Privacy Notice

Parcel Studio Limited is a UK fulfilment, warehousing and third-party logistics business serving e-commerce brands based in the United States and Canada.

Company name: Parcel Studio Limited

Company number: 17459633

ICO registration number: ZC249255

Registered office: 124 City Road, London, EC1V 2NX

Email: info@parcelstudio.co.uk

This distinction matters, because it determines who you contact about your data.

We are the data controller for personal information we handle in our own right: website visitors, enquiries, prospective clients, client contacts, suppliers, couriers, partners and job applicants. This notice covers that information.

We are a data processor for personal information belonging to our clients' end customers — the people receiving the parcels we pack and dispatch. Our client is the controller of that data. We process it only on their documented instructions, under a written agreement.

If you are an end customer who has received a parcel we dispatched and you want to exercise your data protection rights, contact the brand you ordered from. They control that information. If you contact us directly, we will pass your request to them and let you know we have done so.

• Visitors to this website

• People who submit an enquiry or contact form

• People who book a call with us

• People who request a sample packaging kit

• Prospective clients and business contacts

• Client contacts and account users

• Supplier, courier, contractor and partner contacts

• People who contact us by email, phone, WhatsApp or social media

• People who apply for roles with us

• End customers, in the limited circumstances described in section 02.

Website visitors

IP address, device and browser information, pages visited, referral source, approximate location derived from technical data, interaction data such as clicks, and cookie preferences.

Enquiries, calls and digital sample kit requests

Name, business name, job title, email, phone number, brand website, e-commerce platform in use, monthly UK order volume, product category, current fulfilment arrangement, and the content of your message. Digital sample kit requests are made by email and do not require a shipping address.

Clients and client contacts

Names, job titles and contact details for key contacts. Billing contact details. Signed agreements, proposals and onboarding documentation. System and portal access details. Support correspondence and operational records needed to run the account.

Payment information

Payment details are collected and stored by Airwallex, our payment processor, not by us. We hold a token that lets us charge the card, together with the last four digits and expiry date for identification. We do not hold full card numbers or security codes at any point. Airwallex handles both our service fees — onboarding, storage, prepaid fulfilment credits and batch receiving fees — and the daily charge for courier costs where you use our carrier account.

Suppliers, couriers, contractors and partners

Name, business contact details, job title, company information, invoice and payment details, contract information and correspondence.

Job applicants

Name and contact details, CV or work history, qualifications and experience, interview notes, and references where provided.

End-customer order data (as processor)

Customer name, delivery address, email address, phone number, order contents, tracking information, and returns or support correspondence where needed to provide fulfilment services to our client.

We do not routinely collect special category data — health information, political opinions, religious beliefs, biometric data. Please do not send it unless we have specifically asked and explained why.

• When you visit this website

• When you email us an enquiry or a sample kit request

• When you book a call through our scheduling tool

• When you email, call or message us

• When you become a client, supplier or partner

• When your employer provides your details as a business contact

• When a client's store platform transmits order data to our order management system

• From third-party tools we use for analytics, scheduling, payments and order management.

To respond to enquiries and prepare proposals. Understanding your requirements, arranging calls, preparing quotes and following up.

Legitimate interests, and steps taken before entering a contract.

To send digital sample packaging kits by email to the address you provide.

Steps taken before entering a contract.

To provide fulfilment services. Setting up accounts, configuring integrations, managing stock, processing orders and returns, handling support requests.

Contract, and legitimate interests.

To take payment. Charging onboarding fees, storage retainers, fulfilment credit top-ups and daily postage charges; managing invoices and arrears.

Contract, and legal obligation.

To send service communications. Operational updates, low-balance notifications, account messages, billing notices and service changes. These are not marketing and you cannot opt out of them while you hold an account.

Contract, legal obligation, and legitimate interests.

To send marketing. Occasional emails about our services to business contacts and people who have enquired.

Consent, soft opt-in where it applies, and legitimate interests for business-to-business marketing.

To improve this website. Analytics and conversion measurement.

Consent for non-essential cookies; legitimate interests for essential measurement.

To manage suppliers and partners. Contracts, payments, service communications and business records.

Contract, legal obligation, and legitimate interests.

To manage recruitment. Assessing applications and communicating with candidates.

Steps taken before entering a contract, and legitimate interests.

To meet legal obligations. Tax, accounting, audit, customs record-keeping and regulatory compliance.

Legal obligation.

To protect the business. Preventing fraud, securing our systems, resolving disputes, recovering debts and defending legal claims.

Legitimate interests, and legal obligation.

We do not sell personal information. We share it only where necessary:

• Royal Mail, to dispatch parcels. Recipient name and delivery address.

• Our order management system provider, which hosts client and order data.

• Airwallex, our payment processor, which handles payment details and transactions.

• Netlify, which hosts this website.

• Google, which provides our tag management, website analytics, advertising measurement, and the video calling used for booked calls.

• Cal.com, which handles call bookings.

• CookieYes, which records your cookie preferences.

• Our scheduling tool, for booked calls.

• Analytics and website providers, where you have consented to cookies.

• Our accountants, insurers and professional advisers, where required.

• Regulators, HMRC and law enforcement, where we are legally obliged.

• A buyer or successor, if the business is sold or restructured.

Our clients are businesses in the United States and Canada, so client contact information is routinely shared with people in those countries as part of running the account. Some of the tools we use also store data outside the UK.

Where personal information leaves the UK, we rely on one of the following: an adequacy decision covering the destination country; the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses; or your explicit consent where neither applies.

You can ask us for details of the safeguards in place for any specific transfer.

The providers we use — including Netlify, Google, Cal.com, Airwallex and CookieYes — may process data outside the UK. Where they do, the safeguards described above apply.

• Website analytics: up to 26 months

• Unsuccessful enquiries: 24 months from last contact

• Digital sample kit requests: 24 months from request

• Client records: for the life of the agreement, then 7 years from the end of the relationship, to meet tax and legal record-keeping requirements

• End-customer order data (as processor): for the period set by our client's instructions, then deleted or returned. On termination of a client agreement, we return or delete this data in line with our agreement with them.

• Supplier records: 7 years from the end of the relationship

• Unsuccessful job applications: 12 months, unless you ask us to keep them longer

• Accounting records: 7 years, as required by law

We are a UK company and we comply with UK GDPR and the Data Protection Act 2018. UK GDPR is the United Kingdom's implementation of the General Data Protection Regulation and gives you substantially the same rights as EU GDPR.

You have the right to:

• Be told how your information is used

• Get a copy of the personal information we hold about you

• Have inaccurate information corrected

• Ask us to delete information, in some circumstances

• Ask us to restrict how we use it, in some circumstances

• Receive information you gave us in a portable format

• Object to us using your information for direct marketing, at any time, with no exceptions

• Object to processing based on legitimate interests

• Withdraw consent where we rely on it

To exercise any of these, email info@parcelstudio.co.uk. We will respond within one month. We will not charge you unless a request is manifestly unfounded or excessive.

If you are an end customer, see section 02 — contact the brand you ordered from.

You can stop marketing emails by clicking unsubscribe in any message or emailing info@parcelstudio.co.uk. If you object to direct marketing we will stop, with no further conditions.

This website uses cookies. Some are essential for it to function. Others measure performance and help us understand which pages lead to enquiries. We ask for your consent before setting anything non-essential, and you can change or withdraw your preferences at any time through our cookie settings. Full detail is in our Cookie Policy.

We hold stock and data for brands whose products are valuable, and we treat both accordingly. Access to client and order data is restricted to people who need it. Systems are protected by access controls and authentication. We do not hold card numbers. If a breach occurs that is likely to risk your rights and freedoms, we will notify the ICO within 72 hours and tell you directly where required.

If you are unhappy with how we have handled your information, tell us first at info@parcelstudio.co.uk and we will try to put it right.

You also have the right to complain to the Information Commissioner's Office at any time:

Information Commissioner's Office

Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

Helpline: 0303 123 1113

ico.org.uk

We may update this notice as our services change or the law develops. The date at the top shows when it was last revised. Material changes will be flagged on this page.