Privacy Policy
Last updated: · Applies to QuickDeliver Logistics Pvt. Ltd.
This Privacy Policy (“Policy”) describes how QuickDeliver Logistics Pvt. Ltd.(“QuickDeliver”, “we”, “us”) collects, uses, stores, shares, and protects personal data when you visit our website, use our mobile applications, book deliveries, or interact with our support channels.
We are committed to handling personal data responsibly and in compliance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000, and applicable rules including the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, where relevant.
By using our services, you acknowledge this Policy. Where the DPDP Act requires consent for specific processing, we will obtain it at the point of collection or through your account settings.
1. Who this Policy applies to
- Customers and senders — individuals and businesses who book pickups and deliveries
- Receivers — persons designated to accept packages (we process their name, address, phone, and OTP)
- Riders and delivery partners — independent contractors or employees using the rider app
- Staff users — dispatch, CRM, and administrative personnel
- Website visitors — including those who track packages without an account
2. Data we collect
| Category | Examples | When collected |
|---|---|---|
| Identity & contact | Name, phone number, email address, business name | Registration, booking, support |
| Account credentials | Phone-based login, session tokens | Sign-in |
| Shipment data | Pickup and delivery addresses, landmarks, coordinates, package description, weight, declared value | Every booking |
| Payment data | Transaction references, invoice amounts, payment method type (we do not store full card numbers) | At payment |
| Delivery evidence | Receiver OTP confirmation, proof-of-delivery photos, delivery timestamps | At handover |
| Location data | Rider GPS position while on active duty; geocoded pickup/delivery coordinates | During delivery operations |
| Communications | Support messages, call records where logged, notification delivery status | When you contact us |
| Technical logs | IP address, browser type, device identifiers, request timestamps, error logs | Automatic, all platform access |
| Usage analytics | Pages viewed, features used, quote requests, session identifiers | Website and app usage |
3. How we collect data
- Directly from you — when you register, book, upload bulk orders, or contact support
- From senders about receivers — delivery details you provide for the recipient
- Automatically — through cookies, session storage, and application logs (see Cookie Policy)
- From riders — location and scan events during active deliveries
- From payment partners — confirmation of successful or failed transactions (not full card data)
4. Purposes of processing
We process personal data for the following purposes:
- Providing pickup, delivery, tracking, and proof-of-delivery services
- Assigning riders, routing packages, and updating shipment status
- Calculating fares, issuing invoices, and processing payments or refunds
- Sending transactional notifications (booking confirmation, out-for-delivery, OTP, delivery complete)
- Customer support, dispute resolution, and claims handling
- Fraud prevention, account security, and abuse detection
- Service reliability, debugging, and performance monitoring
- Aggregated product analytics to improve our platform
- Compliance with legal obligations, including tax records and lawful government requests
- Enforcing our Terms of Service and protecting our legal rights
5. Legal basis for processing
Under the DPDP Act, we rely on:
- Performance of a contract — processing necessary to fulfil your booking and deliver your package
- Consent — where required, for example optional marketing communications or non-essential analytics
- Legitimate uses — fraud prevention, security, and service improvement, where permitted by law
- Legal obligation — retaining records for tax, audit, and regulatory compliance
6. Consent and withdrawal
Shipment and delivery data is necessary to perform the service you request; without it we cannot carry your package. Where we rely on consent (such as optional promotional messages), you may withdraw consent at any time by contacting us or using unsubscribe options. Withdrawal does not affect processing already carried out lawfully before withdrawal.
7. Data sharing and disclosure
We do not sell personal data. We share it only as follows:
- Between shipment parties — senders and receivers see relevant names, addresses, phone numbers, and tracking status
- With riders and dispatch staff — to the extent needed to pick up, transport, and deliver the package
- With service providers — hosting, payment processing, SMS/push notification delivery, and map services, under contracts requiring appropriate safeguards
- With business account administrators — where your employer or account owner has CRM access to shipment history
- With authorities — when required by court order, subpoena, or applicable law, or to protect safety and legal rights
- In corporate transactions — if we merge, are acquired, or sell assets, subject to confidentiality and continued protection of your data
8. International transfers
Our primary operations and data storage are in India. If we transfer data outside India in future, we will do so only in compliance with the DPDP Act and applicable cross-border transfer rules, using appropriate safeguards.
9. Data retention
| Data type | Retention period |
|---|---|
| Shipment records and invoices | 8 years (tax and legal compliance) |
| Account profile data | While account is active, plus 2 years after closure |
| Proof-of-delivery photos | 90 days after delivery, then deleted |
| Server and security logs | 30 days, then automatically deleted |
| Support tickets | 3 years from resolution |
| Analytics session data | Aggregated; session identifiers not linked to shipments long-term |
We may retain data longer where required for legal proceedings or regulatory investigation.
10. Security measures
We implement reasonable technical and organisational measures to protect personal data, including:
- Encrypted connections (HTTPS) for all web and app traffic
- Role-based access controls for staff and rider accounts
- Authentication required for account and operational functions
- OTP-verified delivery to prevent fraudulent handover
- Regular backups and access logging
- Staff training on data handling and confidentiality
No system is completely secure. If you suspect unauthorised access to your account or a data incident affecting you, contact us immediately at support@quickdeliver.in.
11. Your rights as a Data Principal
Under the DPDP Act, you have the right to:
- Access — obtain a summary of the personal data we hold about you and the processing activities
- Correction — request correction or completion of inaccurate or incomplete data
- Erasure — request deletion where retention is no longer necessary and no legal obligation requires continued storage
- Grievance redressal — raise a complaint with our Grievance Officer
- Nomination — nominate another individual to exercise your rights in the event of death or incapacity
- Escalation — if unsatisfied with our response, approach the Data Protection Board of India
To exercise any right, email the Grievance Officer with your registered phone number and a description of your request. We will respond within 30 days, or inform you if an extension is required.
12. Children's privacy
Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected a child's data, contact us and we will delete it promptly.
13. Marketing communications
We may send service-related messages (booking updates, delivery notifications) without separate marketing consent because they are necessary to perform the service. Promotional messages, if any, are sent only with consent or where permitted by law, and include an opt-out mechanism.
14. Automated decision-making
We use automated systems to calculate fares, assign riders by zone, and flag SLA breaches. These decisions do not produce legal or similarly significant effects on you without human review available on request through support.
15. Cookies and similar technologies
We use browser storage and session identifiers as described in our Cookie Policy. We do not use third-party advertising trackers or cross-site profiling cookies.
16. Links to other websites
Our platform may link to external sites (for example, map providers). We are not responsible for their privacy practices. Review their policies before providing personal data.
17. Changes to this Policy
We may update this Policy to reflect legal, technical, or business changes. The “Last updated” date at the top will change accordingly. Material changes will be notified on this page and, where appropriate, in the app. Continued use after the effective date constitutes acceptance.
18. Grievance Officer / Data Protection contact
Grievance Officer
QuickDeliver Logistics Pvt. Ltd.
Office 4, MG Road, Shivajinagar, Pune, Maharashtra 411005, India
Email: support@quickdeliver.in
Phone: +91-99999-99001
We acknowledge complaints within 48 hours and aim to resolve them within 30 days.