Privacy notice

Esa Couriers of Chicksand Avenue, Milton Keynes, Buckinghamshire is the data controller. Contact us at info@esacouriers.co.uk or 01908 822 779 with any question about this notice or to exercise your rights.

When you register: your name, company name (if given), email address, phone number, and a securely hashed version of your password. We never store your password itself.

When you request a quote: the vehicle chosen, a description of the goods, pallet count, weight, your collection and delivery postcodes, and any notes you add.

When you contact us: your name, email, phone number and the content of your message.

Technical data: your IP address and browser user-agent are recorded against your login sessions. This is used to rate-limit sign-in attempts and to let you identify unfamiliar activity — it is not used for advertising or profiling.

To provide the service — producing quotations, arranging collections and deliveries, and managing your account. Lawful basis: performance of a contract.

To keep the site secure — detecting and limiting brute-force sign-in attempts and abuse of the quoting system. Lawful basis: our legitimate interest in protecting the service and our customers.

To meet legal obligations — retaining transport and accounting records for the periods the law requires. Lawful basis: legal obligation.

This site sets one cookie: a strictly necessary session cookie that keeps you signed in. It contains a random token, is marked HttpOnly and SameSite, and is sent over HTTPS only. It expires after fourteen days, or immediately when you sign out.

We do not use advertising cookies, analytics cookies or third-party trackers, which is why you are not asked to accept a cookie banner.

Postcodes you enter are sent to postcodes.io and to a routing service in order to look up coordinates and calculate the driving distance. Only the postcode or its coordinates are sent — never your name, contact details or the description of your goods.

Where we sub-contract a job to another haulier, we pass on only what they need to collect and deliver it: the addresses, the contact name and number at each end, and the details of the consignment.

Our email provider handles messages we send to you. Our hosting provider stores the site and its database. We do not sell personal data, and we do not share it for marketing.

Account details are kept while your account is open and for a reasonable period afterwards. Quotes and job records are kept for six years, to meet accounting and limitation-period requirements. Contact messages are kept for two years. Login sessions are deleted when they expire.

Under UK GDPR you have the right to access the personal data we hold about you, to have inaccurate data corrected, to have data erased where there is no continuing reason to keep it, to restrict or object to processing, and to receive your data in a portable format.

Write to info@esacouriers.co.uk and we will respond within one month. If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk.

Passwords are hashed with bcrypt and are never recoverable in plain text. Session tokens are stored only as SHA-256 hashes, so a copy of the database cannot be used to impersonate you. All traffic is served over HTTPS, and the site sets a strict content security policy to limit what a browser will execute.