Courier Privacy Policy
Version 1.3 · last updated 7 October 2026
The short version
We are Quiver Solutions Limited. We use information about your account, vehicle, work, payments, communications and location to operate our courier service.
Background location tracking is linked to an active work session, not simply to being signed in. The app may also request a current location when it opens or reconnects, including to process delivery actions saved while offline.
Our Live Ops and management team assign courier tiers. A tier can affect automatic shift-booking decisions. The planned system for automatically calculating tiers is not currently in operation.
You can contact matt@quiver.co.uk to ask about your information, request a copy or correction, or exercise your applicable privacy rights.1. Who we are
Quiver Solutions Limited is responsible for the personal information described in this notice.
Company number: 16961611
Registered office: 27 Old Gloucester Street, London, WC1N 3AX
Privacy contact: matt@quiver.co.uk
This notice covers applying to become a courier, arranging a trial, undertaking deliveries and using the Quiver Courier app.2. Information we collect
Depending on your relationship with Quiver and the features you use, we collect:
Account and contact information: your name, email address, telephone numbers, addresses and profile photograph.
Application information: information you submit when applying or arranging a trial, and related communications.
Compliance-check information: identity documents and a selfie used to confirm who you are; your application video; right-to-work documents and Home Office check results; driving licence, vehicle registration (V5C), GOV.UK driving-licence check results and CBT certificate where your vehicle needs them; hire-and-reward insurance certificates; and Basic DBS check information, as described in section 9A. We use automated document reading to extract details such as your name, date of birth and expiry dates from these documents, and a member of our team reviews the result.
Vehicle information: vehicle type, capacity, dimensions and your selected vehicle.
Work records: availability, shift bookings, agreed and actual start and finish times, collections, deliveries, arrival and completion times, delivery status and proof of delivery.
Location and delivery-event information: coordinates, timestamps, location accuracy and events associated with approaching, arriving at and completing deliveries.
Performance information: courier tiers, feedback, reported problems, reliability information and performance assessments.
Payment information: bank details, payment address, amounts payable and payment history.
Communications: messages, support requests, photographs, voice messages and call-related records such as timing and outcome.
Authentication and technical information: account identifiers, verification status, passkey registration information, device and app details, installation and notification identifiers, app usage events and diagnostic records.3. Where information comes from
We receive information directly from you through application forms, the app and communications with Quiver. We also receive information through your use of the app, from our Live Ops and management teams, and from customers, retailers and delivery partners involved in your work.4. How we use your information
We use information to process applications and trials; maintain and secure accounts; manage availability and shifts; allocate and coordinate deliveries; plan routes and calculate arrival estimates; support communications; record delivery progress and completion; administer payments; assess performance and manage tiers; investigate problems and disputes; diagnose faults and improve the app; and meet applicable legal obligations.
Some information is necessary for particular services. For example, we need payment details to pay you. Restricting location access may prevent location-dependent delivery features from working.5. Location and delivery tracking
During an active work session, the app is designed to collect background location information, including while the app is in the background or your screen is locked. An existing work session may resume when you reopen the app. Signing in alone does not start that background work-session tracking.
The app may also request a current location when it opens or reconnects, including to process delivery actions saved while offline. Location access is therefore not limited exclusively to background tracking during a work session.
We use location information to coordinate deliveries, estimate arrival times, understand delivery progress and investigate delivery issues. Update frequency varies with device permissions, the operating system, connectivity and movement. Information may be held temporarily on your device and uploaded when connectivity returns.
The app integrates Doorstep AI for tracking delivery events near destinations. The integration supplies courier and delivery identifiers, destination addresses and coordinates, and uses location-based monitoring to support understanding of arrival and completion. The app also requests motion and Bluetooth permissions for delivery-tracking accuracy where supported.
The app is designed to stop background work-session tracking when you successfully go offline or sign out. If that action fails, check your status or contact Live Ops. You can control location access in your device settings. Previously captured information may still be uploaded afterwards.6. Performance assessment and courier tiers
Courier tiers are currently assigned and managed by Quiver's Live Ops and management team. They are not calculated by the planned automated scoring system.
Your assigned tier can affect whether a shift booking is confirmed immediately or remains pending. These booking rules can operate automatically, without an individual Ops review of each booking. Tier assignment and the subsequent use of a tier in booking decisions are separate processes.
We hold feedback, reported problems and work records to support performance management. You can contact matt@quiver.co.uk about your tier, a booking decision or information you believe is inaccurate.
