Facebook Instagram Linkedin
Track Parcel

Privacy & Data Protection Policy

1. Introduction

Lightning Transport is committed to protecting your privacy and handling your personal information responsibly, securely and in accordance with applicable UK data protection legislation.

This Privacy & Data Protection Policy explains how we collect, use, store and share personal information when you:

  • use our website;

  • contact us;

  • request a quotation or sales visit;

  • open or manage an account with us;

  • book a collection or delivery;

  • receive a parcel or delivery through our services; or

  • otherwise interact with Lightning Transport.

For the purposes of applicable data protection law, Lightning Transport Group Limited trading as Lightning Transport is the data controller for personal information processed in connection with our services, except where another organisation is separately responsible for determining how your information is used.

2. Information We Collect

The personal information we collect depends on how you interact with us and the services you use.

This may include:

Contact information

  • Name

  • Business or organisation name

  • Email address

  • Telephone number

  • Correspondence and enquiry details

Collection and delivery information

  • Collection address

  • Delivery address

  • Postcode

  • Recipient name and contact details

  • Delivery instructions

  • Consignment or tracking number

  • Delivery status

  • Proof of delivery information

Account and transaction information

  • Customer account details

  • Billing address

  • Invoice and payment information

  • Details of services booked or purchased

  • Account correspondence and history

Where payments are processed through a third-party payment provider, Lightning Transport may not receive or store complete payment card details.

Delivery and tracking information

Information generated during the collection and delivery process may include:

  • Tracking events

  • Collection and delivery timestamps

  • GPS location information associated with delivery events

  • Delivery photographs

  • Recipient or delivery contact details

  • Electronic proof of delivery records

Website and technical information

When you use our website, we may collect information including:

  • IP address

  • Browser and device type

  • Pages visited

  • Date and time of visits

  • Referral source

  • Website interactions

  • Cookie and analytics information

Please see our Cookie Policy for further information.

3. Information We Receive From Other Sources

We may also receive personal information indirectly where this is necessary to provide collection and delivery services.

This may include information supplied through systems and delivery networks used by Lightning Transport, including, where applicable:

  • APC Overnight systems and services;

  • APC Member Depots;

  • transport and logistics partners;

  • customers booking deliveries on behalf of recipients;

  • pallet or freight network systems;

  • third-party booking or logistics platforms.

For example, a business customer sending a parcel to you may provide us with your name, address, telephone number and email address so that we can complete the delivery and provide relevant tracking or delivery notifications.

4. How We Use Your Personal Information

We may use personal information to:

  • arrange and complete collections and deliveries;

  • provide parcel tracking and delivery notifications;

  • contact senders and recipients regarding deliveries;

  • process quotations and sales enquiries;

  • arrange sales visits;

  • create and administer customer accounts;

  • process invoices and payments;

  • respond to enquiries, complaints and customer service requests;

  • manage failed deliveries, redeliveries and depot collections;

  • maintain delivery and proof-of-delivery records;

  • improve our website, systems and services;

  • prevent fraud and protect our business, customers and network;

  • comply with legal, regulatory, accounting and contractual obligations;

  • establish, exercise or defend legal claims; and

  • send marketing communications where permitted.

5. Our Lawful Bases for Processing

Under UK data protection law, we must have a lawful reason for processing your personal information.

Depending on the circumstances, we may rely on:

Contract

Where processing is necessary to provide a service you have requested or to fulfil our contractual obligations.

For example, arranging a parcel collection or delivery.

Legitimate interests

Where processing is necessary for our legitimate business interests and those interests are not overridden by your rights.

This may include:

  • managing customer relationships;

  • improving our services;

  • operating and securing our website and systems;

  • maintaining delivery records;

  • dealing with enquiries and complaints.

Legal obligation

Where we are required to process or retain information to comply with applicable law, regulation, tax, accounting or other legal obligations.

Consent

Where we specifically ask for your consent, for example for certain marketing activities or optional cookies.

Where processing is based on consent, you may withdraw your consent at any time.

6. Who We Share Personal Information With

We only share personal information where necessary and appropriate.

Depending on the service being provided, this may include:

APC Overnight and its network

As an APC Member Depot, we may share relevant sender, recipient, delivery and consignment information with The Alternative Parcels Company Limited, other APC Member Depots and organisations involved in completing your delivery.

Delivery and logistics partners

We may share information with approved couriers, pallet networks, hauliers, fulfilment providers and other transport partners where necessary to complete a service.

Technology and IT providers

We may use trusted service providers to support:

  • website hosting;

  • email;

  • customer relationship management;

  • parcel and delivery management;

  • analytics;

  • data storage;

  • cybersecurity.

