Privacy Policy

Basic tracking stores the tracking code and the simulation start date. When an authorised retailer registers an order through the API, we also store the full name, email address, mobile number, delivery address and order date to give context to the simulated tracking.

Customer details are kept for 20 days from when they are first received. Identical retries do not extend this period. Once it ends, the details stop being available immediately and an automatic daily job permanently deletes expired records. Basic tracking without customer details remains. Hosting backups may have their own retention period.

We show the full name, the start of the email address with its domain, the last four digits of the mobile number, town/city, postcode and order date. All other contact details stay hidden. The street address and house or flat number are never returned on public tracking. Anyone with the tracking code can see these details — a tracking code is not a password, so please avoid sharing it publicly.

The retailer sending the data must inform the customer and have a lawful basis under UK GDPR. Delivery statuses are simulated, even though recipient details may come from a real order. Please use dummy data while testing; TrackParcel's contact details and data controller information are still to be confirmed before use with real customers. You can raise concerns with the Information Commissioner's Office (ICO).