DHL ECOMMERCE UK PRIVACY NOTICE
Last updated 15 January 2026
DHL eCommerce UK (hereinafter called DHL) is committed to protecting your personal information and this notice explains how we handle your data throughout the entire business process.
In the following, we explain what information DHL collects when you visit our website and how this information is processed and for what specific purposes.
DHL reserves the right to change its privacy notice at any time with or without prior notice. Please check back frequently to be informed of any changes. By using DHL's websites, you agree to this Privacy Notice.
Notice of change
We wanted to let you know that DHL Ecommerce UK Limited is now part of the Evri Group.
As part of this merger, Evri Limited and DHL Ecommerce UK Limited are bringing together our operations, systems and data protection practices as part of the Evri Group.
During this transition period, both organisations will act as independent data controllers, who are working to align privacy, security and data management standards, so that your personal information continues to be handled safely and consistently across the two businesses.
Until this alignment is complete, your personal data may be processed by both Evri and DHL Ecommerce UK Limited under their respective privacy frameworks. The lawful basis being relied upon is legitimate interests.
We are working closely to ensure that:
- your personal data continues to only be used for the same purposes for which it was originally collected;
- any updates to our processing activities are reflected in our privacy notices; and
- your rights under the UK GDPR remain unaffected
Once our privacy and operational practices are fully aligned, we will issue an updated privacy notice explaining how the two organisations manage your information. Significant changes will be by way of a Notice of Change banner, much like this one.
If you have any questions about how this merger affects your personal data, please contact the relevant team:
DHL Ecommerce UK Limited - dataProtectionOfficer_ecsuk@dhl.com
Evri - data.protection@evri.com.
General information
-
DHL is committed to preserving the privacy of the users of our websites. When you visit our web pages, our web servers always temporarily save the connection data of the computer connecting to our site, a list of the web pages that you visit within our site, the date and duration of your visit, the IP address of your device, the identification data of the type of browser and operation system used as well as the website through which you linked to our site.
Additional personal information such as your name, address, telephone number or e-mail address is not collected unless you provide this data voluntarily, e.g. when completing an online contact form, as part of a registration, survey, competition, fulfilment of contract or an information request. This data is only collected and processed based on the original purpose of collection.
The legal basis for the processing of the aforementioned data categories is legitimate interests (Art. 6 (1) of data protection legislation).
Furthermore, we are using cookies, tracking-tools and targeting measures. You will find more details below under online presence and website optimization.
As far as you have enabled geo localisation functions in your browser, respectively in your operating system we will use this data to offer you location-based services (e. g. location of the nearest branch, packing station etc.). We will not use this data for any other purpose. If you disable this function your data will be immediately deleted.
-
Personal data means any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
This means personal data has to be information that relates to an individual. That individual must be identified or identifiable either directly from one or more identifiers or from factors specific to the individual.
This includes information such as your name, address, telephone number and date of birth. Information which cannot be linked to your real identity - such as favourite websites or number of users of a site - is not considered personal data.
-
We process your data in order to:
- perform the contract concluded with you or a sender;
- make visits to our websites/apps as pleasant as possible;
- send newsletters if you subscribe to them;
- send or display to you, where permitted, targeted advertising;
- carry out a credit check, where necessary;
- handle customer services requests;
- fulfil obligations as part of our statutory requirements;
- fulfil our security requirements (e.g., for crime detection purposes, including denied party screening);
- compile statistics;
- to fulfil our security requirements (e.g., for crime detection purposes including denied party screening - read more here);
- and we collect the telephone number you have called from and the recording of telephone conversations for quality and training purposes. Should we call you, we will do so from 02476 937 770.
You can find further details below under the relevant headings, including the type of data we process, the purpose of processing and the lawful basis for doing so.
-
For contractual reasons, we also need personal data to provide our services and comply with the obligations arising from contractual agreements concluded with you. This data is used e. g. for performing a (shipment) contract, managing customer data, handling payments and, as the case may be, assessing credit worthiness. Certain shipment data will also be provided to the authorities of the country of transit or destination for customs and tax clearance or for security screening, as required by the laws of such country. The information provided would usually include: shipper name and address, receiver name and address, description of the goods, number of pieces, weight and value of shipment.
