Privacy Policy

1. Who we are

Relay Returns ("Relay", "we", "our", "us") operates the Relay Returns and Relay Courier iOS applications and the website relayreturns.co. We are the data controller for personal data collected through these services.

If you have any questions about this policy, contact us at privacy@relayreturns.co.

2. What data we collect

We collect the following categories of personal data:

• Account information: your phone number, used to create and identify your account.
• Booking information: collection address, parcel details, time slot preferences, and carrier information.
• Payment information: payments are processed by Stripe. We store a Stripe customer ID but do not hold your card details.
• Location data (couriers only): approximate location used to show relevant jobs. We do not store a history of your location.
• Device information: push notification tokens, used to send you booking updates.

3. How we use your data

• To create and manage your account.
• To process bookings and payments.
• To match consumers with nearby couriers.
• To send you booking confirmations and status notifications.
• To improve our service and troubleshoot issues.

We process your data on the legal basis of contract performance (to fulfil your booking), and legitimate interests (to operate and improve our service).

4. Data sharing

We share data only where necessary:

• Couriers: your collection address and parcel details are shared with the courier who claims your job.
• Stripe: payment processing. Stripe's privacy policy governs how they handle your payment data.
• Supabase: our database and authentication provider, hosted in the EU.

We do not sell your personal data to third parties.

5. Data retention

We retain your account data for as long as your account is active. Booking records are retained for 7 years for accounting and legal compliance. You may request deletion of your account at any time by contacting us.

6. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data (subject to legal obligations).
• Object to or restrict certain processing.
• Data portability.

To exercise these rights, email privacy@relayreturns.co. You also have the right to lodge a complaint with the ICO at ico.org.uk.

7. Security

We use industry-standard security practices including encrypted data storage, row-level security on our database, and HTTPS for all data in transit. Access to production data is strictly limited.

8. Changes to this policy

We may update this policy from time to time. We will notify you of material changes via the app or email. Continued use of our services after changes constitutes acceptance of the updated policy.