Last updated 2 August 2021
Who is the controller of your personal data?
What personal data do we process?
- First Names, Last Names, Usernames and Titles
- Billing Address, Delivery Address, email address and telephone numbers
- Bank account and payment card details
- IP Address
- Login Data
- Marketing and Communication data
How do we receive your personal information?
- when you give us your shipment to be delivered to a person indicated by you or to the indicated place;
- in the event that our customers (e.g. online stores and/or their partners) provide us with your data in order to perform our delivery and/or collection services;
- in the event that you submit a complaint to us in respect of the services we provide, or when your data is provided by a person authorised to make such a complaint, for example our customer who sent you a parcel and then submitted to InPost a complaint for non-performance or improper performance of the service on that shipment;
- where you submit to us an inquiry regarding the services or activities of InPost;
- if you provide InPost with your data to receive an InPost commercial offer;
- if you provide InPost with your data to create an account with InPost, which allows you to generate orders for the services we offer;
- if you provide your data for the purposes of receiving marketing related to InPost products and services and entities cooperating with InPost, which will be implemented by InPost or independently by these entities;
- If you sign up to any newsletters we may offer from time to time; and
- If you sign up to receive market research we conduct from time to time;
Why do we process your personal data?
- providing postal or transport services , as well as services accompanying these services, including delivery of a parcel you have sent or delivery to you;
- to send you messages by email or SMS in relation to the delivery of a parcel, status updates; locker locations and payment, deposit and collection receipts;
- to process payments and refunds; and
- to register you as a new customer.
- We also process personal data for the following purposes:providing you with information and materials of a marketing nature or for the purpose of providing you with an offer;
- analysis, including personalisation, solely for the purposes of optimising processes in the provision of our services and improving their provision;
- complaint handling;
- fraud prevention and detection;
- security purposes including theft and vandalism detection and prevention; and
- to the extent necessary in the event of a sale or possible sale of the whole or part of our business or the restructuring of our business.
How long do we store your personal data?
- when you have an InPost account which enables you to order the services we provide, and commission these services as the sender (including the payer), as well as if you do not have such an account, but use our services as the sender (including the payer), we store your personal data for a maximum period of 6 years from the day you sent the parcel;
- when you are the recipient of a shipment, we store your personal data for no longer than the period of limitation of any claims for the provision of services by us, resulting from the Limitation Act 1980 (which is generally 6 years from the provision of the relevant service);
- when you file a complaint or complain about the services provided by InPost, we process your personal data contained in your complaint for the time necessary to consider your complaint. After this time we can store it for no longer than the period of limitation of any claims for a complaint arising from generally applicable law;
- when you submit another application or inquiry to us, we store your personal data for the period of service and eventual implementation of your application, and after that period we may store it for a period not exceeding the period of possible limitation of claims resulting from generally applicable law; and
- if the period of storage of your personal data results from mandatory provisions of law, we store your personal data for the period specified in these provisions.
Why do we store your data for such a period of time?
- as InPost we have to comply with the obligations arising from the provisions of generally applicable law, in particular in the field of implementation of postal law, transport law, tax and accounting regulations, and other legal obligations imposed on InPost; and
- we have a legitimate interest in the pursuit and defence of claims arising from the provision of services by InPost,
- we have a responsibility for the continuous improvement of the level of security, in particular preventing fraud and fraud.
What are the legal grounds for processing your personal data by InPost?
- our legal ground for non-essential cookies is consent.
- if you are a consumer we will ask for your consent to send you unsolicited direct marketing although there are some limited circumstances where consent may not be required (for example we send you marketing related other services of ours which are similar to those you have purchased from us),
Who are the recipients of your personal data?
- InPost employees and associates and agents;
- InPost subcontractors in connection with the collection and delivery of parcels;
- InPost subcontractors responsible for payments and refunds;
- insurers responsible for covering potential damage to shipments;
- subcontractors operating our IT networks and databases and creating IT solutions for us and providing marketing services to us;
- subcontractors servicing the InPost helpline and customer service department;
- Her Majesty’s Revenue & Customs, regulators and other authorities based in the United Kingdom who may require us to report processing activities;
- our affiliates;
- professional entities providing InPost tax, legal, auditing, digital marketing, website hosting and settlement consultancy; and
- third parties in the context of a sale or possible sale of the whole of or part of our business or the restructuring of our business.