The legal basis is necessary for the performance of a contract (Art. 6 (1) (b) of data protection legislation.
Further information on data protection in specific services and products is available in the section Products and Services.
-
If you are an existing customer of DHL your postal data (e.g. name, address) will be processed to contact you in order to provide you with the latest information about our offers, news, products and services. Apart from an existing consent, we will process your e-mail address exclusively in order to provide you with information regarding DHL's own and similar products.
The legal basis for the aforementioned processing is legitimate interest (Art. 6 (1) (f) of data protection legislation).
You have right to object at any time to this processing. To exercise your right, simply get in touch with us by using the contact details mentioned under Who is responsible?
If you register for one of our newsletters, we are entitled to use your e-mail address for this purpose. You may unsubscribe from the newsletter at any time by clicking the relevant link at the bottom of the newsletter.
In case you file an objection or unsubscribe from our newsletter services the respective data will be deleted and no longer be processed for such purposes.
-
The company responsible for processing your personal data is DHL eCommerce UK Limited, registered office: Capital House, 1 Capitol Close, Morley, Leeds, LS27 0WH.
DHL is registered with the ICO under reference number Z9616848.
We have a dedicated Data Protection Officer (“DPO”), Lee Howard, who oversees all matters related to data privacy and this Notice. His contact details are as follows:
Email
dataprotectionofficer_ecsuk@dhl.com
Address for correspondence
Hillman Way
Ryton-on-Dunsmore
Coventry
CV9 3EDProcessing your data for the performance of a contract
-
Under the UK GDPR and Data Protection Act 2018 (“DPA 2018”) (as amended by the Digital (Use and Access) Act 2025 (“data protection legislation”) you have the following rights:
- request a correction to the personal information that we hold about you. This is commonly known as the right to rectification and enables you to have any incomplete or inaccurate information we hold about your corrected;
- access to your personal information, commonly known as a ‘data subject access request’, ‘DSAR’ or ‘SAR’. This enables you to receive a copy of the personal information that we hold about you;
- request the erasure of your personal information. This is also known as the right to be forgotten and enables you to ask us to delete or remove personal information where there is no good reason for us to continue to process it;
- request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information, e.g. if you want us to establish its accuracy or the reason for processing it;
- object to the processing of your personal data in certain circumstances;
- not to be subject to a decision that is based solely on automated processing, including profiling. Where automated decision-making is used, you have the right to request human intervention and to challenge the decision; and
- request the transfer of personal information to another party.
Some rights may be subject to exemptions or limitations depending on the context and legal basis for processing.
You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is manifestly unfounded or excessive. We may also refuse to respond to a request where we are legally permitted to do so.
If you wish to exercise any of your privacy rights, you should contact the Data Protection Team (dataprotectionofficer_ecsuk@dhl.com) who may need to verify your identity to ensure that personal data is not disclosed to anyone who shouldn’t have access it. The Data Protection Team may also contact you for additional information to help speed up their response.
-
-
DHL takes all of the necessary technical and organisational security measures to protect your personal data from being lost or misused. For instance, your data is saved in a secure operating environment which is not accessible to the public. In certain cases, your personal data is encrypted by Secure Socket Layer technology (SSL) during transmission. This means that an approved encryption procedure is used for communication between your computer and the DHL servers if your browser supports SSL.
-
We will retain your personal data for no longer than is necessary for the purposes of which the personal data is processed, in line with our Data Retention Policy.
We also keep records (which may include personal information) to meet legal, regulatory, tax, or accounting requirements. For instance, we are required to retain accurate records of our interactions with you to respond to any potential complaints or disputes.
Basic contact identifiers and proof of delivery records will be retained for no longer than 6 months. Delivery preferences will be retained for no longer than necessary or on withdrawal of consent.
If we believe there is a possibility of litigation, we may also retain certain records. The specific retention period for your personal information will depend on your relationship with us and why we hold your data.
