Privacy Policy | Deliivo

1. Introduction

Deliivo Technologies OÜ ("Deliivo", "we", "our", or "us") is committed to protecting your privacy and processing your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 ("GDPR").

This Privacy Policy explains how we collect, use, disclose, store, and protect your personal data when you access or use the Deliivo website, mobile applications, and related services (collectively, the "Platform").

By using the Platform, you acknowledge that your personal data may be processed as described in this Privacy Policy.

2. Data Controller

The controller responsible for processing your personal data is:

Deliivo Technologies OÜ

Registry Code: 17560200

Email: privacy@deliivo.com

Website: https://www.deliivo.com

If you have questions regarding this Privacy Policy or your personal data, please contact us using the email address above.

3. Personal Data We Collect

3.1 Information You Provide

When creating an account or using the Platform, we may collect:

•Full name

•Email address

•Phone number

•Profile photograph

•Date of birth

•Vehicle information

•Driver licence information

•Payment-related information

•Customer support communications

•Ratings and reviews

3.2 Trip and Route Information

To facilitate ride matching and trip management, we may collect:

•Departure locations

•Destination locations

•Pickup points

•Drop-off points

•Trip schedules

•Route preferences

•Booking history

3.3 Real-Time Location Information

When using the Deliivo mobile application during an active trip, we may collect precise GPS location data.

Location tracking is used for:

•Route monitoring

•Trip coordination

•Rider and Driver matching

•Safety features

•Trip verification

•Customer support

•Fraud prevention

Location tracking is only active when:

•The Deliivo mobile application is installed;

•Required permissions have been granted; and

•A trip is active.

The Deliivo website does not continuously collect GPS location data.

Users may manage location permissions through their device settings.

3.4 Automatically Collected Information

We may automatically collect:

•Device type

•Operating system

•Browser information

•IP address

•Language settings

•Log information

•Usage statistics

•App interaction data

4. How We Use Your Personal Data

We use personal data to:

•Create and manage accounts

•Match Drivers and Riders

•Process bookings

•Process payments

•Facilitate communication between users

•Improve Platform functionality

•Prevent fraud and abuse

•Respond to support requests

•Comply with legal obligations

•Ensure user safety

•Analyze usage trends

•Develop new features

5. Legal Bases for Processing

Under GDPR, we process personal data based on one or more of the following legal grounds:

Contract Performance

Processing necessary to provide Platform services and facilitate bookings.

Legitimate Interests

Processing necessary to:

•Improve Platform performance

•Prevent fraud

•Ensure security

•Resolve disputes

Consent

Where required, including:

•GPS location permissions

•Marketing communications

•Optional features

Legal Obligations

Processing necessary to comply with applicable laws and regulatory requirements.

5.1 Additional Information on Legal Bases

Depending on the type of service used and the nature of personal data involved, Deliivo may rely on different legal bases for processing personal data.

Account registration, booking management, trip coordination and payment processing are generally processed for the performance of a contract.

Where required, Deliivo relies on user consent for certain processing activities, including location permissions, marketing communications and optional platform features.

Deliivo may also process personal data where necessary for its legitimate interests, including improving platform performance, preventing fraud, maintaining security, resolving disputes and ensuring user safety.

In certain circumstances, Deliivo may process personal data to comply with applicable legal and regulatory obligations.

The legal basis applied may vary depending on the specific functionality of the Platform being used.

6. Payments and Stripe

Payments made through the Platform may be processed by Stripe and affiliated payment service providers.

Deliivo does not store full payment card details.

Payment information is processed directly by Stripe in accordance with Stripe's privacy practices and security standards.

Users should review Stripe's privacy documentation for additional information.

7. Sharing Personal Data

We may share personal data with:

Other Users

To facilitate Trips, Drivers and Riders may see limited profile information including:

•First name

•Profile photo

•Ratings

•Trip-related information

Service Providers

We may share data with trusted service providers that assist us with:

•Payment processing

•Cloud hosting

•Analytics

•Customer support

•Identity verification

•Communication services

Authorities

We may disclose information where required by law or where necessary to:

•Protect legal rights

•Prevent fraud

•Respond to lawful requests

•Protect user safety

8. International Data Transfers

Some service providers may process data outside the European Economic Area (EEA).

Where such transfers occur, Deliivo will ensure appropriate safeguards are implemented, including:

•European Commission adequacy decisions;

•Standard Contractual Clauses (SCCs); or

•Other lawful transfer mechanisms.

9. Data Retention

We retain personal data only for as long as necessary to:

•Provide Platform services;

•Comply with legal obligations;

•Resolve disputes;

•Enforce agreements.

Retention periods may vary depending on the type of data and applicable legal requirements.

Where possible, data will be deleted or anonymized after it is no longer required.

9.1 Retention Periods

For transparency and compliance with applicable data protection laws, Deliivo applies retention periods based on the category of personal data and business necessity.

Examples include:

•Account information - retained while the account remains active and for a limited period thereafter where required.

•Trip and booking records - retained for operational, dispute resolution, and legal compliance purposes.

•Payment-related records - retained in accordance with applicable financial and accounting obligations.

•Customer support communications - retained only as necessary to manage support requests and improve service quality.

Where retention is no longer required, data will be deleted, anonymized, or securely archived where legally permitted.

10. Your GDPR Rights

Subject to applicable law, you have the right to:

•Access your personal data

•Correct inaccurate information

•Request deletion of your data

•Restrict processing

•Object to processing

•Withdraw consent

•Request data portability

•Lodge a complaint with a supervisory authority

Requests may be submitted to privacy@deliivo.com

11. Cookies and Analytics

The Deliivo website may use cookies and similar technologies to:

•Maintain functionality

•Analyze usage

•Improve performance

•Remember user preferences

Users may manage cookie settings through their browser preferences.

Where required by law, consent will be obtained before non-essential cookies are used.

12. Security Measures

Deliivo implements technical and organizational measures designed to protect personal data, including:

•Encryption at rest where applicable

•Encryption in transit

•Secure authentication

•Access controls

•Monitoring and security procedures

While we strive to protect personal data, no method of transmission or storage is completely secure.

13. Children's Privacy

The Platform is not intended for individuals under the age of 18.

Deliivo does not knowingly collect personal data from children.

If we become aware that personal data from a child has been collected, we will take reasonable steps to delete such information.

14. Changes to This Privacy Policy

Deliivo may update this Privacy Policy from time to time.

Material changes will be communicated through the Platform or other appropriate channels.

Continued use of the Platform following such updates constitutes acknowledgment of the revised Privacy Policy.

15. Automated Decision Making

Deliivo does not make decisions producing legal or similarly significant effects based solely on automated processing.

16. Third-party Services

The Platform may integrate third-party services necessary for functionality, mapping, analytics, communication, and payment processing. Such providers process personal data in accordance with their own privacy policies and applicable law.

17. Contact Us

For privacy-related questions or requests, contact: