Privacy Policy
& GDPR.
This policy explains how Peddler B.V. collects, uses and protects personal data when you visit our website, use Track & Trace, contact us, request information, apply for a role, receive a delivery through Peddler, or otherwise interact with our services.
Peddler B.V. (“Peddler”, “we”, “us” or “our”) is based in the Netherlands and processes personal data in accordance with the General Data Protection Regulation (GDPR), the Dutch GDPR Implementation Act and other applicable Dutch and EU privacy laws.
1. Who we are
Peddler B.V. is responsible for the personal data described in this policy where we determine the purposes and means of processing.
Peddler B.V.
Registered office: John M. Keynesplein 46, 1066 EP, Amsterdam
Chamber of Commerce number: 68237103
Privacy contact:
For recruitment, Peddler remains responsible for the recruitment process. We use Recruitee as our applicant tracking system to manage applications and candidate communication.
For delivery and logistics services, Peddler may process personal data received from business customers, marketplaces, retailers, fulfilment partners, carriers or other shipping clients. Depending on the contractual arrangement and the specific processing activity, Peddler may act as an independent controller, joint controller or processor. Where Peddler acts as processor, we process personal data on behalf of and in accordance with the instructions of the relevant business customer, subject to applicable data-processing agreements.
2. When this policy applies
This policy applies to personal data processed through:
- the Peddler website and microsite;
- Peddler Track & Trace pages and delivery status tools;
- business contact forms, rate card requests and general enquiries;
- marketing and newsletter sign-ups;
- recruitment pages and applications submitted through Recruitee;
- delivery, fulfilment, return, routing, tracking and customer-service activities;
- personal data supplied to us by customers, retailers, marketplaces, fulfilment partners, carriers or other shipping clients using Peddler’s services;
- communication with Peddler by email, phone, forms, Track & Trace tools or other channels;
- website analytics, cookies and similar technologies.
This policy does not replace separate contractual data-processing arrangements that may apply where Peddler provides delivery, logistics, fulfilment or technology services to business customers. If there is a conflict between this policy and a signed data-processing agreement, the contractual arrangement will apply for that specific processing relationship.
3. Personal data we collect
The personal data we collect depends on how you interact with us.
Website visitors
We may process:
- IP address;
- browser type and device information;
- pages viewed and interaction data;
- Google Analytics identifiers and website usage data, such as page views, events, session information and approximate location, where Google Analytics is enabled;
- cookie preferences;
- approximate location based on browser or device data;
- referral source, such as how you reached our website;
- company visit information, where a business visitor can be identified through Leadinfo based on IP address and related publicly available company information.
Business contacts and prospective customers
If you contact us, request a rate card or ask for information, we may process:
- name;
- business email address;
- phone number;
- company name;
- role or job title;
- city, country or operating area;
- information about your delivery, logistics, fulfilment or commercial requirements;
- messages and communication history.
Delivery recipients, senders and Track & Trace users
When Peddler provides delivery, logistics, fulfilment, return or Track & Trace services, we may process personal data supplied by our business customers, partners or by you directly. This may include:
- recipient name;
- delivery address;
- email address and phone number;
- sender or client name;
- order number, parcel number, barcode, tracking ID or shipment reference;
- delivery instructions or preferences provided by the customer, recipient or shipping client;
- service type, shipment size, weight, delivery window or operational notes;
- parcel status, scan events, hub events, timestamps and route information;
- attempted delivery information, failed delivery reasons, return information and customer-service notes;
- proof of delivery, such as delivery confirmation, signature, photograph or location/time confirmation where used;
- Track & Trace interaction data, such as tracking-page visits, delivery-option selections, device information and IP address.
We ask customers, shipping clients and recipients not to include unnecessary sensitive information in delivery instructions or shipment data.
Recruitment candidates
If you apply for a role at Peddler, we may process:
- name, email address, phone number and address;
- CV, cover letter and application answers;
- work experience, education, qualifications and skills;
- links to professional profiles, such as LinkedIn, if you provide them;
- interview notes and recruitment assessments;
- availability, salary expectations and work preferences;
- right-to-work or identity information where legally required and relevant at a later stage of the process;
- references, if you provide them or give us permission to contact them;
- communication with you during the recruitment process.
