WHO WE ARE
We are The Delivery Group Limited, a company incorporated and registered in England and Wales with company number 07621335, and its subsidiaries Secured Express Limited, a company incorporated and registered in England and Wales with company number 04834987, and CMS Network (London) Limited, a company incorporated and registered in England and Wales with company number 03517482, all of whom have their registered office at Unit 2, Catalina Approach, Omega South, Warrington, WA5 3UY (the “Company” or “we” or “us”).

Your can download our customer terms and conditions for Bulk here.

The Company and personal information: We are committed to lawful, fair and transparent processing of all personal information about our employees, customers, suppliers and other third parties during the course of our business activities. We will always comply with any applicable data protection legislation and we will ensure that collection and use of personal information is carried out in accordance with applicable data protection laws. The main law governing data protection is the General Data Protection Regulation (Regulation (EU) 2016/679 of 27 April 2016) known as the “GDPR”.

What this policy is: This policy (and any other documents referred to in it, together with any privacy notice displayed on our website) sets out the basis on which we will process any personal information about you or individuals generally – whether it’s information we collect from those individuals or that is provided to us from other sources. This policy sets out rules on data protection and the legal conditions that must be satisfied when we obtain, handle, process, transfer or store personal information.

Registration: While the Data Protection Act 2018 requires us to be registered with the Information Commissioner’s Office, we will remain registered. We will also comply with any successor notification requirements. Please note that, as explained below, we may only be processing your personal data on behalf of another party, such as one of our clients, who will be the data controller in respect of that information.

Controlling and processing information: We are the controller of all personal information used in our business for our own commercial purposes. Sometimes though, we will process personal information on behalf of another data controller – and when this is the case, we will do so only in accordance with the instructions of that data controller and otherwise in accordance with the GDPR. If we are processing on behalf of another data controller, that data controller will provide relevant information to you about how your data is being shared.

Why you should read this policy: It is important that you read this policy, together with any other documents referred to in it, so that you are aware of how any personal information relating to you will be dealt with by us.

DATA PROTECTION PRINCIPLES
We are accountable for demonstrating compliance with the GDPR’s six principles of processing personal information. These provide that personal information we deal with must be:

• processed fairly, lawfully and in a transparent manner;
• collected for specified, explicit and legitimate purposes and not further processed in a manner that is
• incompatible with those purposes;
• adequate, relevant and limited to what is necessary;
• accurate and, where necessary, kept up to date;
• not kept for longer than necessary; and
• processed securely, maintaining integrity and confidentiality.

SOME BASIC DEFINITIONS WE USE IN THIS POLICY
Personal information: In this policy, when we use the term “personal information” we mean any information relating to an identified or identifiable human being. (An “identifiable natural person” is one who can be identified, directly or indirectly, for example, by reference to an identifier such as a