Privacy Policy

Last updated: 10 June 2026

1. Information We Collect

We collect information you provide directly when you:

  • Create an account or register for a trial
  • Subscribe to a paid plan
  • Use the Steddi platform (delivery routes, driver data, customer addresses)
  • Connect a marketplace or store integration (e.g. eBay, Shopify, WooCommerce) — see Section 4
  • Contact us via our website, email, or support channels
  • Subscribe to our newsletter

This may include your name, email address, company name, phone number, billing details, delivery addresses managed within the platform, and driver information you add to your account.

Information collected automatically: When you use our website or platform, we automatically collect device information (browser type, operating system), IP address, pages viewed, and usage analytics. We use cookies and similar technologies as described in Section 7.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Steddi platform
  • Process route planning, delivery management, and proof-of-delivery data
  • Process payments and manage your subscription
  • Send transactional emails (account confirmations, delivery notifications, invoices)
  • Send product updates and marketing communications (with your consent)
  • Provide customer support
  • Analyse usage patterns to improve our service
  • Comply with legal obligations

We do not sell your personal information to third parties.

3. Data Sharing & Third Parties

We may share your information with:

  • Service providers: Payment processors (e.g. Stripe), cloud hosting providers, email delivery services, and analytics tools that help us operate the platform
  • Your customers: When you use customer-facing features (customer portal, delivery tracking, notifications), limited delivery information is shared with your end customers as part of the service
  • Legal requirements: If required by law, regulation, or legal process
  • Business transfers: In connection with a merger, acquisition, or sale of assets

All third-party service providers are contractually required to protect your data and use it only for the purposes we specify.

4. Marketplace & Store Integrations

If you connect a marketplace or e-commerce account (such as eBay, Shopify, or WooCommerce) to Steddi, we receive data from that platform on your behalf: your marketplace account identifiers (such as your username), secure authorisation tokens, and your orders — including your buyers’ delivery details (name, delivery address, phone number, email address) and order item information. We use this data solely to import your orders into your courier company’s delivery workflow and to send delivery updates back to the marketplace on your behalf (for example, marking an order as dispatched). Buyers’ details are processed as delivery records on behalf of the courier company fulfilling the delivery.

Authorisation tokens are stored securely and only for as long as the integration remains connected. You can disconnect an integration at any time from the portal, or revoke Steddi’s access from your marketplace account. If eBay notifies us that an eBay account has been deleted or closed, we deactivate the related connection and delete the stored tokens and account identifiers. Our handling of data received from eBay is consistent with the eBay Privacy Notice.

5. Data Security

We take the security of your data seriously and implement appropriate technical and organisational measures, including:

  • Encryption of data in transit (TLS/SSL) and at rest
  • Regular security assessments and monitoring
  • Access controls and authentication requirements
  • Secure cloud infrastructure with reputable providers

While we strive to protect your information, no method of transmission or storage is 100% secure. If you become aware of a security vulnerability, please contact us immediately at support@getsteddi.com.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. After account closure, we may retain certain data for a reasonable period to:

  • Comply with legal and regulatory obligations
  • Resolve disputes
  • Enforce our agreements

Delivery and route data within your account is retained for the duration of your subscription. You can export or request deletion of your data at any time by contacting us.

7. Cookies

We use cookies and similar technologies to:

  • Essential cookies: Required for the platform to function (authentication, security)
  • Analytics cookies: Help us understand how visitors use our website so we can improve it
  • Preference cookies: Remember your settings and preferences

You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of the platform.

8. Your Rights

Under applicable data protection laws (including the UK GDPR and Data Protection Act 2018), you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Delete your personal data (subject to legal retention requirements)
  • Restrict or object to certain processing of your data
  • Data portability — receive your data in a structured, machine-readable format
  • Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at support@getsteddi.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been violated.

9. International Data Transfers

Your data is primarily stored and processed within the United Kingdom and European Economic Area. Where we transfer data outside these regions (e.g. to service providers), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

10. Children’s Privacy

Steddi is a business-to-business service and is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us and we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on our website and updating the “Last updated” date. Continued use of the platform after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us: