Legal

Privacy Policy

Last updated: 17 July 2025

1. Introduction

Evri ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and shipment tracking services.

Please read this policy carefully. If you disagree with its terms, please discontinue use of the Services. We reserve the right to make changes to this policy at any time. We will alert you to changes by updating the date at the top of this page.

2. Information We Collect

2.1 Information you provide directly

  • Name, email address, and phone number (when contacting us or creating shipments)
  • Delivery and collection addresses
  • Tracking numbers you enter on our site
  • Messages and enquiries submitted via our contact form

2.2 Information collected automatically

  • IP address and approximate geographic location
  • Browser type, operating system, and device information
  • Pages viewed, time on site, and referral URLs
  • Tracking number searches and lookup frequency (for rate limiting and security)

2.3 Shipment data

When a shipment is created by our logistics team, we store sender and receiver details, parcel descriptions, route information, and GPS coordinates. This data is used solely to provide the tracking service.

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the shipment tracking service
  • Send automated email notifications about shipment status changes
  • Respond to enquiries and provide customer support
  • Monitor and analyse usage patterns to improve the Services
  • Detect, prevent, and address fraud, security issues, and abuse
  • Enforce our Terms and Conditions
  • Comply with legal obligations

We do not sell, trade, or rent your personal information to third parties for marketing purposes.

4. Email Notifications

If you are the sender or recipient of a shipment tracked through Evri, we will send you automatic email notifications when the shipment status changes. These emails are necessary for the service to function and cannot be individually unsubscribed from while a shipment is active.

We use a trusted third-party email delivery provider to send transactional notifications. Your email address is shared with this provider solely for delivery purposes and is not used for marketing or shared further.

5. Data Retention

We retain personal data associated with shipments for a maximum of 3 years after the shipment is delivered, cancelled, or returned, after which it is permanently deleted.

Server logs containing IP addresses and search queries are retained for 90 days for security and abuse monitoring purposes.

6. Data Security

We implement industry-standard security measures to protect your personal information:

  • All data is transmitted over HTTPS with TLS encryption
  • Passwords are securely hashed using industry-standard one-way hashing algorithms
  • Admin access is protected by authenticated sessions with short expiry windows
  • All database connections are encrypted and access-controlled
  • API endpoints are rate-limited to prevent automated abuse

Despite these measures, no internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security of your information.

7. Third-Party Service Providers

To operate the Services, we engage carefully selected third-party providers for functions including secure data storage, email delivery, website hosting, and map functionality. Each provider is bound by data processing agreements and is only permitted to use your data for the specific purpose for which they were engaged.

We do not disclose the names or technical details of our infrastructure providers publicly, as doing so could create security risks. If you wish to know which categories of processors handle your data for GDPR purposes, you may request this information by contacting us at privacy@evrishipment.com.

8. Your Rights (GDPR)

If you are located in the European Economic Area or United Kingdom, you have the following rights:

  • Right of access — request a copy of the personal data we hold about you
  • Right to rectification — request correction of inaccurate data
  • Right to erasure — request deletion of your personal data, subject to legal obligations
  • Right to restriction — request that we limit processing of your data
  • Right to data portability — receive your data in a structured, machine-readable format
  • Right to object — object to our processing of your personal data

To exercise any of these rights, please contact us at privacy@evrishipment.com. We will respond within 30 days.

9. Cookies

We use only essential cookies necessary for the operation of the Services, including authentication session tokens. We do not use tracking, advertising, or analytics cookies.

Session cookies are deleted when you close your browser. Authentication cookies expire after 8 hours of inactivity.

10. Children's Privacy

Our Services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete it immediately.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Evri — Data Controller

Email: privacy@evrishipment.com

Or use our contact form.