We are developing automated tier calculation using factors such as customer feedback, reported problems, travel and doorstep timings, and reliability against agreed start and finish times. That system is not currently in operation. Before introducing it, we will explain the information used, how it influences tiers, the consequences for couriers and the arrangements for questioning or challenging decisions.7. Sign-in and passkeys
We process information needed for the sign-in methods available in the app, including verification codes and passkeys.
Your device or password manager may ask you to use Face ID, Touch ID or your screen lock when using a passkey. Quiver does not receive your facial scan, fingerprint or device passcode through that process. We receive the credential information needed to register and verify the passkey against your account.8. Calls, messages and delivery evidence
Calling services process the information needed to connect participants, including relevant telephone numbers or account identifiers and connection information. We hold call-related records such as timing and outcome. These records are distinct from recordings of the conversation.
Messages, photographs and voice messages you submit may be stored as part of the delivery or support record. A voice message is deliberately recorded content, rather than a live conversation.
Please avoid including unnecessary personal information about customers or other people in photographs and messages.9. Our lawful bases
The lawful basis depends on the purpose:
Contract: where processing is necessary to take steps at your request before entering an agreement, or to perform our agreement with you.
Legal obligation: where processing is necessary to meet applicable legal requirements, including relevant accounting and payment-record obligations.
Legitimate interests: where processing is necessary for interests such as coordinating reliable deliveries, investigating disputes, protecting our services, assessing performance and improving the app, and those interests are not overridden by your rights.
Consent: where an activity requires consent, we will explain it separately and provide a way to withdraw it.
Device permissions control what the app can access. They do not, by themselves, determine the legal basis for processing information. Acknowledging this notice is not blanket consent to every use of your information.
You can object to processing based on legitimate interests. We will consider your objection and explain whether there are lawful grounds to continue the processing.9A. Criminal-record information
We ask couriers for a Basic DBS check because our delivery partners and retail customers require it for courier work. We use it only to confirm that your certificate shows no unspent convictions or cautions.
We record the certificate number, issue date and whether it shows none recorded. We do not record what a certificate says beyond that. If you upload a photo of a paper certificate, we delete the photo once it has been reviewed. If you share an online result, we keep a screenshot of the result page as evidence of the check, and we clear the share code once it has been used.
Only the Live Ops staff who carry out compliance checks can see this information. Our lawful basis is our legitimate interest in keeping customers, their goods and their homes safe. We process criminal-record information because it is necessary to prevent or detect unlawful acts such as theft and fraud (Data Protection Act 2018, Schedule 1, paragraph 10). We do not rely on your consent, because the check only works if it applies to every courier. Our appropriate policy document explains how we handle this information. Contact matt@quiver.co.uk for a copy.10. Who receives your information
Information is available to Quiver staff managing operations, payments, support and technical services. Relevant delivery information, including progress and arrival estimates, is shared with customers, retailers and delivery partners to coordinate and complete deliveries.
Technology services used in connection with the courier app include:
Amazon Web Services: hosting, storage and authentication services.
Doorstep AI: delivery-location and doorstep-event tracking.
Sentry: technical diagnostics. Diagnostic events can include your courier identifier and email address, together with app and error information.
PostHog: app usage analytics associated with your courier identifier. These analytics are not anonymous simply because your name is not included.
Twilio: telephone routing for customer calling, including telephone numbers and call-related information.
Expo's push notification service and the relevant Apple or Google notification services: delivery of notifications using device tokens, notification content and associated links.
In-app calling uses LiveKit technology. Software use alone does not mean that LiveKit's cloud service receives the call content; this depends on how the calling service is hosted.
If you choose to open navigation in Google Maps, routing information is passed to that service. If you subscribe to your shift calendar, the selected calendar service receives the private feed link and the shift information available through it. Those external services also process information under their own applicable privacy terms.
We may share information with professional advisers, authorities or other recipients where necessary to meet legal obligations or establish, exercise or defend legal claims.11. Where information is processed
Processing is not exclusively within the United Kingdom. The current courier app configuration uses AWS's London region for authentication, a German endpoint for Sentry diagnostics and a European endpoint for PostHog analytics.
