Privacy Policy

Cully Express is a trading name of A&S Signatures Ltd, a company registered in England and Wales with company number 15693230 ("we", "us", "our"). We are the data controller responsible for your personal data. We operate the Cully Express food delivery platform, including the mobile application, website, and associated services. Our registered office address is: A&S Signatures Ltd 33 Raleigh Drive Cullompton Devon EX15 1FZ United Kingdom If you have any questions about this Privacy Policy or how we handle your data, please contact us at hello@cullyexpress.com.

We collect personal data in the following categories: Account Data: Name, email address, phone number, and password when you create an account. Order Data: Delivery address, order history, payment method type (we do not store full card details), and any special instructions. Location Data: With your permission, we collect real-time GPS location to enable delivery tracking. Drivers' location is collected during active deliveries. Device Data: IP address, device type, operating system, app version, and usage data to improve the service. Communication Data: Messages sent through our in-app support or contact forms. Restaurant & Driver Data: Business registration details, bank account information (for payouts), driving licence details, and background check results for drivers.

We use your personal data to: • Fulfil your food delivery orders • Process payments and payouts to restaurant partners and drivers • Provide real-time delivery tracking • Communicate with you about your orders and account • Improve our platform and personalise your experience • Comply with legal obligations • Prevent fraud and ensure platform safety • Send marketing communications (where you have consented)

We process your personal data under the following legal bases: Contract: Processing necessary to fulfil our contract with you (delivering orders, processing payments). Legal Obligation: Processing required by law (tax records, fraud prevention). Legitimate Interests: Improving our service, fraud prevention, and communicating relevant information. Consent: Marketing communications and optional location sharing. You may withdraw consent at any time.

We share your data with: Restaurant Partners: Your name, delivery address, and order details to fulfil your order. Delivery Drivers: Your first name, delivery address, and contact number to complete deliveries. Payment Processors: Secure third-party payment providers to process transactions. Technology Partners: Firebase services that help us store enquiries, manage admin access, and operate the platform; Resend, which helps us deliver email notifications; and cloud infrastructure providers that host and secure our services. Legal Authorities: Where required by law or to protect the safety of users. We do not sell your personal data to third parties.

We retain your personal data for as long as your account is active and for a reasonable period thereafter in case of disputes or legal obligations: Account Data: Retained while your account is active, then deleted or anonymised after 3 years of inactivity. Order Data: Retained for 7 years for tax and legal compliance. Driver Data: Retained for 5 years after the end of a driver's engagement. You can request deletion of your data at any time by contacting us at hello@cullyexpress.com.

Under UK GDPR, you have the following rights: Right of Access: Request a copy of the personal data we hold about you. Right to Rectification: Request correction of inaccurate data. Right to Erasure: Request deletion of your data ("the right to be forgotten"), subject to legal obligations. Right to Restriction: Request we restrict processing of your data. Right to Portability: Receive your data in a structured, machine-readable format. Right to Object: Object to processing based on legitimate interests. Right to Withdraw Consent: Where processing is based on consent, you may withdraw at any time. To exercise any of these rights, contact hello@cullyexpress.com.

Our website uses essential cookies and local storage to keep the site working and remember your cookie consent choice. We do not currently set optional analytics or marketing cookies on this website. For full details, please see our Cookie Policy.

We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These include encrypted data transmission (TLS), access controls, regular security audits, and staff data protection training. However, no system is completely secure. If you suspect a security breach, contact us immediately at hello@cullyexpress.com.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes via email or in-app notification. The "Last Updated" date at the top of this page indicates when the policy was last revised.

For privacy-related enquiries, contact us at hello@cullyexpress.com. If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.