Privacy Policy

Privacy Notice

Last updated: 28 August 2026

1. Who we are

White Logistics & Storage Limited (“White Logistics”, “we”, “us” or “our”) provides transport, distribution, warehousing and related logistics services.

White Logistics & Storage Limited is registered in England and Wales under company number 01800972. Our registered office is:

White Logistics & Storage Limited
Abbey View
Pershore
Worcestershire
WR10 2DS

For the personal information covered by this notice, White Logistics will normally be the data controller, meaning we decide why and how that information is used.

You can contact us about data protection by:

Email: enquiries@whitelogistics.co.uk
Telephone: +44 (0)1386 552200
Post: Data Protection, White Logistics & Storage Limited, Abbey View, Pershore, Worcestershire, WR10 2DS

2. Who this notice applies to

This notice applies to:

visitors to www.whitelogistics.co.uk and our related online services;
people who contact us or request a quotation;
customers, prospective customers and their employees or representatives;
suppliers, contractors and other business contacts;
consignors, consignees, delivery contacts and recipients;
users of our customer, tracking and proof-of-delivery services;
visitors to our premises; and
people applying for employment with us.

Employees and workers may receive a separate workforce privacy notice containing more detailed information about how we use their information.

We sometimes process personal information on a customer’s instructions. Where another organisation is the data controller and we act only as its processor, that organisation’s privacy notice will principally apply.

3. Personal information we collect

Depending on your relationship with us, we may collect and use:

Identity and contact information: your name, employer, job title, address, email address and telephone number.
Enquiry information: information provided through our website, by email, telephone, social media or other correspondence.
Customer and supplier information: business contact details, contracts, quotation records, purchase orders, invoices, payment status and account history.
Transport and delivery information: collection and delivery addresses, contact names and numbers, consignment references, delivery instructions, tracking events, vehicle location information, signatures, photographs, proof-of-delivery records and correspondence relating to a consignment.
Online account information: usernames, account identifiers, authentication records, access permissions and activity within our customer or tracking services.
Website and device information: IP address, device and browser type, approximate location, referral source, pages viewed, interactions, cookie identifiers and website diagnostic information.
Recruitment information: contact details, employment history, qualifications, licences, Driver CPC information, right-to-work information, references, interview notes and other information supplied during an application.
Premises and security information: CCTV footage, vehicle registrations and visitor records.
Communications: emails, messages, complaints, requests and records of our dealings with you.

Please do not provide special-category information—such as information about health, ethnicity, religion, trade-union membership or sexual orientation—unless it is relevant and requested. Where recruitment or legal requirements make such processing necessary, we will use it only with an appropriate condition under data protection law.

We may process criminal-conviction information where this is necessary and legally permitted, including for certain employment, driver-vetting, fraud-prevention or legal purposes.

4. Where we obtain information

We may obtain personal information:

directly from you;
from your employer or another representative of your organisation;
from our customers when they arrange a collection or delivery involving you;
from consignors, consignees, carriers, pallet networks, subcontractors and delivery partners;
from recruitment agencies, referees and background-check providers;
from our websites, customer portals, tracking systems, telematics systems and security systems;
from publicly available business sources, such as company websites, Companies House or professional networking services; and
from companies within our group where this is necessary and lawful.

If a customer gives us information about a delivery contact or recipient, the customer should ensure that it is entitled to provide that information and, where appropriate, direct the person to this notice.

5. How and why we use personal information

We use personal information for the following purposes and lawful bases:

Answering enquiries and preparing quotations: to take steps at your request before entering into a contract and for our legitimate interest in developing and operating our business.
Providing transport, warehousing and logistics services: to perform contracts and for our legitimate interests in providing services to business customers.
Planning and completing collections and deliveries: for contractual purposes, compliance with legal obligations and our legitimate interests in operating an efficient and traceable logistics service.
Providing tracking and proof of delivery: for contractual purposes and our legitimate interests in giving customers accurate delivery information, resolving queries and establishing whether services were completed.
Managing customer and supplier relationships: to perform contracts and for our legitimate interests in communicating with business contacts and managing our commercial relationships.
Billing, accounting and credit control: to perform contracts, comply with legal obligations and protect our legitimate financial interests.
Operating and securing websites, portals and IT systems: for our legitimate interests in providing reliable services, protecting information and preventing unauthorised access, fraud and misuse.
Managing complaints, incidents and legal claims: to comply with legal obligations and for our legitimate interests in protecting our business and establishing, exercising or defending legal claims.
Recruitment: to take steps before entering into an employment contract, comply with employment and immigration law and pursue our legitimate interest in recruiting suitable people.
Business-to-business marketing: with consent where required or, where legally permitted, for our legitimate interest in promoting relevant services to business contacts.
Website analytics and advertising: with your consent where cookies or similar technologies require it.
Premises security and safety: for our legitimate interests in protecting people, vehicles, goods, information and property, and for compliance with health and safety or other legal obligations.
Business transactions: for our legitimate interests in managing a proposed sale, restructuring, investment or transfer of all or part of our business.

Where we rely on legitimate interests, we consider the necessity and proportionality of the processing and balance our interests against your rights and reasonable expectations.

Where we rely on consent, you may withdraw that consent at any time. Withdrawal does not affect processing already carried out lawfully before consent was withdrawn.

6. When information must be provided

Some information is required so that we can:

prepare a quotation;
enter into or perform a contract;
arrange or complete a collection or delivery;
provide access to an online service;
meet legal, regulatory or insurance requirements; or
consider an employment application.