We ask candidates not to provide unnecessary sensitive information, such as health information, religion, political views, national identification numbers or other special category data, unless specifically requested and legally necessary.
Marketing contacts
If you subscribe to updates or agree to receive marketing communication, we may process:
- name;
- email address;
- company name;
- communication preferences;
- interaction with our emails or website content.
4. Why we use personal data
We use personal data for the following purposes:
- to operate, secure and improve our website;
- to measure website and Track & Trace performance using Google Analytics and similar analytics tools;
- to provide Track & Trace and delivery status information;
- to process, route, deliver, return and manage shipments;
- to notify recipients about shipment status, delivery windows, changes, failed delivery attempts or available delivery options;
- to provide proof of delivery and delivery confirmation to customers, recipients and shipping clients;
- to handle delivery questions, complaints, claims, returns and customer-service requests;
- to support operational planning, route optimisation, hub management, fleet allocation and service-quality control;
- to monitor service levels, investigate delivery exceptions and improve logistics performance;
- to respond to enquiries and contact requests;
- to provide rate cards, commercial information and follow-up communication;
- to manage business relationships with customers, partners and suppliers;
- to send marketing communication where permitted;
- to use website visit information to understand which companies may be interested in Peddler’s services, improve our business-to-business communication and follow up with relevant business prospects where permitted by law;
- to understand website performance and improve the user experience;
- to manage recruitment, applications, interviews and hiring decisions;
- to assess whether candidates are suitable for current or future roles;
- to comply with legal, tax, accounting, employment and regulatory obligations;
- to protect Peddler’s rights, systems, employees, couriers, customers, recipients and partners;
- to prevent misuse, fraud, security incidents or unlawful activity.
5. Legal bases under the GDPR
We only process personal data where we have a lawful basis under the GDPR. Depending on the situation, we rely on one or more of the following legal bases:
Contract or pre-contractual steps
We process personal data where necessary to take steps before entering into a contract or to perform an agreement with you or your organisation. This may apply to business enquiries, customer communication, recruitment applications and service-related communication.
Legitimate interests
We process personal data where necessary for Peddler’s legitimate business interests, provided those interests are not overridden by your privacy rights. This may include website security, business development, customer communication, service improvement, delivery operations, Track & Trace, proof of delivery, route planning, logistics optimisation, recruitment management, fraud prevention, website analytics through Google Analytics and business-to-business lead identification through Leadinfo.
Consent
We rely on consent where required, for example for certain cookies, Google Analytics or advertising features where consent is required, optional marketing communication or retaining candidate data for future vacancies after the recruitment process has ended. You can withdraw consent at any time.
Legal obligation
We process personal data where necessary to comply with legal obligations, such as tax, accounting, employment, corporate, security or regulatory requirements.
Processing on behalf of business customers
Where Peddler processes shipment or recipient data on behalf of a business customer as processor, the relevant customer is responsible for determining the lawful basis for that processing. In those cases, Peddler processes the data in accordance with the customer’s documented instructions and the applicable data-processing agreement.
6. Delivery, Track & Trace and client-supplied shipment data
Peddler provides delivery, logistics, fulfilment, return and tracking services to business customers, including retailers, marketplaces, fulfilment companies, carriers and other shipping clients.
To perform these services, customers or partners may provide us with personal data relating to senders, recipients, shipments and delivery contacts. We use this data only as necessary to provide, manage, secure and improve the relevant service, unless another lawful basis or contractual arrangement applies.
Track & Trace allows recipients, customers and shipping clients to view shipment status and related delivery information. Depending on the service, Track & Trace may show information such as shipment reference, delivery status, estimated delivery window, delivery attempts, return status or proof of delivery.
We do not use shipment or recipient data supplied by our customers for unrelated marketing to recipients. We do not sell shipment or recipient data.
Where possible, proof-of-delivery photographs or confirmations should avoid capturing people, unrelated property or unnecessary personal information. However, in some cases, delivery confirmation may include limited contextual information necessary to evidence that the delivery was completed.
If you are a delivery recipient and your data was supplied to us by a retailer, marketplace, carrier or other shipping client, you may also need to contact that organisation to exercise your privacy rights, because they may be the primary controller of your shipment data. You can also contact Peddler at , and we will assist or redirect the request where appropriate.
