Privacy Policy
Last updated: 26 August 2026 · Version 2026-08-26
Moot is operated by Moot Platform LTD (company number NI741904), registered in the United Kingdom, with an address at 192-202 Obins Street, Portadown, Craigavon, Northern Ireland, BT62 1BU, United Kingdom.
Moot Platform LTD is the data controller for personal information processed through the Moot platform where it determines the purposes and means of that processing. The public-facing brand is Moot.
1. Who we are
Moot Platform LTD (company number NI741904) is the data controller.
- Privacy: privacy@moot-deliver.com
- Support: support@moot-deliver.com
- Registered address: Moot Platform LTD, 192-202 Obins Street, Portadown, Craigavon, Northern Ireland, BT62 1BU, United Kingdom
An ICO registration number is not published here because one has not been confirmed in the product source.
2. Scope
This notice covers the website, sender and driver apps, freight and fleet tools, support, and customs features where those features are available in the product.
3. Personal information we collect
Account
Name, email, phone, authentication identifiers, role (sender, driver, freight or fleet), profile details and, where you provide them, company name.
Delivery
Pickup and destination addresses, sender and recipient details, delivery instructions, package or freight description, size, weight, timing and price.
Location
Where enabled, driver location, route and corridor information, collection and delivery locations, and tracking while a job is active.
Media
Profile photos, parcel or freight photos, Smart Scan images, vehicle images, proof-of-collection and proof-of-delivery images, and signatures where requested.
Freight and fleet
Company information, vehicle details and registrations, driver assignments, routes, and compliance documents you upload (for example insurance or licence images).
Payments
Payment and payout status, Stripe customer or Connect account references, and transaction identifiers. Full card details are handled by Stripe, not stored by Moot.
Customs
Where you use customs features: names, addresses, EORI and VAT identifiers, importer and exporter details, goods descriptions, commodity data, values, invoices and supporting documents, transport and ferry details, vehicle or trailer registrations, customs references, MRNs, GMRs and customs authority responses.
Messaging and support
In-app messages, support requests, disputes and incident reports.
Technical
Device and app information, IP address, security and authentication events, and crash or error logs generated by the app or hosting platform.
Quick send
A quick send uses the same delivery record as a signed-in send. It stores the name, email, phone number, pickup and drop-off addresses, and parcel details you enter, so a driver can collect it. After payment we email a private tracking link to that address. The price is split 75% to the driver and 25% to Moot. The driver share is held until delivery, then for 48 hours. Refunds and payment disputes use the same payment record as other Moot deliveries. Anyone with the tracking link can see the delivery status, driver interest, and raise a payment dispute. A photo used for Smart Scan is sent to that existing check and is not kept on the website. Guest checkout takes the delivery price through Stripe by card, PayPal or Google Pay. Those payment details are entered on the secure payment page and are not stored by Moot. No Moot account is created.
4. Data about recipients and other people
A sender can give us someone else’s details so we can complete a delivery — typically a recipient name, address, phone number and delivery instructions. We receive that information from the sender, not usually from the recipient. We use it only to arrange collection or delivery, contact the recipient about that shipment, and keep a record of the job. If you are a recipient and want us to correct or delete details we hold, email privacy@moot-deliver.com.
5. Why we use the information
- Create and operate accounts
- Match shipments with routes, drivers, vehicles and capacity
- Book, collect, deliver and track jobs
- Arrange a quick send made without an account
- Message the other party on a job
- Take payment and pay drivers or carriers
- Prevent fraud and keep the platform secure
- Provide support and handle disputes
- Prepare and, where enabled, transmit customs information
- Meet legal, tax and accounting duties
- Keep the service reliable and fix faults
6. Lawful bases
Under UK GDPR we typically rely on:
- Contract — to provide the Moot service you asked for, including matching, booking, payment and support.
- Legal obligation — where the law requires records for tax, accounting, customs or law-enforcement requests.
- Legitimate interests — to prevent fraud, secure accounts, administer the platform, enforce our Terms, resolve disputes and improve reliability. Those interests are the safe operation of a two-sided marketplace, not marketing by default.
- Consent — only where we actually ask for it, for example optional location access on a device, or marketing if we send any. Creating an account is agreement to the Terms, not a catch-all privacy consent.
7. Smart Scan, Gemini and other AI
Moot uses AI-assisted tools, including Google Gemini, when you choose Smart Scan or similar features. A photo or listing image you submit can be sent to that provider to suggest parcel or freight details such as item type, approximate size, likely weight, a suggested vehicle and a goods description. For customs-related scans, Gemini may also suggest a category or a controlled-goods warning.
