Privacy, location and tracking information.

Controller. Regent Mile is a trading name of THE REGENT COLLECTION LTD., company no. 14693979, registered in England and Wales. Registered office: 4th Floor, Silverstream House, 45 Fitzroy Street, London, England, W1T 6EB. Privacy contact: privacy@regentcompany.co.uk.

Information collected. Account data; collection/delivery addresses and instructions; recipient contact details; order references and timestamps; device/IP/app information; location where provided; proof-of-delivery events such as PIN, signature, recipient name and permitted photographs; payment tokens/references, transaction/refund/chargeback data; support communications; consent/marketing preferences; and fraud/safety indicators.

Sources. Information may come directly from you, from another customer who names you as sender/recipient, from couriers during delivery, payment/identity providers, technical systems and lawful fraud-prevention/public sources. A customer providing recipient details should inform that recipient where reasonably practicable.

Purposes and legal bases. Regent Mile uses data to provide/administer deliveries; dispatch and track orders; provide support; process payments; prevent fraud; resolve disputes; comply with tax, accounting, court, regulatory, law-enforcement and safety duties; improve service using appropriately minimised data; and send marketing only where permitted. Depending on the activity, the bases include contract, legal obligation and legitimate interests. Consent is used where the law requires it for a specific activity.

Sharing. Data may be shared as necessary with assigned/prospective couriers, customers/senders/recipients, Stripe and other payment/financial providers, cloud/database/authentication/mapping/support/security suppliers, insurers and professional advisers, and public authorities where lawfully required. Unnecessary identity or compliance data should not be exposed to delivery users.

International transfers. Where a supplier processes data outside the UK and safeguards are required, Regent Mile will use an applicable adequacy regulation, UK IDTA/Addendum or other lawful mechanism with supplementary measures where appropriate.

Retention. Data is kept only for as long as reasonably necessary. Transaction and financial records may generally be kept for up to six years where required for tax/accounting/legal claims. Precise delivery-location and proof data is not intended to be kept indefinitely merely because it may be useful. Open disputes, legal holds, fraud investigations or regulatory matters may justify longer retention.

Your rights. Depending on the circumstances you may have rights of access, correction, erasure, restriction, objection, portability, withdrawal of consent and safeguards/human review in relation to certain automated decisions. You can complain to the ICO if you believe your information has been handled unlawfully.

Security and children. Regent Mile uses proportionate measures such as TLS, role-based access, privileged-account MFA, audit logging, backups and incident response. The customer account service is not intended for children under 18.

Information collected. Identity/contact information; age and eligibility verification; driving licence, vehicle, insurance, MOT/roadworthiness and document expiry data; tax/platform-reporting data such as tax identification information and VAT status where required; Stripe connected-account identifiers and payout status; online/offline activity, offers, accept/decline events, collection/drop-off events, routes and proof records; precise GPS while online/working; device/security logs; and support, safety, conduct, claims, investigation and appeal records.

Why it is used. Onboarding and account administration; dispatch and nearby-offer matching; ETA and customer tracking; proximity/geofencing controls; safety support; fraud/account-sharing/GPS-spoofing detection; payout and earnings administration; HMRC digital-platform reporting where applicable; insurance/claim handling; and legal/regulatory compliance.

Location controls. The driver app is designed to collect live location when a Courier deliberately goes online and while performing accepted deliveries. Customers/Recipients may see appropriate live progress for an accepted job. Administrators may view online Courier locations for dispatch, safety, operational support and fraud prevention. Regent Mile should not use precise live location to monitor a Courier who intentionally goes offline, except for short technical delays, cached security records or lawful review of data already collected for an incident.

Automated tools and human review. Rules/risk signals may flag impossible travel, repeated failed PIN attempts, mock-location indicators, duplicate accounts, false documents or unusual payment behaviour. A flag may trigger temporary safeguards or manual investigation. Where law gives rights concerning a significant solely automated decision, required safeguards such as human review will be provided.

Sharing and tax reporting. Customers/Recipients receive only information reasonably required for delivery/safety, such as first name, vehicle information where relevant, delivery status and live progress. Information may also be shared with Stripe, identity/payment providers, hosting/database/mapping suppliers, insurers, advisers and lawful authorities. UK digital-platform reporting may require collection, verification and reporting of identity, address, date of birth, tax identification information and amounts paid, together with a seller copy where required.

Retention and rights. Courier contract, payment and tax-reporting records may generally be kept for up to six years where needed. Compliance documents should be minimised/deleted when no longer required. Precise GPS should have a shorter operational retention period unless linked to a dispute, safety incident, fraud investigation or legal hold. Couriers retain applicable data-protection rights and may contact privacy@regentcompany.co.uk.

UK PECR rules may apply not only to browser cookies but also to local storage, device identifiers, SDKs, pixels, scripts and similar mobile technologies. Strictly necessary technologies may be used for authentication, security, fraud prevention, payment continuity, service configuration and storing privacy choices. Non-essential analytics, advertising or similar tracking that requires consent will not be activated until the required choice has been made.

Functional technologies may remember optional preferences. Analytics/performance tools may be used only in line with applicable consent/objection rules. Behavioural advertising tracking is not intended at launch; the live policy and consent interface must be updated before it is activated.

Location, camera and notification permissions may be requested for app features. A device permission is not automatically the same as UK GDPR/PECR consent. Regent Mile will explain why a permission is needed and rely on the legal basis described in the relevant privacy notice.

At launch, the intended baseline includes authentication/session storage, consent-preference storage and payment-provider anti-fraud/session technologies. Crash/performance analytics remains subject to assessment before non-essential activation. Users can manage non-essential choices through any Regent Mile consent interface made available and through browser/device controls.