Age Verification for Parcel Lockers: A Guide for Operators

Definition: age verification for parcel lockers

Age verification for parcel lockers is the check, at pickup and without staff, that the person opening the locker is old enough to obtain the product inside. It makes the opening of the locker depend on the result of the check.

This guide is for parcel locker networks, retailers running click and collect lockers in store, and smart locker manufacturers or integrators.

Why age-restricted products stay out of parcel lockers

Unattended pickup relies on a simple principle: whoever holds the right code opens the right locker. This principle works for an ordinary parcel. It does not work for a product that must not reach minors, such as alcohol, or a product a retailer chooses to reserve for adults, such as CBD.

Faced with this problem, there are two answers today:

• exclude these categories from locker pickup, which closes a sales channel for the retailer;
• accept them with no check at pickup, which leaves a gap in the sales journey.

The applicable rules depend on the product and the country, and should be checked with a legal adviser.

Why a tick box or a text message code does not prove age

Checks made before pickup share one limitation: they do not apply to the person standing in front of the locker.

1. The "I am over 18" tick box at checkout is a declaration by the buyer. Nobody checks it.
2. A check at checkout, even a more thorough one, applies to the buyer. The buyer and the person collecting can be different people.
3. The pickup code sent by text message or email proves that the person holds the code. A code can be passed on in seconds, including to a minor.

Only a check made at the moment of pickup applies to the right person, at the right time.

Where should the age check sit in the pickup flow?

The check sits between the QR code scan and the opening of the locker. The rest of the flow does not change.

1. Order. The customer orders as usual.
2. QR code scan. At the locker, the customer scans the QR code displayed on the locker. A web page opens on their phone, with no app to install.
3. Age verification. Guided by the camera preview, the customer centres their face on the screen. AgePass verifies their age automatically, in a few seconds.
4. Opening. If the age is validated, the opening authorisation is sent to the locker. If not, the locker stays closed.
5. Handover and proof. A timestamped compliance token is generated for the handover and archived.

AgePass verifies age only, by face scan. AgePass does not verify the customer's identity. The full customer journey is explained in our article on how automated age verification works.

Integration is via API, without replacing existing lockers or software, and without changing the customer journey apart from the verification step. The features are detailed in the AgePass features.

Comparing the options for age-restricted products

Handover in person checks the right person, but removes the point of unattended pickup. A check at the locker keeps unattended pickup and adds the age check.

Who carries the obligation: the operator or the seller?

The obligation not to sell certain products to minors falls first on the seller. The exact split of responsibilities between retailer and locker operator depends on the contract and should be checked with a legal adviser.

In practice, the roles are split as follows:

• The retailer or seller decides which product categories are subject to the check and sets the age threshold for each category, from the 7 age thresholds offered by AgePass: over 8, 13, 16, 18, 21, 25 or 30. Only orders from the chosen categories trigger the face scan: other pickups do not change.
• The locker operator provides a locker that can make its opening depend on the result of the check.
• The integrator or manufacturer connects age verification to the opening system, via API.

For the operator, the check at the locker is an extra service to offer retailers: it lets the network accept categories that were excluded until now.

What happens if the age is not validated?

If AgePass does not validate the customer's age, the locker stays closed and the product cannot be collected. No opening authorisation is sent to the locker. The refusal is also timestamped and archived in the compliance log.

An adult customer whose age was not validated can redo the face scan immediately.

If the locker stays closed, the parcel stays inside. What happens next (handover at a counter after a check, return to sender, refund) is up to the retailer's and the operator's procedure. This procedure should be defined before a pilot starts.

What proof should be kept for an audit?

Useful proof answers one question: was this handover preceded by a successful age verification? AgePass timestamps and archives every step of the pickup:

• the QR code scan;
• the age verification;
• the locker opening;
• the product handover;
• refusals, where applicable.

Each handover receives a timestamped compliance token. Proofs are stored with protected access and the compliance log can be exported for an audit.

Checklist: preparing a parcel locker pilot

Before starting a pilot, the operator and the retailer should answer these questions together:

1. Which product categories? Alcohol, CBD or other age-restricted products: the list determines which orders trigger the check.
2. Which age threshold for each category? AgePass offers 7 age thresholds: over 8, 13, 16, 18, 21, 25 or 30. The threshold depends on the product and the applicable regulations, to be confirmed by the seller.
3. Which pilot sites? One or a few existing pickup points that are representative of the network.
4. Which journey after a refusal? The procedure for a parcel that is not collected after a refusal.
5. Which GDPR obligations? The data controller must identify its legal basis, inform the people concerned and check whether a data protection impact assessment (DPIA) is required.

The AgePass pilot is free for 2 months, no commitment, set up on an existing pickup point and with no new hardware. The sectors AgePass serves are listed in where to use AgePass.

Key takeaways

• A parcel locker pickup today only checks that a code is held, not the age of the person collecting.
• A tick box, a check at checkout or a text message code do not apply to the person present at the locker.
• The age check sits between the QR code scan and the opening: if the age is not validated, the locker stays closed.
• Every step is timestamped and archived, with a timestamped compliance token per handover and an exportable log.
• AgePass integrates via API, without changing lockers or software, and can be tested in a free 2-month pilot.

See the journey on your lockers

A 30-minute video demo shows the full journey, from the QR code scan to the locker opening. Book a demo to explore the integration on your network, or join the waitlist to start a free 2-month pilot.