Privacy policy
Last updated : 17 August 2026
Data controller
HeyColis is the controller of data collected through heycolis.com and the mobile application. For any question about your data, write to contact@heycolis.com.
Data we collect
- Identification data: first and last name, email address, phone number, and for carriers an identity document and proof of travel.
- Shipment data: departure and arrival cities, description and declared value of the parcel, photographs taken at sealing, dates and delivery statuses.
- Communication data: messages exchanged in the platform's messaging, messages sent through the website contact form.
- Technical data: IP address, browser type, pages viewed, for security and audience measurement.
Purposes and legal bases
Providing the service and performing the contract (matching, tracking, payment, support) — performance of the contract. Security, fraud prevention and identity verification — legitimate interest and legal obligations. Audience measurement and service improvement — consent for non-essential cookies, legitimate interest for aggregated statistics. Marketing communications — consent, revocable at any time.
Retention
Account data is kept for the duration of the contractual relationship, then archived for three years from the last contact. Identity documents are kept only as long as strictly necessary for verification, then deleted. Billing data is kept for ten years under accounting obligations. Contact form requests are kept for three years.
Recipients
Data is accessible to authorised internal teams and to our processors: host, messaging and analytics tools. These providers act only on instruction and are bound by confidentiality. Certain data is shared with the counterparty to the transaction (first name, rating, city, details needed for handover).
Transfers outside the European Union
Where a transfer outside the European Union is necessary, it is governed by the European Commission's standard contractual clauses or by an adequacy decision.
Your rights
You have the right to access, rectify, erase, restrict, object and port your data, as well as to set directives concerning your data after your death. Write to contact@heycolis.com, providing proof of identity. You may also lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, 75007 Paris.
Cookies
The site uses cookies strictly necessary for its operation and, subject to your consent, audience measurement cookies. You may change your choices at any time in your browser settings.
Security
We implement appropriate technical and organisational measures: encryption in transit, access segregation, logging, regular backups and a password policy.
Minors
The service is not intended for persons under eighteen. No data is knowingly collected from minors.