Privacy Policy
TFS Express Logistics Ltd ("TFS", "we", "us", "our") is committed to protecting your privacy and handling your personal data lawfully, fairly and transparently, in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This policy explains what personal data we collect, why we collect it, how we use it, who we share it with, and the rights you have over it. It applies to visitors to our website, our customers, and prospective customers.
1. Who we are
TFS Express Logistics Ltd is the data controller for the personal data described in this policy. We are registered with the Information Commissioner's Office (ICO registration number ZA907593). Our registered address is Ingleside, Shortthorn Road, Stratton Strawless, Norwich NR10 5NU.
2. The information we collect
We may collect and process the following personal data:
Contact details you provide when you request a quote, make an enquiry, or book a delivery, such as your name, company name, phone number, email address and delivery/collection addresses.
Business contact details for our customers and their representatives.
Information you provide if you contact us by phone, email or through our website's enquiry forms.
CCTV footage if you visit our premises.
3. How we use your information and our lawful basis
We use your personal data to provide quotes and deliver our courier services (necessary to perform our contract with you), to respond to your enquiries, to meet our legal and regulatory obligations, and, only with your consent, to send you marketing communications. Where we rely on legitimate interests, such as general business administration and security, we balance this against your rights and freedoms.
4. Who we share your data with
We only share personal data where necessary and lawful. This may include HMRC and other regulators where legally required, our IT and cloud service providers (including Microsoft 365 and our transport management system provider, Transport Technologies LTD) under written processor agreements, and subcontracted couriers where necessary to deliver a job (for example, a driver's name on a proof of delivery). We do not sell your data to anyone.
5. International transfers
We process personal data within the United Kingdom. Where third-party service providers we use may involve onward transfers outside the UK by their corporate group, those transfers are governed by ICO-approved mechanisms, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
6. How long we keep your data
We retain personal data only as long as necessary for the purpose it was collected, and to meet our legal obligations. Customer and supplier records are typically retained for 7 years in line with HMRC requirements. CCTV footage is retained for 30 days and then overwritten in the normal cycle.
7. Your rights
Under UK GDPR, you have the right to access the personal data we hold about you, have inaccurate data corrected, request erasure of your data, restrict or object to our processing, receive your data in a portable format where applicable, and withdraw consent at any time where we rely on consent. You also have the right to lodge a complaint with the ICO (ico.org.uk, 0303 123 1113).
To exercise any of these rights, contact our Data Protection Lead, Jim Jackson, at tech@tfsexpress.co.uk or 01603 712711. We will respond to verified requests within one calendar month.
8. Changes to this policy
We may update this policy from time to time. The latest version will always be available on this page.
