Privacy Policy

Last updated: 10 March 2026

In short: We store your tracking number and recipient postcode so you can track your parcel. We don't use cookies or track your browsing. Everything is automatically deleted after 90 days.

1. Who We Are

PinPoint Parcels is a UK-based parcel tracking service. We provide delivery tracking for shipments across the United Kingdom.

Data Controller: PinPoint Parcels
Contact: [email protected]

2. What Data We Collect

We collect and process the following data to provide our tracking service:

  • Tracking numbers — our tracking identifiers (e.g. PP001000015GB)
  • Recipient postcodes — used to verify your identity before showing full delivery details
  • Delivery events — timestamps, status updates, and location information related to your parcel
  • Delivery photographs — proof of delivery images, where provided by the carrier
  • Order references — internal identifiers used to manage the shipment

We do not use cookies, analytics, or third-party tracking scripts on our website.

3. How We Use Your Data

When you enter a tracking number on our website, we show you delivery status in two levels:

  • Basic tracking — current status and checkpoint history. Available to anyone with the tracking number.
  • Full delivery details — delivery description and photograph (where available). Requires postcode verification to confirm you are the intended recipient.

We also share tracking data with tracking aggregator platforms (such as tracking aggregators) so that delivery status can be displayed on marketplace order pages and other tracking services.

4. Lawful Basis for Processing

We process personal data under Article 6(1)(f) of the UK GDPR — legitimate interests. Our legitimate interest is providing delivery tracking information to parcel recipients. Given the limited and non-sensitive nature of the data we collect, we consider this proportionate and in line with what recipients would reasonably expect when receiving a tracked parcel.

5. Who We Share Data With

We do not sell or share your data for marketing or any purpose unrelated to tracking. Data is shared only in these limited circumstances:

  • Tracking platforms — third-party tracking platforms receive tracking data so delivery status can be displayed on marketplace order pages and other tracking services.
  • Service providers — we use a hosting provider based in the EU and a content delivery and security provider to protect our website from abuse. These providers process data on our behalf to deliver their services.
  • Legal requirements — we may disclose information if required by law or court order.

6. International Transfers

Our tracking database is hosted on a dedicated server in the EU. When you access our website, your traffic may be routed through our security provider's network, which operates globally and may process connection data in countries outside the UK (including the United States). Where this occurs, appropriate safeguards are in place, including standard contractual clauses and the UK addendum.

Our website loads fonts and styling resources from third-party CDN providers. When your browser requests these files, the CDN provider may receive your IP address and browser information as part of delivering the content.

7. How Long We Keep Data

Tracking data is automatically deleted 90 days after the tracking record was created.

8. How We Protect Your Data

We take appropriate technical and organisational measures to protect your data, including encryption, access controls, and routine security monitoring. We also minimise risk by collecting only the data we need and automatically deleting it after 90 days.

9. Your Rights

Under the UK GDPR, you have the right to:

  • Access — request a copy of any personal data we hold about you
  • Rectification — request correction of inaccurate data
  • Erasure — request deletion of your data (note: all data is automatically deleted after 90 days regardless)
  • Restriction — request that we limit how we process your data
  • Objection — object to our processing of your data
  • Data portability — receive data you have provided to us in a structured, commonly used format

To exercise any of these rights, email [email protected] with your PP tracking number and recipient postcode so we can locate and verify your record. We will respond within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

10. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated date at the top.