Those endpoints do not establish where every associated backup, support activity or subprocessor operates. The processing locations and applicable international-transfer arrangements for our providers are being verified. Contact matt@quiver.co.uk for information about these arrangements.12. How long we retain information
Different records serve different purposes. Relevant considerations include whether information is needed to manage your account or work, investigate delivery issues or payment queries, meet legal record-keeping obligations, or deal with a specific dispute or legal claim.
We delete application videos 30 days after you submit them, unless your application is still being reviewed.
We keep compliance-check documents (identity documents and selfie, right-to-work documents, driving licence, V5C, driving-licence check results, CBT and insurance certificates, and DBS result screenshots) while you work with us, and delete them 12 months after your account is permanently closed. We keep the 12 months so we can respond to Home Office, insurance or legal queries about work you carried out. Paper DBS certificate photos are deleted once they have been reviewed.
Other records, including location, delivery and payment records, are kept for as long as they are needed for the purposes in this notice. Our retention arrangements for these are being reviewed, and we do not currently promise that identifiable location information is automatically deleted after 12 months or another fixed period.
Signing out or removing the app does not delete information already held by Quiver. You can ask about, or request deletion of, information we hold about you, subject to applicable legal conditions and exceptions.
Where information is genuinely anonymised so that you are no longer identifiable, it is no longer personal information. Combining records into an aggregate does not by itself guarantee that they are anonymous.13. Your rights
Depending on the circumstances, you may have rights to access your information; correct inaccurate or incomplete information; request deletion; restrict or object to processing; receive certain information in a portable format; withdraw consent where processing relies on it; and obtain information about, and exercise applicable rights concerning, automated decisions.
These rights are subject to legal conditions and exceptions. We may, for example, need to retain records to meet a legal obligation.
Contact matt@quiver.co.uk to make a request. We may need information to verify your identity. We will respond within the applicable statutory timeframe and explain any lawful extension, refusal or applicable charge. Requests are normally free of charge.14. Questions and complaints
Contact matt@quiver.co.uk or write to Quiver Solutions Limited, 27 Old Gloucester Street, London, WC1N 3AX.
You can also complain to the UK Information Commissioner's Office: https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 111315. Changes to this notice
We will update this notice when our processing changes and communicate material changes appropriately, including changes to automated performance scoring or decisions affecting couriers.
This is version 1.3, last updated 7 October 2026. Earlier versions are kept and can be requested from matt@quiver.co.uk.
We are Quiver Solutions Limited. We use information about your account, vehicle, work, payments, communications and location to operate our courier service.
Background location tracking is linked to an active work session, not simply to being signed in. The app may also request a current location when it opens or reconnects, including to process delivery actions saved while offline.
Our Live Ops and management team assign courier tiers. A tier can affect automatic shift-booking decisions. The planned system for automatically calculating tiers is not currently in operation.
You can contact matt@quiver.co.uk to ask about your information, request a copy or correction, or exercise your applicable privacy rights.1. Who we are
Quiver Solutions Limited is responsible for the personal information described in this notice.
Company number: 16961611
Registered office: 27 Old Gloucester Street, London, WC1N 3AX
Privacy contact: matt@quiver.co.uk
This notice covers applying to become a courier, arranging a trial, undertaking deliveries and using the Quiver Courier app.2. Information we collect
Depending on your relationship with Quiver and the features you use, we collect:
Account and contact information: your name, email address, telephone numbers, addresses and profile photograph.
Application information: information you submit when applying or arranging a trial, and related communications.
Compliance-check information: identity documents and a selfie used to confirm who you are; your application video; right-to-work documents and Home Office check results; driving licence, vehicle registration (V5C), GOV.UK driving-licence check results and CBT certificate where your vehicle needs them; hire-and-reward insurance certificates; and Basic DBS check information, as described in section 9A. We use automated document reading to extract details such as your name, date of birth and expiry dates from these documents, and a member of our team reviews the result.
Vehicle information: vehicle type, capacity, dimensions and your selected vehicle.
Work records: availability, shift bookings, agreed and actual start and finish times, collections, deliveries, arrival and completion times, delivery status and proof of delivery.
Location and delivery-event information: coordinates, timestamps, location accuracy and events associated with approaching, arriving at and completing deliveries.
Performance information: courier tiers, feedback, reported problems, reliability information and performance assessments.
Payment information: bank details, payment address, amounts payable and payment history.
Communications: messages, support requests, photographs, voice messages and call-related records such as timing and outcome.