-
We use tracking software to determine how many users visit our website and how often. We do not use this software to collect individual personal data or individual IP addresses. The data is used solely in an anonymous and summarised form for statistical purposes and for developing the website.
-
We use the online advertising program "Google AdWords" and the conversion tracking function of Google AdWords. Google conversion tracking is an analytics service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google").
When you click on an ad delivered by Google, a conversion tracking cookie is placed on your computer. These cookies expire after 30 days, do not contain any personal data and therefore cannot be used to identify you personally. If you visit certain pages on our website and the cookie has not yet expired, we and Google can tell that you clicked on the ad and were directed to that page. Each Google AdWords customer has a different cookie, so it is not possible to track cookies via websites of other AdWords customers. The information collected by means of the conversion cookie is used to compile conversion statistics for AdWords customers who have opted for conversion tracking. Customers can see the total number of users who clicked on their ad and were directed to a page containing a conversion tracking tag. However, they do not receive information that enables them to identify users personally. If you do not want to participate in conversion tracking, you can opt out of this use and prevent cookies from being installed by selecting the appropriate settings on your browser software (deactivation option). You will then not be included in the conversion tracking statistics. Further information and Google's Privacy Policy are available at: https://policies.google.com/privacy
-
-
-
-
In order to keep DHL's online content relevant easy to use and up to date, we use web analytics services such as Webtrends (See Webtrends entry in DHL Table of Cookies above for more information). These services use data collection technologies such as web beacons. Web beacons are small electronic images that deliver cookies, count visits, and understand usage and website effectiveness. In turn, this lets us know what content is of interest to our visitors and helps us provide tailored information on our websites. These web beacons are anonymous and do not contain or collect any information that identifies you. The information is anonymous and only used for statistical purposes. These web analytics data and cookies cannot be used to identify you as a natural person as they never contain personal information such as your name or email address.
-
-
There are contact forms on our website and DHL eCommerce UK LinkedIn company page that can be used to contact us via electronic means. If the user takes advantage of this option, the data entered in the form will be transmitted to us and stored.
We use the personal data you provide solely for the technical administration of the websites and to fulfil your wishes and requirements - i.e. primarily to process contracts concluded with you or your enquiries.
The processing of the personal data from the form primarily enables us to handle the contact processing. In addition, data may be processed in the course of processing a customer request.
The data will be processed primarily for the performance of the contract in accordance with Article 6 (1) (b)) and to safeguard DHL’s legitimate interests in accordance with Article 6 (1) (f)) of data protection legislation.
Products and services
-
Additional data protection information relating to shipment tracking:
Type of data
Example
External access to data
Item numberSender and recipient
Name of senderSender and recipient
Address of sender
Sender and recipient (after entering the postcode)Name of recipient
Sender and recipient (after entering the postcode or as a logged-in and identified recipient)
Address of recipient
SenderName of substitute recipient, if applicable
Neighbour
Sender and recipient (after entering the postcode or as a logged-in and identified recipient)
Address of substitute recipient, if applicable
Neighbour
Sender
Customer data of sender (EKP number, billing number)Sender
Product name / service name (currently only in shipment tracking for business customers NOLB)
DHL Paket, DHL Paket International, COD, Bulky Goods
Sender and recipient (only for services relevant to the recipient, such as Bulky Goods and COD)
Shipment progress
Sender and recipient
Signature of recipient (POD)
Sender
Confirmation of minimum age verification +16 / +18Visual age verification
Sender
1. Purposes of data processing - essential information
We process your data in order, for instance, to:
- Perform the parcel shipping contract concluded with you or a shipper;
- Display the status of a shipment or provide information via our customer service department;
- Fulfil obligations as part of statutory requirements;
- Fulfil our security requirements (e.g. for crime detection purposes);
- Compile statistics on the provision of our services; and
- For purposes of quality assurance, process optimisation and planning certainty.
2. Storage period
The data will be stored for as long as they are required. The necessity ensues from statutory retention periods.