Privacy Policy

Data we collect

We only collect the minimum information required to generate postcode-level delivery statistics:

• Delivery report submissions containing postcode, delivery date, delivery time window, delivery type, and an optional free-text note. Postcodes are normalised to sector level. No names, account identifiers, or precise addresses are stored.
• Aggregated telemetry from Google Analytics (GA4) limited to anonymised usage metrics (page views, device type, approximate region). IP anonymisation is enforced by Google, and we do not collect advertising identifiers.

We do not intentionally collect special category data. Please avoid including personal details within notes.

How data is stored

• Production data is hosted on a managed PostgreSQL instance operated by Railway (Railway Infrastructure, Inc.) within the EU West region. Raw submissions are kept for audit and statistical accuracy.
• Development environments may use local SQLite databases which remain on the contributor’s machine.
• Google Analytics is provided by Google LLC and stores cookies consistent with their privacy policy.

Infrastructure access is limited to project maintainers via authenticated Railway accounts.

Purpose and legal basis

We process delivery reports to generate aggregated statistics that help communities understand typical postal delivery timings. The legal basis is legitimate interests (Article 6(1)(f) UK/EU GDPR) because the processing is minimal, non-commercial, and benefits contributors who opt in by submitting data.

Retention

Raw reports are retained for a maximum of 24 months to support trend validation. Aggregated metrics may be stored longer as they no longer relate to identifiable individuals. You may request deletion earlier by referencing the details of your submission.

Sharing and third parties

• Railway Infrastructure, Inc. (hosting and managed Postgres).
• Google LLC (Google Analytics GA4).
• No other processors are engaged, and we never sell or transfer data for marketing purposes.

Your rights

Under UK/EU GDPR you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and the right to data portability. Because we collect minimal contact information you may need to provide contextual details (postcode, delivery date/time, optional note text) so we can locate and act on a request.

Contact

For privacy enquiries or to exercise your rights, please open an issue on the project repository at github.com/mattkneale/royal-mail-delivery-times/issues or email the maintainers via the address published in the repository documentation. We aim to respond within 30 days.

If you are dissatisfied with our response you may raise the matter with the UK Information Commissioner’s Office (ICO) or your local supervisory authority.

Changes

We may update this privacy policy to reflect operational or regulatory changes. Significant updates will be announced in the repository changelog, and the effective date at the top of this page will be revised.