This notice describes how Smart Routes Ltd processes personal data when you use Tracksr. It is provided in plain English. For the formal contractual data processing terms between Smart Routes Ltd and our courier and retailer customers, please see the relevant data processing agreement in your account.
Who we are
Tracksr is a parcel tracking and delivery rescheduling service operated by Smart Routes Ltd, a company registered in Ireland with its registered office at Unit P5, Marina Commercial Park, Centre Park Road, Cork, T12 PN7F. Our contact address for privacy matters is privacy@tracksr.io.
Our role under GDPR
For the personal data of parcel recipients (delivery addresses, parcel identifiers, rescheduling selections, contact details where provided), Smart Routes Ltd is a data processor. The courier or retailer that engaged us — and that originated your delivery — is the data controller. If you wish to exercise your rights as a data subject, you may contact either party; we will route requests to the appropriate controller where required.
What we process and why
- Delivery information — parcel ID, delivery address, courier/retailer reference. Used to display tracking status and accept rescheduling selections. Lawful basis: necessary for the contract between you and the courier/retailer.
- Rescheduling selections — the new delivery date or time you choose. Used to inform the courier so they can re-attempt delivery. Lawful basis: legitimate interest in fulfilling the delivery.
- Operational logs — IP address, user agent, request timestamps. Used for security, abuse prevention, and service reliability. Lawful basis: legitimate interest.
- Crash and error reports — non-personal diagnostic data sent to Sentry when the application encounters an error. Lawful basis: legitimate interest in maintaining the service.
We do not ask recipients for payment information, government identification, or login credentials. Tracksr does not request these and never will.
Sub-processors
- Amazon Web Services EMEA SARL — hosting in eu-west-1 (Ireland)
- Sentry (Functional Software, Inc.) — error monitoring
- Google LLC (Maps Platform) — map tiles on the tracking page
- Stadia Maps — map tiles on the tracking page
Cookies and local storage
The Tracksr web pages do not set tracking, advertising, or analytics cookies. Browser local storage is used only to retain short diagnostic snapshots when the application encounters an error, so that we can investigate issues. You can clear local storage at any time from your browser settings.
We do not use Google Analytics, Facebook Pixel, or any other third-party analytics or advertising tracker.
Retention
Operational logs are retained for a limited period proportionate to security and reliability needs. Delivery and rescheduling data is retained on behalf of the courier or retailer in line with their retention policy.
Your rights
Under GDPR you have the right to access, rectify, erase, restrict, port, and object to the processing of your personal data. To exercise these rights, contact privacy@tracksr.io or the courier/retailer that originated your delivery.
You also have the right to lodge a complaint with the Irish Data Protection Commission (dataprotection.ie) or the supervisory authority in your country of residence.
International transfers
Personal data is processed primarily within the European Economic Area (Ireland). Where any sub-processor processes data outside the EEA, we rely on Standard Contractual Clauses or an adequacy decision as required by GDPR.
Updates to this notice
We may update this notice from time to time. The current version is always available at tracksr.io/privacy.
Last updated: 5 May 2026