, kept as proof of condition.
• Technical data — the IP address a sign-in came from, and failed sign-in attempts, to protect your account.

Why we collect it

To run your order — that is our contractual basis. To protect accounts from brute-force attempts, and to keep accounting records, which is our legitimate interest and our legal obligation respectively. We only send marketing email if you asked for it, and every message has a one-click unsubscribe.

How long we keep it

Order and invoice records are kept for six years, as HMRC requires. Collection photographs are deleted after 90 days. Failed sign-in records are deleted after 30 days. If you close your account, we delete everything not covered by the accounting requirement.

Who we share it with

Our payment processor, which handles card details directly — we never see or store your full card number. Our drivers see the name, address, phone number and access notes for the stops on their run, and nothing else. We do not sell data to anyone, ever.

Cookies

One cookie, and it is strictly necessary: a session cookie that keeps you signed in. It is HttpOnly and SameSite=Lax, expires after 14 days, and holds nothing but a random token. We run no advertising or analytics cookies, which is why this site never asks you to accept anything.

Your rights

You can ask us for a copy of your data, correct it, delete it, or object to how we use it. Email privacy@londry.co.uk and we will respond within 30 days. If you are unhappy with our response you can complain to the ICO at ico.org.uk.