Who are we?

This is the privacy policy for Yonah Logistics LLC. We are a logistics company moving your parcels from your doorstep to your chosen destination. Our main registered address is 128 City Road, London. EC1V 2NX. We are responsible for your personal data as data controller. 

This privacy policy replaces all previous versions and applies from the date published.

Who Does this Privacy Policy apply to?

This privacy policy applies to:

• Employees of Yonah Logistics

• Customers

• Prospective customers

• Individuals that use our websites

• Former customers

• Nominated users or individuals acting under a power of attorney.

Our services are not intended for children or anyone below the age of 18 years.

The personal data we hold about you must be accurate and current. It is your responsibility to keep us up to date if you make any changes to your personal data by updating your account details.

What Information do we collect?

Personal data is any information that can identify a natural person. We may collect, use, store and transfer different categories of personal data to enable us to deliver our services, as follows:

• Data about your Identity: including first name, last name, title.

• Data about a recipient’s identity: including first name, last name, title, delivery address, email address and mobile number;

• Data about your contact details: including correspondence/billing address, email address, landline telephone number and mobile phone number;

• Financial data: payment card info, which is captured and stored by our payment provider;

• Data relating to a transaction: including services purchased, net revenue spent, (split by service), claims made/paid/rejected, including amount. Refunds and amounts, times/dates of payment and VAT status;

• Technical data including IP address, your login data, browser type and version, location, browser plug-in types and versions, online chat logs and other information on the devices you use to access our services.

• Data relating to marketing and communications choices including what method a customer would like to receive marketing and how frequently.

How do we collect information?

Information you give us

• When you place an order with us for any of our services online, we will need certain information to process your order.

• When you contact us to discuss your services, we may ask for certain information to be able to confirm your identity, check our records and answer your questions quickly and accurately.

Information we automatically collect

We will automatically collect information:

• when you use our services; and

• when you visit our website, we may collect and process information about your usage of these by using “cookies” and other similar technologies to help us make improvements to the websites and to the services we make available.

How do we use information?

The information we collect and receive helps us to better understand what you need from us and to improve the provision of our services to you.

We use the information collected for example to:

• Verify your identity when you use our services or contact us.

• Process your enquiries, orders or applications, for example when assessing an application, we may use automated decision-making systems.

• To tell you about changes to our websites, services or terms and conditions.

• Carry out any personal data and/or marketing analysis, profiling or create statistical or testing information to help us personalise the services we offer you and to understand our users/customers better, understand what our users/customers want and how they use our products and services.

• We’ll use your data to meet the legitimate interests of our business in a way which might reasonably be expected (for example, when you abandon your session or basket before completing your checkout, we will send you email notifications.

• Sometimes we will send communications which are either required by law or necessary to inform you about your order or changes to the service we provide, for example order confirmation or changes to terms and conditions. These service messages will not include marketing or promotional content.

• We may occasionally send you surveys and feedback requests to help improve our services. These messages will not include any marketing or promotional content and do not require prior consent when sent by email or text message. We have a legitimate interest to do so as this helps make our products or services more relevant to you.

• To display the relevant content to you on our websites or app, we will use your data relating to your preferred couriers and services and so on. We do so based on your consent to receive app notifications and/or for our website to place cookies or similar technology on your device. For example, we might display a list of services you’ve recently looked at or offer you recommendations based on your order history and any other data you’ve shared with us.

Who will we share your data with?

• Third party suppliers who help Yonah logistics to perform our services.

• Professional advisors.

• Law enforcement agencies.

• Other companies as part of the process of selling one or more of our businesses or part of those businesses.

Where we share your information with third parties, they are required to follow our express instructions in respect of the use of your personal information and they must comply with all applicable UK data protection laws to protect your information and keep it secure.

Commitment to Data Security:

• Yonah Logistics emphasizes its commitment to safeguarding personal data by employing both organizational and technical security measures. These measures aim to protect against unauthorized access, disclosure, or processing of user information.

Acknowledgment of Limitations:

• Despite taking precautions, Yonah Logistics acknowledges that it cannot always guarantee the security of information transmitted via the internet. This is a realistic admission, as internet transmissions inherently carry risks, such as interception or breaches, which are often beyond the organization's control.

Security Standards:

• Yonah Logistics makes every effort to create a secure and reliable website in accordance with industry standards, which indicates our dedication to applying best practices in cybersecurity and data protection.

Liability Disclaimer:

• Yonah Logistics disclaims any responsibility or liability for any breaches of security involving personal data during internet transmission. This means that users must be aware of the risks associated with transmitting sensitive information online.

