Privacy Policy

Last updated: 12 July 2026

Order Flow Logistics Ltd ("we", "us", "our") is committed to protecting the personal information of our customers, prospects and website visitors. This policy explains what data we collect, how we use it, and the rights you have under the UK GDPR and EU GDPR.

1. Who we are

Order Flow Logistics Ltd is a company registered in England and Wales (No. 12047833) with a registered office at 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. For privacy questions, contact support@order-flow.co.

2. What data we collect

3. How we use it

4. Lawful basis

We process personal data on the basis of (a) performance of a contract, (b) our legitimate interests in running the business, or (c) your consent — depending on the type of processing.

5. Sharing

We share limited data with sub-processors that help us deliver the service — carrier partners (DHL, DPD, GLS), payment providers, cloud hosting (EU-only). We do not sell personal data to third parties for advertising.

6. Retention

Contact data is retained while the business relationship is active plus 12 months. Operational order data is retained for 7 years to meet accounting and customs regulations.

7. Your rights

You have the right to access, correct, delete or export your personal data, restrict processing, object to processing, and lodge a complaint with the Information Commissioner's Office (ICO) in the UK or your national data-protection authority in the EU. To exercise any of these rights, email support@order-flow.co.

8. Marketing communications

Where you have opted in, we may send you occasional emails about our services. Every message includes an unsubscribe link and the List-Unsubscribe RFC 8058 header. You can also unsubscribe by emailing support@order-flow.co.

9. Cookies

This website uses only strictly-necessary cookies required for security. We do not use tracking, advertising or third-party analytics cookies.

10. International transfers

All customer data is stored on EU-based infrastructure (Frankfurt, London, Amsterdam). We do not transfer personal data outside the UK or EEA.

11. Changes to this policy

We may update this policy from time to time. Material changes will be notified by email to active customers 30 days before they take effect.