7. Recruitment and Recruitee
Peddler uses Recruitee to manage job applications and candidate communication. When you apply for a role through our careers site, your personal data is processed for recruitment purposes.
We use candidate data to:
- review your application;
- communicate with you about the role;
- schedule interviews;
- assess suitability;
- compare candidates fairly;
- make hiring decisions;
- prepare an employment or contractor relationship if you are selected;
- keep records of the recruitment process where necessary.
Recruitee acts as a service provider to Peddler for applicant tracking and recruitment administration. Peddler determines why and how candidate data is processed for our recruitment process.
If you are not selected, we will normally delete your application data within 4 weeks after the recruitment process has ended, unless you consent to us retaining your data for future vacancies. With your consent, we may retain your candidate data for up to 1 year. If you are hired, relevant application data may become part of your personnel file and will be retained in accordance with applicable employment and tax retention rules.
9. Marketing communication
We may send marketing communication to business contacts, prospects or subscribers where permitted by law.
You can unsubscribe from marketing emails at any time by using the unsubscribe link in the email or by contacting us at .
We do not sell personal data.
11. International transfers
We primarily process personal data within the European Economic Area. Some service providers may process data outside the EEA. Where this happens, we use appropriate safeguards, such as adequacy decisions, Standard Contractual Clauses or other lawful transfer mechanisms under the GDPR.
12. Security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.
These measures may include access controls, secure systems, role-based permissions, monitoring, encryption where appropriate, supplier due diligence and internal policies.
No system is completely secure. If we become aware of a personal data breach that must be reported, we will follow the applicable GDPR breach notification rules.
13. How long we keep personal data
We do not keep personal data longer than necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.
Indicative retention periods are:
- website analytics data, including Google Analytics data: according to the settings of the analytics tool, usually limited to what is necessary for reporting and improvement;
- Track & Trace interaction data: for as long as necessary to provide the tracking service, investigate delivery issues and maintain security;
- shipment, routing and delivery-event data: for as long as necessary to perform the service, provide customer support, handle disputes or claims, meet customer contractual requirements and comply with legal obligations;
- proof-of-delivery data: for as long as necessary to evidence delivery, resolve claims, support customer-service enquiries and meet contractual or legal requirements;
- Leadinfo and B2B website intelligence data: for as long as necessary for business development, analytics and follow-up purposes, subject to opt-out and applicable legal requirements;
- Zoho SalesIQ chat and support data: for as long as necessary to handle the chat, follow up on support or commercial questions and maintain service records, subject to applicable legal requirements;
- business enquiries: as long as needed to respond and manage the relationship, and then for a reasonable period for follow-up or legal record purposes;
- marketing data: until you unsubscribe or withdraw consent, unless we need to retain limited data to respect your opt-out;
- candidate data after rejection: normally 4 weeks after the recruitment process ends;
- candidate data with consent for future roles: up to 1 year;
- hired candidate data: retained as part of the personnel file according to employment and tax retention rules;
- financial, tax and accounting records: generally 7 years where required under Dutch tax law;
- legal claims and disputes: as long as necessary to establish, exercise or defend legal rights.
14. Your GDPR rights
Under the GDPR, you have the following rights, subject to legal conditions and exceptions:
- the right to be informed about how we process your personal data;
- the right to access your personal data;
- the right to correct inaccurate or incomplete data;
- the right to request deletion of your personal data;
- the right to restrict processing;
- the right to object to processing based on legitimate interests or direct marketing;
- the right to data portability;
- the right to withdraw consent at any time where processing is based on consent;
- the right not to be subject to solely automated decisions with legal or similarly significant effects, where applicable.
To exercise your rights, contact us at .
If your personal data was supplied to Peddler by a business customer, retailer, marketplace, carrier or other shipping client, we may need to refer your request to that organisation or coordinate with them, depending on the processing role and contractual arrangement.
We may ask you to provide information to verify your identity. We will respond to your request in accordance with the GDPR.
15. Complaints
If you have concerns about how we process your personal data, please contact us first at so we can try to resolve the issue.
You also have the right to lodge a complaint with the Dutch supervisory authority:
Autoriteit Persoonsgegevens
www.autoriteitpersoonsgegevens.nl
16. Changes to this policy
We may update this Privacy & GDPR Policy from time to time. The latest version will always be available on our website. If we make material changes, we will take reasonable steps to inform you where appropriate.