Packy Website Privacy Policy

Last updated: October 21, 2026

Who we are

CLICKOR LTD, Unit A, 82 James Carter Road, Mildenhall, Bury St Edmunds, Suffolk, IP28 7DE, United Kingdom, is responsible for the processing of personal data described in this policy. For privacy questions and requests, contact us at [email protected].

This policy applies to visits to packyapp.com, use of the parcel tracking features on the website, and enquiries made through the website. Data processing in the Packy mobile apps is described in the separate privacy documents for those apps.

Parcel tracking

When you enter a tracking number, it is sent to our server to retrieve and display information about the parcel. This information may include the carrier, delivery status, tracking events, dates and locations. Only use tracking numbers for which you are entitled to receive information.

Your tracking number history is stored in a cookie in your browser for 7 days after your last search. The retention period applies to the whole list and is renewed with every search, including a repeat search for the same number. Simply visiting the website without searching does not extend this period. If you do not search again, the history is deleted after 7 days.

The history holds no more than 10 tracking numbers. When an 11th number is added, the oldest one is removed. The history is tied to the specific browser and may disappear earlier if you clear your cookies. We do not send tracking numbers or parcel details to Google Analytics or advertising services.

Enquiries and contact forms

When you fill in a form or contact us, we process the information you provide: for example, your name, email address, message and any other details you choose to include. We use it to respond to your enquiry and to communicate with you about it.

Our forms are protected by Google reCAPTCHA, which processes information about your browser and interaction with the page (such as IP address, cookies and mouse or touch behaviour) to tell humans from bots and prevent spam. Google’s Privacy Policy and Terms of Service apply to reCAPTCHA.

Form submissions are delivered to our business Google email account and stored in our database. Enquiries and correspondence in email and in the database are automatically deleted after six months. We do not send form contents or email addresses to Google Analytics or advertising services.

Technical information

The website itself does not create user profiles or keep records of visitor activity for its own purposes. However, our hosting and security providers (including Cloudflare) process technical information such as IP addresses, browser data and request logs as necessary to deliver the website, keep it secure and protect it from bots and abuse. These providers keep such data only for the limited periods set by their own policies.

To show content relevant to your country, the website stores your approximate country (not your precise location) in the “geo” cookie for about 3 months.

Analytics: Google Analytics

Google Analytics is the only analytics service on our website. With your consent, it helps us understand how visitors use the website: which pages they view, which browsers and devices they use and which actions they take. Google Analytics event data is retained for 14 months and then deleted automatically. The Google Analytics cookies (_ga and _ga_58DJMPZKEF) are kept in your browser for up to 13 months unless you delete them earlier.

We block analytics scripts from loading until you consent to analytics, and when you decline or withdraw consent. We do not send tracking numbers, parcel details, form contents or email addresses to Google Analytics.

More information: https://policies.google.com/privacy and https://policies.google.com/technologies/partner-sites. Google also offers a browser add-on to opt out of Google Analytics: https://tools.google.com/dlpage/gaoptout.

Advertising and social buttons: Google AdSense and LinkedIn

Google AdSense. When ads are enabled, Google and participating advertising partners may process IP addresses, browser and device information, page information, cookies and similar identifiers to serve ads, measure their performance and prevent fraud. Where consent is required for personalised advertising, it is enabled only after consent is given. If you decline or withdraw consent, personalised advertising is turned off; where permitted, limited or non-personalised ads may be shown. Google’s ad settings: https://adssettings.google.com/. Opt-out for participating vendors: https://www.aboutads.info/choices/.

LinkedIn. Our website includes LinkedIn “Share” and “Follow” buttons. When these buttons load, LinkedIn may receive information such as your IP address, browser information and the page you are viewing, and may set cookies such as bcookie (1 year), lidc (1 day), li_gc (6 months) and __cf_bm (Cloudflare bot protection, 1 hour). LinkedIn may use this information in line with its own policies, including for advertising. Cookies that are not strictly necessary are set only after you consent to the relevant category. More information: https://www.linkedin.com/legal/privacy-policy.

Cookies and your choices

Cookies and similar technologies store information in your browser or help website services work. We use the CookieYes consent management platform to show the privacy choices available in your region and to remember your decision.

When you first visit, you can accept all, reject all or customise your choices by category (Functional, Analytics, Advertisement). Optional cookies stay off until you consent and after you decline. The website’s core features, including parcel tracking, remain available if you decline.

You can change or withdraw your decision at any time using the cookie settings button in the bottom left corner of the website. Withdrawal applies to further processing and does not affect the lawfulness of processing carried out before withdrawal, nor does it automatically delete information already received by Google, LinkedIn or other recipients.

CookieYes stores your choice in the “cookieyes-consent” cookie for 1 year. After that, or if you clear your browser storage or our settings change, you will be asked again.

Cookies we use:

You can also block or delete cookies in your browser settings.

Purposes and legal bases

We process tracking data to provide the parcel information you request, and contact details to respond to your enquiry: the legal basis is the performance of a service you requested or steps at your request before a contract. Security and anti-spam measures (reCAPTCHA, Cloudflare, XSRF protection), remembering your country (geo cookie) and handling other correspondence rely on our legitimate interest in running a secure, working website and responding to messages. Functional (LinkedIn functional cookies), analytics (Google Analytics) and advertising (personalised AdSense, LinkedIn) cookies rely on your consent. We may also process information to comply with legal obligations.

Merely visiting the website, scrolling a page or opening this policy does not constitute consent.

Who receives information

Information is processed by CLICKOR LTD and by service providers that support the website: hosting and database providers, Cloudflare, Google (business email, Analytics, AdSense, reCAPTCHA), LinkedIn and CookieYes. Participating advertising partners may receive information as described above. We may disclose information where required by law or by a lawful request from a competent authority.

International transfers

Some of these providers (for example Google and LinkedIn) process data outside the UK and the European Economic Area, including in the United States. Where this happens, transfers are protected by adequacy decisions (such as the EU–US Data Privacy Framework and the UK Extension), standard contractual clauses or other safeguards required by law.

Your rights and how to contact us

Depending on applicable law, you may have the right to access your personal data, to have it corrected or deleted, to restrict or object to its processing, to data portability, to withdraw consent and to opt out of advertising-related processing.

Write to [email protected] and state which information or service your request relates to. We may ask for information sufficient to verify your identity. Do not send passwords or unnecessary identity documents. We handle requests within the time limits set by applicable law.

You may lodge a complaint with a data protection authority where you live or work or where the issue occurred (in the UK, the Information Commissioner’s Office, ico.org.uk). If you believe a child has provided personal data through the website, contact us so that we can take appropriate action.

Changes to this policy

We may update this policy when the website or our data processing changes. The current version and its last updated date are available on this page. Where necessary, we will provide additional notice or ask for your choice again.

Privacy contact: CLICKOR LTD — [email protected]