Privacy Policy

Last updated: [FILL IN: date]

This is a working draft. Before going live, the placeholders marked [FILL IN] must be completed with your registered business details, and the document should be reviewed by a legal professional. This text is not legal advice.

This Privacy Policy explains how delivery.be ("we", "us", "our") collects, uses, and protects your personal data when you use our website and same-day delivery service in Belgium. We process personal data in line with the EU General Data Protection Regulation (GDPR) and Belgian data protection law.

1. Who we are (Data Controller)

The data controller responsible for your personal data is:

Business name: [FILL IN: Eenmanszaak / legal entity name]
Company / enterprise number (KBO/BCE): [FILL IN: BE 0XXX.XXX.XXX]
VAT (BTW) number: [FILL IN: BE 0XXX.XXX.XXX]
Registered address: [FILL IN: street, postal code, Antwerp, Belgium]
Email: hello@delivery.be

2. What personal data we collect

Depending on how you use our service, we may collect:

Account data: first and last name, email address, phone number, password (stored encrypted), preferred language.
Order data: pickup and drop-off addresses, contact names and phone numbers for pickup/drop-off, item description, delivery instructions, order history.
Location data: approximate coordinates of pickup and drop-off addresses (to calculate distance and price).
Payment data: payment is processed by our payment provider (Stripe). We do not store full card numbers; we keep a transaction reference and payment status.
Technical data: basic log and device information needed to operate and secure the service.
Driver data (if you sign up as a courier): identity documents, driver licence, vehicle details, and payout information, used for verification and payments.

3. Why we use your data and our legal basis

To provide the delivery service (create, dispatch, track and complete your orders) — legal basis: performance of a contract (GDPR Art. 6(1)(b)).
To process payments and refunds — performance of a contract.
To send transactional emails (order confirmations, status updates) — performance of a contract.
To comply with legal and tax obligations — legal obligation (Art. 6(1)(c)).
To improve and secure the platform — legitimate interest (Art. 6(1)(f)).

4. Who we share your data with

We share data only with parties needed to deliver the service:

Couriers assigned to your order receive the pickup/drop-off addresses and contact details needed to complete the delivery.
Stripe (payment processing).
Supabase (database and authentication hosting, EU region).
Resend (transactional email delivery, EU region).

We do not sell your personal data to third parties.

5. International transfers

We aim to keep personal data within the EU/EEA. Where a processor operates outside the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

6. How long we keep your data

We keep account and order data for as long as your account is active and as required to comply with legal, tax and accounting obligations (in Belgium, generally up to 7 years for invoicing records). When data is no longer needed, it is deleted or anonymised.

7. Your rights

Under the GDPR you have the right to: access your data; rectify inaccurate data; erase your data ("right to be forgotten"); restrict or object to processing; data portability; and to withdraw consent where processing is based on consent. To exercise these rights, contact us at hello@delivery.be.

You also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), www.dataprotectionauthority.be.

8. Cookies

We use a limited set of cookies and similar technologies. See our Cookie Policy for details.

9. Data security

We apply technical and organisational measures to protect your data, including encrypted connections, access controls, and row-level security on our database. No method of transmission or storage is completely secure, but we work to protect your data continuously.

10. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest version.

11. Contact

For any questions about this policy or your personal data, contact us at hello@delivery.be.