You can review and edit those suggestions before you post a shipment or use them in a customs form. AI output is not always accurate. Gemini does not make the final decision on whether customs is required, on customs procedure, or on any other legal customs question. Those decisions stay with you and with the rules in the app.
Images sent for analysis are processed to provide the suggestion. We do not treat Smart Scan as a permanent public gallery of your photos.
8. Automated matching
Moot uses software to decide which open shipments a driver or carrier can see. Factors include origin, destination, route or corridor, timing, vehicle and capacity. This is how the marketplace is shown to you. Whether this is “solely automated decision-making with legal or similarly significant effects” under UK GDPR is a question for legal review. If you think a matching outcome has unfairly blocked you, contact privacy@moot-deliver.com.
10. HMRC and customs data
If you use UK customs features, declaration information may be transmitted to HMRC. HMRC responses and customs references may be stored on your shipment record. We do not store Government Gateway usernames or passwords. If a connection to HMRC is authorised, we store OAuth access tokens and encrypt those tokens at rest.
This is a description of a technical integration with HMRC’s Customs Declaration Service. It is not a claim of any special status.
11. International transfers
Moot’s application backend is hosted in the United Kingdom (Google Cloud europe-west2). Some processors — including Stripe and Google services used for authentication, hosting, crash reporting or Gemini — may process information outside the UK, including in the United States.
We do not claim that every overseas transfer is automatically covered by UK adequacy regulations. The legal mechanism for each processor (adequacy, the UK Extension to the EU-US Data Privacy Framework, an International Data Transfer Agreement, or another approved safeguard) should be confirmed against that vendor’s current terms. If you want more detail about a specific processor, email privacy@moot-deliver.com.
12. How long we keep information
We keep information only as long as we need it for the purpose it was collected, including disputes and legal duties. In practice:
- Accounts — while the account is open, then a short period to close it cleanly.
- Delivery, POD and messages — for the life of the job and a reasonable period afterwards to handle claims, typically up to 6 years where a contract or tax record may still matter.
- Payment records — for as long as tax and accounting rules require. Exact statutory periods should be confirmed with an accountant.
- Customs records — for as long as customs and tax law require us or you to keep them. Exact periods should be confirmed with a customs adviser.
- Support and disputes — until the issue is closed and any follow-up period has passed.
- Security logs — for a limited operational period unless needed for an investigation.
- Smart Scan images — to produce the suggestion and operate the related shipment; not as a standalone marketing library.
If you ask us to delete an account, we will remove or anonymise what we no longer need, and keep only what the law or an unresolved job still requires.
13. Security
We use HTTPS in transit, account authentication, role-based access so one customer cannot see another customer’s private shipment data, restricted production access, and encryption of HMRC OAuth tokens at rest. We log security-relevant events. We do not claim that any system is fully secure, certified, or penetration-tested.
To report a security issue, email support@moot-deliver.com.
14. Your rights
You can ask us to:
- Be informed about how we use your information (this notice)
- Access a copy of your information
- Correct inaccurate information
- Erase information, where the law allows
- Restrict how we use information
- Receive information you provided to us in a portable form, where the right applies
- Object to processing based on legitimate interests
- Ask about automated decision-making that significantly affects you
- Withdraw consent, where we are relying on consent
These rights can be limited — for example where we must keep a customs or payment record. Email privacy@moot-deliver.com.
15. ICO complaints
You can complain to the UK Information Commissioner’s Office if you are unhappy with how we use your information. See ico.org.uk/make-a-complaint. We have not published an ICO registration number because one is not confirmed in our product source.
16. Marketing
We send service messages about your account, jobs, payments and security. Those are not marketing. We do not run a separate advertising email programme in the current product. If we later send marketing, we will only do so where we have a lawful basis and you will be able to unsubscribe. You can also email privacy@moot-deliver.com.
17. Children
Moot is not for anyone under 18. We do not knowingly collect personal information from children under 18.
18. Cookies and analytics
The public website may set essential cookies so the host can deliver the page. We also keep a private log of page visits and clicks on the public site, including the IP address, the page, what was clicked, the referring site, the browser, whether the screen is a phone, tablet or desktop, and how long the page stayed open. While someone is on the site, administrators can see that visit as it happens. The visit log is visible only to Moot administrators and is deleted after 90 days. A live visit drops off the current list about a minute after the person leaves. We do not currently add Google Analytics, advertising pixels or other non-essential trackers. If a future website version adds analytics or advertising cookies, we will update this notice and add a consent control where required.
19. Changes
We may update this notice. The new version will be posted at moot-deliver.com/privacy with a new date. Important changes may also be shown in the app.