Authentication and technical information: account identifiers, verification status, passkey registration information, device and app details, installation and notification identifiers, app usage events and diagnostic records.3. Where information comes from
We receive information directly from you through application forms, the app and communications with Quiver. We also receive information through your use of the app, from our Live Ops and management teams, and from customers, retailers and delivery partners involved in your work.4. How we use your information
We use information to process applications and trials; maintain and secure accounts; manage availability and shifts; allocate and coordinate deliveries; plan routes and calculate arrival estimates; support communications; record delivery progress and completion; administer payments; assess performance and manage tiers; investigate problems and disputes; diagnose faults and improve the app; and meet applicable legal obligations.
Some information is necessary for particular services. For example, we need payment details to pay you. Restricting location access may prevent location-dependent delivery features from working.5. Location and delivery tracking
During an active work session, the app is designed to collect background location information, including while the app is in the background or your screen is locked. An existing work session may resume when you reopen the app. Signing in alone does not start that background work-session tracking.
The app may also request a current location when it opens or reconnects, including to process delivery actions saved while offline. Location access is therefore not limited exclusively to background tracking during a work session.
We use location information to coordinate deliveries, estimate arrival times, understand delivery progress and investigate delivery issues. Update frequency varies with device permissions, the operating system, connectivity and movement. Information may be held temporarily on your device and uploaded when connectivity returns.
The app integrates Doorstep AI for tracking delivery events near destinations. The integration supplies courier and delivery identifiers, destination addresses and coordinates, and uses location-based monitoring to support understanding of arrival and completion. The app also requests motion and Bluetooth permissions for delivery-tracking accuracy where supported.
The app is designed to stop background work-session tracking when you successfully go offline or sign out. If that action fails, check your status or contact Live Ops. You can control location access in your device settings. Previously captured information may still be uploaded afterwards.6. Performance assessment and courier tiers
Courier tiers are currently assigned and managed by Quiver's Live Ops and management team. They are not calculated by the planned automated scoring system.
Your assigned tier can affect whether a shift booking is confirmed immediately or remains pending. These booking rules can operate automatically, without an individual Ops review of each booking. Tier assignment and the subsequent use of a tier in booking decisions are separate processes.
We hold feedback, reported problems and work records to support performance management. You can contact matt@quiver.co.uk about your tier, a booking decision or information you believe is inaccurate.
We are developing automated tier calculation using factors such as customer feedback, reported problems, travel and doorstep timings, and reliability against agreed start and finish times. That system is not currently in operation. Before introducing it, we will explain the information used, how it influences tiers, the consequences for couriers and the arrangements for questioning or challenging decisions.7. Sign-in and passkeys
We process information needed for the sign-in methods available in the app, including verification codes and passkeys.
Your device or password manager may ask you to use Face ID, Touch ID or your screen lock when using a passkey. Quiver does not receive your facial scan, fingerprint or device passcode through that process. We receive the credential information needed to register and verify the passkey against your account.8. Calls, messages and delivery evidence
Calling services process the information needed to connect participants, including relevant telephone numbers or account identifiers and connection information. We hold call-related records such as timing and outcome. These records are distinct from recordings of the conversation.
Messages, photographs and voice messages you submit may be stored as part of the delivery or support record. A voice message is deliberately recorded content, rather than a live conversation.
Please avoid including unnecessary personal information about customers or other people in photographs and messages.9. Our lawful bases
The lawful basis depends on the purpose:
Contract: where processing is necessary to take steps at your request before entering an agreement, or to perform our agreement with you.
Legal obligation: where processing is necessary to meet applicable legal requirements, including relevant accounting and payment-record obligations.
Legitimate interests: where processing is necessary for interests such as coordinating reliable deliveries, investigating disputes, protecting our services, assessing performance and improving the app, and those interests are not overridden by your rights.
Consent: where an activity requires consent, we will explain it separately and provide a way to withdraw it.
Device permissions control what the app can access. They do not, by themselves, determine the legal basis for processing information. Acknowledging this notice is not blanket consent to every use of your information.
You can object to processing based on legitimate interests. We will consider your objection and explain whether there are lawful grounds to continue the processing.9A. Criminal-record information
We ask couriers for a Basic DBS check because our delivery partners and retail customers require it for courier work. We use it only to confirm that your certificate shows no unspent convictions or cautions.
We record the certificate number, issue date and whether it shows none recorded. We do not record what a certificate says beyond that. If you upload a photo of a paper certificate, we delete the photo once it has been reviewed. If you share an online result, we keep a screenshot of the result page as evidence of the check, and we clear the share code once it has been used.
