Privacy Policy

1. Who we are

getparcelrefund.com is a service operated by BiteRight Ltd, a company registered in Cyprus. We provide UK-focused guidance to consumers experiencing parcel delivery issues (for example, a parcel marked as delivered but never received).

For the purposes of UK data protection law, BiteRight Ltd is the data controller for personal data processed through getparcelrefund.com.

Contact for any privacy matter: info@getparcelrefund.com

2. What data we collect

We only collect what we need to help you resolve your delivery issue.

Information you provide directly

• Your name
• Your email address
• Order details (e.g. retailer, order number, date, amount, delivery address)
• Dispute details (e.g. what went wrong, tracking status, courier name, what the retailer has said)

Files you choose to upload

• Screenshots (e.g. of order confirmations, tracking pages, or chat transcripts)
• Tracking pages
• Emails you have received from retailers or couriers

You decide what to upload. Please avoid uploading information that is not relevant to your dispute.

Payment information

If you pay for a service, payment is processed by Stripe. We do not see or store your full card details. We only receive a confirmation that payment has been made, along with limited metadata (such as the last four digits of the card, transaction ID, and country).

Technical information

When you use the site, we automatically collect basic technical data such as IP address, browser type, device type, and pages visited. This is used for security, fraud prevention, and to improve the service.

3. Why we use your data (purpose)

We use your data for two main purposes:

1. To generate dispute guidance. We apply deterministic, rule-based logic to the information you provide to tell you who to contact, how to contact them, what to say, and when to escalate. AI is used only to help explain steps or draft emails and call scripts for you to send. It never decides your case, and never contacts anyone on your behalf.
2. To improve our service. We review anonymised or aggregated usage patterns to improve accuracy, clarity, and reliability.

We do not use your data for advertising, profiling, or any automated decision-making that produces legal effects for you.

4. Legal basis for processing

Under UK GDPR, we rely on the following legal bases:

• Consent: when you submit your name, email, dispute details, and uploaded files to use the service. You can withdraw consent at any time by emailing info@getparcelrefund.com.
• Legitimate interest: to operate, secure, and improve the service; to prevent abuse and fraud; and to maintain basic technical logs.
• Contract: where processing is necessary to deliver a paid service you have requested.
• Legal obligation: where we must retain or disclose data to comply with applicable law.

5. How your data is stored and protected

• Data is stored on secure servers provided by reputable hosting and database providers.
• Data in transit is encrypted using HTTPS/TLS.
• Access to personal data is restricted to authorised personnel on a need-to-know basis.
• We apply reasonable technical and organisational measures to protect your data from loss, misuse, and unauthorised access.

Retention

• Dispute details and uploaded files are kept only as long as needed to provide the service to you, and are deleted or anonymised after a limited retention period (typically up to 12 months from your last activity), unless a longer period is required by law.
• Payment records are retained as required by accounting and tax law (typically up to 7 years), but contain no full card details.
• You can request earlier deletion at any time; see section 8.

6. Third parties we use

We keep third parties to a minimum. The only third party that receives personal data from us for your case is:

• Stripe: for payment processing only. Stripe acts as an independent controller for payment data and has its own privacy policy.

We also rely on standard infrastructure providers (such as hosting and database services) who act as data processors on our behalf under written agreements and only process data on our instructions.

What we explicitly do NOT do

• We do not share your case with retailers.
• We do not share your case with couriers.
• We do not sell, rent, or trade your personal data.
• We do not send marketing data to third parties.
• We do not access your email inbox. We do not connect to Gmail, Outlook, or any mailbox.
• We do not impersonate you. Every email, call, or message to a retailer or courier is sent by you, from your own accounts.

7. International transfers

Because BiteRight Ltd is based in Cyprus and some of our providers operate internationally, your data may be transferred outside the UK. Where this happens, we rely on appropriate safeguards recognised under UK GDPR, such as UK adequacy regulations, the UK International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses.

8. Your rights

Under UK GDPR and the Data Protection Act 2018, you have the right to:

• Access: request a copy of the personal data we hold about you.
• Correction: ask us to correct inaccurate or incomplete data.
• Deletion: ask us to delete your data ("right to be forgotten"), subject to limited legal exceptions.
• Restriction: ask us to pause processing in certain circumstances.
• Objection: object to processing based on legitimate interest.
• Portability: receive your data in a portable format.
• Withdraw consent: at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, email info@getparcelrefund.com. We will respond within one month.

If you are unhappy with how we handle your data, you have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

9. Cookies

We use a small number of cookies and similar technologies that are necessary for the site to function and to keep it secure. Where non-essential cookies are used (for example, for analytics), we will ask for your consent through a cookie banner. You can change your choice at any time.

10. Children

getparcelrefund.com is intended for adults aged 18 or over. We do not knowingly collect personal data from children. If you believe a child has submitted data to us, please contact info@getparcelrefund.com and we will delete it.

11. Changes to this policy

We may update this policy from time to time to reflect changes in our service or the law. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email.

12. Contact us

For any question, request, or concern about your privacy or this policy:

Email: info@getparcelrefund.com
Company: BiteRight Ltd (Cyprus)

We aim to reply within a few working days.