Legal Basis for Processing Personal Data: Yonah Logistics lists four legitimate reasons for processing personal data:

• Contractual Necessity: Personal data is processed when necessary to fulfill the terms of a contract between us and the individual. This is common when providing services that require certain personal information to function.

• Legitimate Interest: Yonah Logistics may process data because it has a legitimate business interest in doing so, as long as this interest doesn’t override the rights or freedoms of the individual. Legitimate interest typically applies to situations where data is processed in a way that is expected and necessary for the business's operation (e.g., customer service or fraud prevention).

• Legal Obligation: Some data must be processed to comply with legal or regulatory requirements. For instance, businesses may be legally required to keep certain records or share data with authorities.

• Consent: Personal data may be processed with the explicit consent of the individual. The statement emphasizes that consent can be withdrawn at any time, allowing individuals more control over their data.

Consequences of Not Providing Data:

• If an individual chooses not to provide the necessary data, Yonah Logistics cannot offer its services because certain services are dependent on access to specific personal information for them to function properly.

How long do we hold your information for?

Personal data is kept only for as long as it is necessary to fulfil the purpose for which it was collected. Once that purpose has been achieved, the data is no longer retained unless there is a specific legal or regulatory requirement to do so. This aligns with the principles of data minimization and storage limitation under data protection laws, like the GDPR, which state that data should not be kept for longer than necessary.

Factors in Determining Retention Periods:

Yonah Logistics uses several factors to decide how long personal data should be retained:

• Amount, Nature, and Sensitivity of Data: Sensitive data (e.g., health records or financial information) might require stricter controls and shorter retention periods due to the higher risk associated with its unauthorized use or disclosure.

• Risk of Harm: The potential risk of harm from unauthorized use or disclosure is considered. If a breach of the data could cause significant harm, it may be stored for a shorter period to minimize exposure.

• Purpose of Processing: Whether the original purpose for processing the data has been fulfilled. If the purpose has been achieved, retention may no longer be necessary.

• Alternative Means: Consideration is given if Yonah Logistics can achieve the same purpose without retaining the data for an extended period.

• Legal Requirements: Data may need to be retained for specific legal or regulatory purposes, such as tax records or compliance with industry regulations

Your Rights

As a data subject, individuals have several rights under data protection laws, such as the General Data Protection Regulation (GDPR) in the EU or the Data Protection Act in the UK. These rights give individuals control over how their personal data is processed and used by organizations.

Right to Access:

o You have the right to request access to your personal data held by an organization. This is also known as a Subject Access Request (SAR). You can ask for information about how your data is being used, the purposes of processing, and obtain a copy of the data itself.

Right to Rectification:

o If your personal data is inaccurate or incomplete, you have the right to request that it be corrected or updated.

Right to Erasure (Right to be Forgotten):

o Under certain circumstances, you have the right to request that your personal data be deleted. This may apply when the data is no longer necessary for the purpose for which it was collected, or if you withdraw your consent for its use.

Right to Restriction of Processing:

o You can request that Yonah Logistics restrict the processing of your personal data in certain circumstances, such as when you contest its accuracy or when Yonah Logistics no longer needs the data, but you want it retained for legal reasons.

Right to Data Portability:

o You have the right to request your personal data in a structured, commonly used, and machine-readable format. You can also ask for it to be transferred to another organization where technically feasible.

Right to Object:

o You can object to the processing of your personal data when it is based on legitimate interests or for direct marketing purposes. If you object to marketing, Yonah Logisticsmust stop processing your data for this purpose.

Rights in Relation to Automated Decision-Making and Profiling:

o If decisions are made about you purely through automated processes (without human involvement), you have the right to request that a human reviews the decision. You can also object to profiling that has legal or similarly significant effects.

Right to Withdraw Consent:

o If your personal data is being processed based on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

Right to Complain to a Supervisory Authority:

o If you believe that your rights have been violated, you have the right to lodge a complaint with the relevant data protection authority in your country.

Right to be Informed:

o You have the right to be informed about how your personal data is collected, used, shared, and processed. Organizations must provide clear and transparent information, typically through privacy notices or policies.

Complaints

The General Data Protection Regulation also gives you right to lodge a complaint with a supervisory authority, in particular in the European Union (or European Economic Area) state where you work, normally live or where any alleged infringement of Data Protection laws occurred. The supervisory authority in the UK is the Information Commissioner who may be contacted at https://ico.org.uk/concerns or telephone 0303 123 1113.

Changes to our Privacy Policy

Any changes we make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by email. Please check back frequently to see any updates or changes to our privacy policy.