What we collect, and why
Short, because there is not much of it. The technical detail sits on the security page.
This website
No cookies, no advertising trackers, and no consent banner — because there is nothing to consent to. We use Cloudflare Web Analytics, which counts page views without cookies and without building a profile of you.
If you email us
We keep your message and any files you send, in order to reply and to produce your audit report. We do not add you to a mailing list, and we do not pass your details to anyone else. Ask us to delete it and we will, and we will confirm when it is done.
If you become a customer
We process your carrier invoices, shipment records and rate agreements to check your billing. Those documents are yours: you are the data controller and we act on your instructions as processor, under a written agreement we will sign before you send anything.
- Shipment records can contain recipient names and addresses. We keep them only as long as they are needed to support a finding or a claim, and by default no longer than 24 months.
- Findings are kept as a record of what we told you, with personal fields removed when you ask for a deletion.
- External AI processing is off unless you switch it on in writing.
- You can export or delete your data at any time.
Your rights
You can ask what we hold, ask for a copy, ask us to correct it, or ask us to delete it — write to hello@overbill.co.uk and we will answer within 30 days. If you are not satisfied you can complain to the Information Commissioner's Office at ico.org.uk.
Last updated 7 September 2026.