If required information is not provided, we may be unable to provide the relevant service, process an application or complete a transaction.

7. Who we share information with

We may share personal information, where necessary, with:

customers, consignors and consignees;
Palletforce, network depots and other pallet-network participants;
haulage companies, couriers, subcontractors, warehouse operators and delivery partners;
companies within our group;
IT, website, cloud-hosting, communications, telematics and cybersecurity providers;
Wix, which hosts and supports our public website and website forms;
Meta, where the Meta Pixel or Meta advertising services are enabled with the required consent;
Google, where you choose to use embedded services such as Google Maps;
banks, payment providers, credit-reference or debt-recovery providers;
insurers, auditors, accountants, solicitors and other professional advisers;
recruitment agencies, referees and legally permitted screening providers;
police, courts, regulators, government bodies and other authorities where disclosure is required or appropriate; and
parties involved in a proposed acquisition, sale, investment or restructuring.

We do not sell personal information.

8. International transfers

Some of our technology providers or their supporting companies may process information outside the United Kingdom.

Where personal information is transferred internationally, we use a lawful transfer mechanism where required. This may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another safeguard permitted by UK data protection law.

You may contact us for further information about the safeguards relevant to your information.

9. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, operational, insurance and dispute-resolution requirements.

Our usual retention periods are:

General enquiries and unsuccessful quotations: up to two years after the last meaningful contact.
Customer, supplier, consignment, proof-of-delivery and accounting records: normally seven years after the relevant transaction, accounting period or end of the relationship.
Online accounts: while the account remains active and normally for up to 12 months after closure, except where associated records must be retained for another lawful purpose.
Direct-marketing records: until you opt out or the details are no longer relevant. We may retain a minimal suppression record to ensure we honour an opt-out.
Unsuccessful recruitment applications: normally six months after the recruitment decision.
Recruitment talent-pool records: up to 12 months where the applicant has agreed to this.
CCTV recordings: normally up to 31 days, unless footage must be retained for an incident, investigation or legal claim.
Cookie and website identifiers: for the period shown in our cookie settings or until you withdraw consent, where applicable.

We may retain information for longer where there is an ongoing complaint, claim, investigation, litigation hold or legal requirement.

10. How we protect information

We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, loss or destruction.

These measures include access controls, authentication, staff training, system monitoring, backups, supplier controls and security procedures appropriate to the nature and sensitivity of the information.

No internet service or storage system can be guaranteed to be completely secure. If you believe information relating to you may have been compromised, contact us promptly.

11. Cookies and similar technologies

Our website uses cookies, pixels, scripts and similar technologies.

These may include:

Strictly necessary technologies: required for security, website operation, form submission and remembering privacy choices.
Functional technologies: used to provide optional features and remember preferences.
Analytics technologies: used to understand how visitors use the website and improve its performance.
Advertising technologies: including the Meta Pixel, used to measure advertising, understand website actions and improve the relevance of campaigns.
Embedded services: such as Google Maps, which may process device and usage information when enabled.

Strictly necessary technologies may operate without consent where the law permits. Analytics, advertising and other non-essential technologies are used only after you have provided the required consent.

You can accept, reject or change your choices through the website’s Cookie Settings control. Withdrawing consent does not affect processing that occurred before withdrawal.

You can also restrict cookies through your browser, although doing so may prevent parts of the website from working correctly.

12. Direct marketing

We may send relevant business-to-business communications about our services where permitted by law. Where consent is legally required, we will obtain it before sending marketing.

You can opt out at any time by:

using the unsubscribe option in the communication;
emailing enquiries@whitelogistics.co.uk; or
contacting us using the details in this notice.

Opting out of marketing will not prevent us from sending operational or service-related communications.

13. Your data protection rights

Depending on the circumstances, you may have the right to:

request access to your personal information;
request correction of inaccurate or incomplete information;
request deletion of your information;
request restriction of its use;
object to processing based on legitimate interests;
object to direct marketing;
receive certain information in a portable format;
withdraw consent at any time; and
ask for human review of a solely automated decision that has a legal or similarly significant effect.

These rights are not absolute, and exemptions may apply.

To exercise a right, contact us using the details in section 1. We may need to verify your identity before acting on a request. We will normally respond within one month, although the law permits additional time for particularly complex requests.

You will not normally be charged a fee. We may charge a reasonable fee or refuse a request where the law permits us to do so, including where a request is manifestly unfounded or excessive.

14. Automated decision-making

We do not currently make decisions about individuals based solely on automated processing where those decisions produce legal or similarly significant effects.

We may use advertising technologies to create or select audiences based on website interactions, subject to consent and the controls provided by the relevant advertising platform. This does not determine access to our services or employment.

15. Children

Our website and services are intended for businesses and adults. They are not directed at children, and we do not knowingly collect children’s personal information through the website except where legitimately required in connection with employment, training, legal obligations or another clearly identified purpose.

16. Links to other websites

Our website may contain links to websites and services operated by other organisations. Those organisations are responsible for their own privacy practices. You should read their privacy notices before providing personal information.

17. Changes to this notice

We may update this notice when our services, systems or legal obligations change. The latest version will be published on this page with a revised “last updated” date.

Where a change materially affects how we use personal information, we will take reasonable steps to bring it to the attention of affected individuals.

18. Complaints

Please contact us first if you have a concern about how we use your personal information. We will investigate and respond.

You also have the right to complain to the Information Commissioner’s Office:

Information Commissioner’s Office
Website: https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 1113

Making a complaint to us does not affect your right to contact the Information Commissioner’s Office.