Last updated: 2 May 2026
Emily Logistics Ltd (company number SC667067, registered office at 28 Glebe Road, Arbroath, DD11 4HJ, Scotland) is the data controller responsible for the personal data collected through this website and in the course of providing our freight transport, general carrier and vehicle workshop services. This Privacy Policy explains how we collect, use, store, share and protect your personal data. It applies to all visitors to our website at emilylogisticsltd.co.uk and to all customers, suppliers and other individuals whose personal data we process. We are committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our website or engaging our services, you acknowledge that you have read and understood this policy.
We collect the following categories of personal data depending on how you interact with us. When you submit an enquiry through our contact form or email us directly, we collect your name, email address, telephone number (if provided), company name (if provided), postal or delivery postcodes, and the content of your message. When you visit our website, our hosting provider automatically records server log data, which may include your Internet Protocol (IP) address, browser type and version, the user agent string sent by your browser, the pages you visit on our site, and the date and time of your visit. We also use strictly necessary cookies and similar technologies to ensure our website functions correctly. We do not collect special category data (such as health information, racial or ethnic origin, or political opinions) through our website or services.
We collect personal data in three ways. First, we collect data directly from you when you voluntarily submit the contact form on our website, send us an email, telephone us, or correspond with us in writing in relation to a quotation or service engagement. Second, we collect data automatically via your web browser when you visit our website — our hosting infrastructure records standard server log data as part of its normal operation. Third, we may receive personal data from our customers as part of a delivery or service instruction — for example, the name and address of a consignment recipient. We do not purchase, rent, or otherwise acquire personal data from third-party data brokers or marketing lists.
We process your personal data only where we have a lawful basis to do so under Article 6 of the UK GDPR. We use your data for the following purposes, each paired with its corresponding lawful basis.
To respond to your enquiries, provide quotations and communicate with you about our services, we rely on our legitimate interest in operating our business and serving prospective and existing customers (Article 6(1)(f) UK GDPR). We have assessed that this processing is necessary for our business and does not override your rights or freedoms.
To perform and administer contracts for freight transport, general carrier services and vehicle workshop services — including scheduling, invoicing and proof of delivery — we rely on contractual necessity (Article 6(1)(b) UK GDPR). Processing is necessary for the performance of a contract to which you are a party, or in order to take steps at your request prior to entering into a contract.
To comply with legal and regulatory obligations, including maintaining records required by HM Revenue & Customs (HMRC) and the Driver and Vehicle Standards Agency (DVSA), we rely on legal obligation (Article 6(1)(c) UK GDPR). We are required by law to retain certain financial and vehicle maintenance records for prescribed periods.
To send you marketing updates about our services, we rely on your explicit consent (Article 6(1)(a) UK GDPR). We will only send marketing communications where you have opted in, and you may withdraw your consent at any time by contacting us or using the unsubscribe link in any marketing email.
We share your personal data only where necessary and only with the following categories of recipients. Vercel Inc. provides our website hosting infrastructure and is based in the United States; data transfers are safeguarded by Standard Contractual Clauses (SCCs). Formspree Inc. processes contact form submissions on our behalf and is also based in the United States, with transfers similarly protected by Standard Contractual Clauses. Google LLC provides the embedded map on our contact page, which may transmit data to servers in the United States; these transfers are covered by Standard Contractual Clauses. We may also be required to share data with HM Revenue & Customs (HMRC), the Driver and Vehicle Standards Agency (DVSA) and law enforcement agencies where we are legally obligated to do so. We do not sell, rent, or trade your personal data to any third party for marketing or any other purpose.
Some of the third-party processors described above are located in the United States, which is not subject to a UK adequacy decision for all types of transfer. Where we transfer personal data outside the United Kingdom, we ensure that appropriate safeguards are in place in accordance with Chapter V of the UK GDPR. Specifically, we rely on Standard Contractual Clauses (SCCs) as approved by the UK Information Commissioner’s Office (ICO) and, where applicable, on supplementary measures to ensure that your personal data receives a level of protection that is essentially equivalent to that guaranteed within the United Kingdom. You may request a copy of the relevant safeguards by contacting us using the details set out in Section 15 below.
