Privacy policy
How we collect, use and protect your personal data, and the rights you have over it.
Last updated: 12 October 2026
This policy explains how Bringly Limited uses personal data when you use the Bringly customer app, the Bringly Driver app, the Bringly store portal, our websites, or when you contact us. It applies to customers, drivers, store staff and anyone who joins our waiting list or gets in touch.
1. Who we are
Bringly Limited (“Bringly”, “we”, “us”) is the controller of your personal data, which means we decide how and why it is used. We are a company registered in Scotland, company number SC901881, with our registered office at 48 West George Street, Glasgow, Scotland, G2 1BP.
For any question about this policy or your personal data, email support@bringly.co.uk with the subject “Privacy request”, or write to us at the address above.
Stores on Bringly are independent businesses. When a store receives your order details to fulfil your order, including delivering it with its own drivers, it is also responsible for how it handles that information under data protection law. Drivers are employed or engaged by stores, so a store is responsible for its own drivers’ employment records, such as right-to-work and licence checks.
2. The data we collect
What we collect depends on how you use Bringly. We only collect what we need to run the service.
If you are a customer
- Identity and contact data: your name and email address.
- Account data: your password, which we store only in a securely hashed form that we can’t read, and your account settings.
- Address data: the delivery addresses you save, including the postcode, and the map coordinates we work out from your postcode to find stores near you and calculate delivery.
- Order data: what you ordered, from which store, prices, the delivery fee and service charge, whether the order is for delivery or click & collect, any substitutions, and order status and history.
- Payment data: a record of payments and refunds, such as amounts and status. Your card details are collected and held by our payment provider, not by us. We never see or store your full card number.
- Communications: messages you send us and our replies.
If you are a driver
Drivers on Bringly are employed or engaged by the store they deliver for. The store, not Bringly, carries out your right-to-work, licence and insurance checks and is responsible for your pay.
- Identity and contact data: your name, your photo and your email address, which the store (or we, on its behalf) give us when your account is set up.
- Account and vehicle data: your password (hashed), the store or stores you are linked to, the type of vehicle you use, and whether you are online.
- Location data: your device’s location, taken when you go online in the Bringly Driver app, so we can plan the route for your delivery. The app only asks for location while you are using it. We keep only your most recent position, not a history of where you have been.
- Delivery data: the deliveries you complete.
If you work at a store
- Your name, work email address and password (hashed), and which store you work for.
- Business information about the store, such as its name, address, products, prices and delivery settings, the drivers it has linked to its account, and the payout details the store’s owner verifies with our payment provider.
If you join our waiting list or contact us
- Your name, email address, postcode, town or city, and whether you are interested as a customer, a business or a driver.
- The content of any message you send us.
Technical data
When you use our apps or websites, our servers automatically record basic technical information, such as your IP address, the date and time of the request, the page or feature requested, and your browser or device type. We use it to run the service securely and to fix problems.
Data we don’t collect
We don’t collect special category data, such as information about your health, ethnicity, religion or sexual orientation, and we don’t ask for it. We don’t use advertising or third-party analytics trackers. We don’t collect information about criminal convictions.
If you don’t give us data
Some data is needed to provide the service. For example, we can’t deliver an order without a delivery address, or pay a store without its payout details. If you don’t provide it, we may not be able to provide the service you have asked for.
3. How we collect it
- From you: when you create an account, save an address, place an order, apply to drive, set up a store, join our waiting list, or contact us.
- Automatically: from your device and our server logs when you use our apps and websites, and from the Bringly Driver app’s location feature if you allow it.
- From others: from stores, about the status of your order and item availability; from drivers, about delivery progress; and from our payment provider, about payments, refunds and payout status.
4. How we use it, and our lawful bases
UK data protection law only lets us use personal data when we have a lawful basis. The table below sets out what we use your data for and the basis we rely on.
| What we use it for | Data used | Lawful basis |
|---|---|---|
| Creating and managing your account, and letting you sign in | Identity, contact, account | Contract |
| Showing stores near you and calculating delivery fees | Address | Contract |
| Taking and fulfilling orders: passing them to stores, planning delivery routes and showing substitutions | Identity, address, order | Contract |
| Taking payments and issuing refunds | Order, payment | Contract |
| Setting up driver accounts linked to a store, and showing customers who is delivering their order | Driver identity, photo, store link | Contract, and legitimate interests (letting customers know who is delivering to them) |
| Showing drivers their store’s orders and routes, and paying stores | Driver location, delivery, store payout data | Contract |
| Answering your questions and handling complaints | Identity, contact, communications, order | Contract, or legitimate interests (providing good customer service) |
| Running a waiting list and telling people when we launch in their area | Waiting list data | Consent, which you can withdraw at any time |
| Keeping the service secure, and preventing fraud and misuse | Technical, account, order, payment | Legitimate interests (protecting our customers, partners and business) |
| Improving the service, for example using anonymised order statistics to see which areas to launch in | Order, technical (anonymised where possible) | Legitimate interests (developing our business) |
| Keeping financial records and meeting tax, accounting and other legal duties | Order, payment, payout | Legal obligation |
Where we rely on legitimate interests, we have weighed our interests against your rights and only go ahead where your rights don’t override them. You can ask us for more information about this.
We will only use your data for a new purpose if it is compatible with the reason we collected it. If we need to use it for an unrelated purpose, we will tell you and explain the lawful basis first.
