Privacy Policy

1. Who is responsible for your data

The data controller is Onshore. Contact us about privacy at privacy@onshoredelivery.com. Company details are on our legal notice.

When a shipper and a carrier exchange information to perform a delivery (for example the delivery address and the recipient’s name), the carrier also uses that information as an independent controller for the purpose of carrying out the job.

2. What we collect, why, and our legal basis

We collect most data directly from you. Some comes from other users (for example a shipper naming a recipient), from Stripe (payment and payout status), from public AIS vessel data, from the DVLA vehicle register, and — for B2B prospecting — from public professional sources such as company websites and directories.

3. Automated tools and AI

• We use AI services (provided by Anthropic) to power the help assistant, to translate messages between users, to help detect fraud, circumvention and prohibited content in listings and messages, and to help our team manage business contacts.
• Automated tools may flag content or activity. A member of our team reviews flagged cases before we suspend an account, remove content or take other significant action. We do not make decisions with legal or similarly significant effects about you based solely on automated processing.
• Our AI provider processes the data only to provide the service to us and does not use it to train its models under our commercial terms.

4. Business prospecting (CRM)

If you work for a yacht, yacht supplier, marina or other marine business, we may hold your professional contact details (name, job title, business email or phone, company) to introduce Onshore to you. We only contact you about services relevant to your professional role. Every message includes a way to opt out, and you can object at any time by emailing privacy@onshoredelivery.com — we will then stop contacting you and keep only what we need to respect your objection.

5. Who we share data with

• Other users, as needed for a booking: shippers see the carrier’s name, vehicle, rating and live location during the job; carriers see the collection and delivery details, cargo description and the contact for the booking.
• Service providers (processors) who act on our instructions under a data-processing agreement, listed below.
• Authorities where the law requires it — for example tax authorities (DAC7 reporting of carrier income), or police and courts on a valid request.
• A buyer or successor if our business is reorganised or sold, under the same protections.

We do not sell personal data.

Driver location and the background tracking app

Drivers can share their location through the free Traccar Client app, which keeps working when the phone is locked. We use it only on delivery days: tracking is switched on for the day of a confirmed delivery (we tell you beforehand by email and WhatsApp or SMS, with set-up instructions) and stops automatically at 21:00 Paris time, after which positions are discarded. We also discard positions whenever no job is in progress. While a delivery is in transit, the shipper and the delivery recipient can see the driver’s position and estimated arrival through their tracking link; nobody else can. Positions are kept with the booking for up to 12 months (see section 7). A driver may instead opt in to permanent tracking from the driver page, in which case positions are recorded whenever a job is in progress, on any day; this is optional, based on consent, and can be withdrawn at any time on the driver page (or by choosing “Stop tracking me”, which disables the device code).

Our service providers

6. International transfers

Some providers process data outside the EEA and the UK, mainly in the United States. Where they do, we rely on the EU–US Data Privacy Framework (and its UK Extension) for certified providers, or on the European Commission’s Standard Contractual Clauses and, for UK data, the UK International Data Transfer Agreement or Addendum, together with additional safeguards where needed. You can ask us for a copy of the relevant safeguards.

7. How long we keep data

We may keep data longer where needed to establish or defend a legal claim, or where the law requires it.

8. Your rights

Under the GDPR and the UK GDPR you have the right to:

• access your data and get a copy;
• correct inaccurate data;
• have data deleted, where there is no reason for us to keep it;
• restrict or object to processing — including an absolute right to object to direct marketing and B2B prospecting;
• data portability for data you gave us under contract or consent;
• withdraw consent at any time, where we rely on consent (for example push notifications);
• give instructions about what happens to your data after your death (France).

Email privacy@onshoredelivery.com. We reply within one month. We may need to confirm your identity.

You can complain to a supervisory authority — in France the CNIL, in the UK the Information Commissioner’s Office (ICO), or the authority where you live or work. We’d appreciate the chance to help first.

9. Cookies and local storage

We only use storage that is strictly necessary to provide the service: keeping you signed in, remembering that you have seen our cookie notice, delivering push notifications you have turned on, and Stripe’s cookies during checkout for payment security and fraud prevention. We do not use analytics or advertising cookies. Details are in our Cookie Policy. If we ever add optional cookies, we will ask for your consent first.

10. Security

We use encryption in transit, access controls, hashed passwords, and restricted access to verification documents. No system is perfectly secure; if a breach affects you, we will tell you and the regulator as the law requires.

11. Children

Onshore is not for anyone under 18. We do not knowingly collect data about children.

12. Changes

We will update this policy when our practices change and show the new effective date. We will tell you about significant changes by email or in the app.