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Enquiry-only data — that is, personal data submitted via the contact form or email where no contract follows — is retained for a period of twenty-four (24) months from the date of your last correspondence with us, after which it is securely deleted. Contract and operational data, including invoices, delivery records and vehicle maintenance logs, is retained for seven (7) years in accordance with HMRC record-keeping requirements and applicable commercial law. Cookie consent preferences stored in your browser via localStorage are retained for twelve (12) months, at which point the consent prompt will be displayed again.
Under the UK GDPR, you have the following rights in relation to your personal data. The right of access entitles you to request a copy of the personal data we hold about you and to obtain information about how we process it. The right to rectification entitles you to request that we correct any inaccurate or incomplete personal data we hold about you. The right to erasure (also known as the right to be forgotten) entitles you to request that we delete your personal data where there is no compelling reason for us to continue processing it. The right to restrict processing entitles you to request that we limit how we use your data in certain circumstances, for example while a complaint is being investigated. The right to data portability entitles you to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, and to transmit that data to another controller. The right to object entitles you to object to processing based on legitimate interests or for direct marketing purposes. The right to withdraw consent applies where we rely on your consent as our lawful basis; you may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. The right not to be subject to automated decision-making entitles you not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you. We do not currently carry out any solely automated decision-making.
To exercise any of the rights described above, please send an email to support@emilylogisticsltd.co.uk with the subject line “Data request”. We will acknowledge your request promptly and respond within one calendar month from the date of receipt. In certain circumstances — for example, where a request is complex or we receive a high volume of requests — we may extend this period by a further two months, in which case we will notify you of the extension and the reasons for it. We may ask you to provide proof of identity before processing your request, to ensure that personal data is not disclosed to any person who has no right to receive it. No fee is charged for reasonable requests. However, if a request is manifestly unfounded or excessive, we reserve the right to charge a reasonable fee or refuse the request, in accordance with Article 12(5) UK GDPR.
If you are dissatisfied with how we have handled your personal data or any request you have made in relation to your rights, you have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO). You can contact the ICO at the following address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom. You can also visit their website at https://ico.org.uk/make-a-complaint/ to make a complaint online. We would, however, appreciate the opportunity to address your concerns before you approach the ICO, so please do contact us in the first instance.
Our services are business-to-business and are not directed at individuals under the age of eighteen (18). We do not knowingly collect or process personal data from children. If we become aware that we have inadvertently collected personal data from a child, we will take immediate steps to delete that data from our systems. If you believe that we may have collected information from or about a child, please contact us at support@emilylogisticsltd.co.uk so that we can investigate and take appropriate action.
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction. All data transmitted between your browser and our website is encrypted using Transport Layer Security (TLS). Access to personal data within our organisation is restricted to authorised personnel on a need-to-know basis. We conduct due diligence on our third-party processors to satisfy ourselves that they maintain adequate security measures and comply with their data protection obligations. While no method of transmission over the internet or electronic storage is completely secure, we continually review and improve our security practices to maintain robust protection of your personal data.
Our website uses only strictly necessary cookies that are essential for the site to function correctly. These cookies do not track you, do not profile you, and do not collect personal data for marketing purposes. We use localStorage to remember your cookie consent preference so that you are not asked to accept cookies on every page visit. We do not use analytics cookies, advertising cookies, or any third-party tracking cookies. For full details of the cookies and storage mechanisms we use, please see our Cookie Policy.
We may update this Privacy Policy from time to time to reflect changes in our processing activities, legal requirements, or business practices. The “last updated” date at the top of this page will always reflect the most recent revision. Where changes are material — for example, where we introduce a new category of data processing or a new third-party processor — we will take reasonable steps to notify affected individuals, such as by displaying a prominent notice on our website or, where appropriate, by contacting you directly. We encourage you to review this policy periodically to stay informed about how we protect your personal data.
If you have any questions about this Privacy Policy, about the personal data we hold about you, or if you wish to exercise any of your rights, please contact us using the details below.
Emily Logistics Ltd
28 Glebe Road
Arbroath
DD11 4HJ
Scotland, United Kingdom