We don’t make decisions about you based solely on automated processing that have legal or similarly significant effects on you. Automated route planning helps drivers, but it doesn’t make decisions of that kind.
5. Marketing
We don’t currently send marketing messages. If we start to, we will only email you about our own services where you have agreed to it, or where you are an existing customer and haven’t opted out. Every marketing email will include a way to unsubscribe. Service messages, such as order confirmations and updates, are not marketing and will still be sent.
We never sell your personal data, and we will not share it with other companies for their own marketing.
6. Who we share it with
We share personal data only where we need to, and only the minimum needed:
- Stores receive the details of the items you ordered from them, and an order reference, so they can prepare your order.
- Drivers working for the store you ordered from receive the details they need to deliver your order, such as the store, your name and your delivery address. You may see your driver’s name and photo.
- Service providers that work for us under contract and only on our instructions:
| Provider | What they do for us | Where |
|---|---|---|
| App Hosting Partner | Hosts our apps, websites and database | United Kingdom (London region) |
| Payment Provider | Processes payments and refunds, verifies store identity, and pays stores their earnings | UK, EU and US |
| Address Lookup Provider | Converts a postcode into map coordinates. Only the postcode is sent. | United Kingdom |
| Routing & Navigation Engine | Calculates road travel times for driver routes. Only the map coordinates of the stops are sent, with no names or other details. | Germany |
| Email Hosting Partner | Hosts our email, including messages you send to support@bringly.co.uk | US and EU |
Our payment provider also uses some data as an independent controller, for example to meet its own legal duties on fraud prevention and verifying identity. It has its own privacy policy, which it makes available when you pay.
We may also share personal data:
- with professional advisers such as accountants, lawyers and insurers;
- with the police, HMRC, regulators or other authorities where the law requires it, or where it is needed to prevent fraud or protect someone’s safety; and
- with a buyer or investor if we sell, merge or restructure all or part of our business. In that case your data would continue to be protected in line with this policy.
7. International transfers
We store our main database in the UK. Some of the providers listed above process data outside the UK. Where data goes to a country without a UK “adequacy” decision, such as the United States, we make sure it is protected by an approved safeguard. This could be the UK International Data Transfer Agreement or Addendum, or certification under the UK Extension to the EU–US Data Privacy Framework. You can contact us for more information.
8. Cookies and device storage
This company website does not use any cookies.
The Bringly ordering website and store portal use only strictly necessary cookies, which keep you signed in securely. Our mobile apps store a sign-in token on your device for the same reason. Because these are essential for the service to work, we don’t ask for consent for them. We don’t use advertising, tracking or analytics cookies. If we ever want to, we will ask for your consent first.
9. Keeping your data secure
We use appropriate technical and organisational measures to protect personal data. These include encrypting data in transit, hashing passwords, restricting access to people who need it for their work, and using reputable, security-certified providers. Card payments are handled entirely by our payment provider, which is certified to the highest level of the Payment Card Industry Data Security Standard (PCI DSS).
We have procedures for dealing with suspected data breaches. Where the law requires it, we will tell you and the Information Commissioner’s Office (ICO) about a breach.
10. How long we keep it
We keep personal data only for as long as we need it for the purposes above:
- Account and address data: while your account is open. We delete it when you ask us to delete your account, or after two years without any activity on your account.
- Order, payment and payout records: for six years from the end of the financial year they relate to, as UK tax and company law requires.
- Driver location: only your most recent position is stored, and it is replaced each time it updates. It is deleted with your account.
- Driver records: your name, photo and the store you are linked to are kept while you are linked to a store, and deleted with your account. Right-to-work and licence documents are held by the store that employs you, not by Bringly.
- Waiting list data: until we have told you we are launching in your area, or for up to two years, whichever is sooner. You can ask us to remove you at any time.
- Support messages: for up to two years after your question is resolved.
- Server logs: for up to 90 days.
We may keep anonymised information that can no longer identify you, such as overall order statistics, for longer.
11. Your rights
Under UK data protection law you have the right to:
- Access: get a copy of the personal data we hold about you.
- Correction: have inaccurate or incomplete data corrected.
- Erasure: ask us to delete your data. See also Delete your account. We may need to keep some records, such as financial records, for legal reasons.
- Restriction: ask us to pause using your data, for example while we check whether it is accurate.
- Objection: object to our use of your data where we rely on legitimate interests. You can always object to direct marketing.
- Portability: receive data you gave us in a structured, machine-readable format, or ask us to send it to another organisation.
- Withdraw consent: where we rely on your consent, withdraw it at any time. This doesn’t affect anything we did before you withdrew it.
To use any of these rights, email support@bringly.co.uk. Exercising your rights is usually free. We may charge a reasonable fee, or refuse, if a request is clearly unfounded or excessive. We may ask you to confirm your identity before we act on a request. We will reply within one month, or tell you within that month if a complex request will take longer (up to two more months).
If you are unhappy with how we have used your data, please contact us first and we will try to put it right. You also have the right to complain to the Information Commissioner’s Office, the UK data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.
12. Children
Bringly is not intended for anyone under 18, and we don’t knowingly collect personal data from children. If you think a child has given us their data, please contact us and we will delete it.
13. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated. If we make significant changes, we will tell you in the app or by email.