Payment providers

Payment and billing information may be processed by third-party payment providers where applicable.

Professional advisers and authorities

Information may also be disclosed where necessary to:

  • accountants;

  • insurers;

  • solicitors and professional advisers;

  • regulators;

  • law enforcement;

  • courts; or

  • other public authorities.

We do not sell your personal information to third parties.

7. Marketing Communications

We may contact existing or prospective customers about Lightning Transport services where we have an appropriate lawful basis to do so.

Where consent is required, we will ask for it before sending marketing communications.

You can opt out of marketing at any time by:

  • using the unsubscribe option contained within a marketing email; or

  • contacting us using the details at the end of this policy.

Opting out of marketing will not prevent us from sending essential service communications relating to an active collection, delivery, account or enquiry.

8. Cookies and Website Analytics

Our website uses cookies and similar technologies to operate correctly, understand how visitors use the site and, where applicable, improve the user experience.

Some cookies are essential to the operation of the website. Other cookies, such as analytics or marketing cookies, will only be used where permitted.

Further information about the cookies we use and how you can manage your preferences can be found in our Cookie Policy.

9. How We Protect Your Information

We take appropriate technical and organisational measures to protect personal information against:

  • unauthorised access;

  • accidental loss;

  • misuse;

  • alteration;

  • disclosure; and

  • destruction.

Access to personal information is restricted to employees, contractors and service providers who require it for legitimate business purposes.

While we take reasonable steps to protect personal information, no internet transmission or electronic storage system can be guaranteed to be completely secure.

10. How Long We Keep Personal Information

We only retain personal information for as long as reasonably necessary for the purpose for which it was collected.

Retention periods may vary depending on the type of information and our legal, contractual, accounting and operational requirements.

When information is no longer required, it will be securely deleted, anonymised or otherwise disposed of in accordance with our data-retention procedures.

11. International Data Transfers

Some of the technology or service providers we use may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, we will take appropriate steps to ensure that suitable safeguards are in place as required by applicable data protection law.

12. Your Data Protection Rights

Depending on the circumstances, you may have the following rights in relation to your personal information:

Right of access

You can ask us for confirmation that we process your personal information and request a copy of the information we hold about you.

Right to rectification

You can ask us to correct personal information that you believe is inaccurate or complete information that is incomplete.

Right to erasure

You can ask us to delete your personal information in certain circumstances.

Right to restrict processing

You can ask us to restrict how we use your personal information in certain circumstances.

Right to object

You may have the right to object to certain uses of your personal information, including some processing based on legitimate interests and direct marketing.

Right to data portability

In certain circumstances, you can ask us to provide personal information you supplied to us in a structured, commonly used and machine-readable format or transfer it to another organisation.

Right to withdraw consent

Where we rely on your consent, you can withdraw that consent at any time.

These rights are subject to certain legal conditions and exemptions.

You will not normally be required to pay a fee to exercise your data protection rights.

We may need to verify your identity before responding to a request.

13. Children’s Information

Our services and website are not specifically directed at children.

We do not knowingly collect personal information directly from children for marketing purposes.

Personal information relating to a child may, however, be processed where it forms part of legitimate collection or delivery information supplied by a customer or other authorised person.

14. Links to Other Websites

Our website may contain links to websites operated by other organisations, including APC Overnight and other service providers.

Those websites operate under their own privacy policies and Lightning Transport is not responsible for the privacy practices or content of third-party websites.

We recommend reviewing the relevant privacy policy when visiting another organisation’s website.

15. Changes to This Policy

We may update this Privacy & Data Protection Policy from time to time to reflect changes in:

  • our services;

  • legal or regulatory requirements;

  • the technology we use; or

  • how we process personal information.

The latest version will always be published on our website.

Last updated: August 2026

16. Contact Us

If you have a question about this policy, how we use your information or would like to exercise one of your data protection rights, please contact:

Lightning Transport
Lightning Transport Group Limited

Address: 5 Burma Drive, Marfleet Lane, Hull, HU9 5SD
Telephone: 01482 327070
Email: [PRIVACY/BUSINESS EMAIL ADDRESS]

Company number: 03677118

If Lightning Transport appoints a dedicated Data Protection Officer or nominated privacy contact, their details should also be included here.

17. How to Make a Complaint

If you have concerns about how Lightning Transport has handled your personal information, please contact us first so that we have an opportunity to investigate and respond.

You also have the right to raise a complaint with the Information Commissioner’s Office (ICO), the UK regulator responsible for data protection.

Making a complaint to us does not affect your right to contact the ICO.