Only the Live Ops staff who carry out compliance checks can see this information. Our lawful basis is our legitimate interest in keeping customers, their goods and their homes safe. We process criminal-record information because it is necessary to prevent or detect unlawful acts such as theft and fraud (Data Protection Act 2018, Schedule 1, paragraph 10). We do not rely on your consent, because the check only works if it applies to every courier. Our appropriate policy document explains how we handle this information. Contact matt@quiver.co.uk for a copy.10. Who receives your information
Information is available to Quiver staff managing operations, payments, support and technical services. Relevant delivery information, including progress and arrival estimates, is shared with customers, retailers and delivery partners to coordinate and complete deliveries.
Technology services used in connection with the courier app include:
Amazon Web Services: hosting, storage and authentication services.
Doorstep AI: delivery-location and doorstep-event tracking.
Sentry: technical diagnostics. Diagnostic events can include your courier identifier and email address, together with app and error information.
PostHog: app usage analytics associated with your courier identifier. These analytics are not anonymous simply because your name is not included.
Twilio: telephone routing for customer calling, including telephone numbers and call-related information.
Expo's push notification service and the relevant Apple or Google notification services: delivery of notifications using device tokens, notification content and associated links.
In-app calling uses LiveKit technology. Software use alone does not mean that LiveKit's cloud service receives the call content; this depends on how the calling service is hosted.
If you choose to open navigation in Google Maps, routing information is passed to that service. If you subscribe to your shift calendar, the selected calendar service receives the private feed link and the shift information available through it. Those external services also process information under their own applicable privacy terms.
We may share information with professional advisers, authorities or other recipients where necessary to meet legal obligations or establish, exercise or defend legal claims.11. Where information is processed
Processing is not exclusively within the United Kingdom. The current courier app configuration uses AWS's London region for authentication, a German endpoint for Sentry diagnostics and a European endpoint for PostHog analytics.
Those endpoints do not establish where every associated backup, support activity or subprocessor operates. The processing locations and applicable international-transfer arrangements for our providers are being verified. Contact matt@quiver.co.uk for information about these arrangements.12. How long we retain information
Different records serve different purposes. Relevant considerations include whether information is needed to manage your account or work, investigate delivery issues or payment queries, meet legal record-keeping obligations, or deal with a specific dispute or legal claim.
We delete application videos 30 days after you submit them, unless your application is still being reviewed.
We keep compliance-check documents (identity documents and selfie, right-to-work documents, driving licence, V5C, driving-licence check results, CBT and insurance certificates, and DBS result screenshots) while you work with us, and delete them 12 months after your account is permanently closed. We keep the 12 months so we can respond to Home Office, insurance or legal queries about work you carried out. Paper DBS certificate photos are deleted once they have been reviewed.
Other records, including location, delivery and payment records, are kept for as long as they are needed for the purposes in this notice. Our retention arrangements for these are being reviewed, and we do not currently promise that identifiable location information is automatically deleted after 12 months or another fixed period.
Signing out or removing the app does not delete information already held by Quiver. You can ask about, or request deletion of, information we hold about you, subject to applicable legal conditions and exceptions.
Where information is genuinely anonymised so that you are no longer identifiable, it is no longer personal information. Combining records into an aggregate does not by itself guarantee that they are anonymous.13. Your rights
Depending on the circumstances, you may have rights to access your information; correct inaccurate or incomplete information; request deletion; restrict or object to processing; receive certain information in a portable format; withdraw consent where processing relies on it; and obtain information about, and exercise applicable rights concerning, automated decisions.
These rights are subject to legal conditions and exceptions. We may, for example, need to retain records to meet a legal obligation.
Contact matt@quiver.co.uk to make a request. We may need information to verify your identity. We will respond within the applicable statutory timeframe and explain any lawful extension, refusal or applicable charge. Requests are normally free of charge.14. Questions and complaints
Contact matt@quiver.co.uk or write to Quiver Solutions Limited, 27 Old Gloucester Street, London, WC1N 3AX.
You can also complain to the UK Information Commissioner's Office: https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 111315. Changes to this notice
We will update this notice when our processing changes and communicate material changes appropriately, including changes to automated performance scoring or decisions affecting couriers.
This is version 1.3, last updated 7 October 2026. Earlier versions are kept and can be requested from matt@quiver.co.uk.
