Privacy Policy

3. How We Share Your Information

We take your privacy seriously and ensure that your personal data is shared only when necessary and as per the guidelines outlined below:

a. With Delivery Partners

For Users: We share essential information with delivery partners (drivers) to complete deliveries, including:

• Full name
• Contact details (phone number)
• Pickup and drop-off locations
• Personal data provided by users in free-text boxes

For Drivers: We share relevant driver information with users or agents once a delivery is initiated, including:

• Driver’s name and contact information
• Driver profile, vehicle details, and vehicle photo
• Geolocation for tracking delivery progress

b. With Service Providers

We may share your personal data with trusted third-party service providers for specific purposes, such as:

Payment processing: To facilitate transactions securely.

Data analytics: To analyze and improve platform performance.

Marketing and customer support: For promotional communications and to provide customer support services.

Business partners: To enhance our service offerings or provide additional services.

c. For Legal Compliance

We may disclose your personal information in the following situations:

Law and legal proceedings: When required by law, court orders, or government authorities, we may disclose personal data to comply with legal obligations.

Enforcement of terms: If we believe disclosure is necessary to enforce our Terms and Conditions, Privacy Policy, or to protect the rights, property, or safety of CarriBiz, users, or the general public.

Emergency or safety: In cases of emergency or to protect personal safety, we may disclose data to protect individuals from harm, including protecting our users, employees, or members from potential legal liability.

d. With Your Consent

Promotions and Third-Party Marketing: We may share your personal data for marketing or promotional purposes with your explicit consent. This includes sharing information with third-party partners for offers, surveys, or research.

e. Data Sharing with Third Parties

Internal Use: We share personal data with our employees, officers, business partners, data processors, auditors, legal advisors, and other stakeholders for the purposes of providing the service, fulfilling obligations, or managing the platform.

Third-Party Transfers: We may transfer your data to third parties, including international transfers. Some third parties may be located outside India, in regions with different or less stringent data protection laws than India.

Outsourced Services: If we engage third-party service providers to handle data, we ensure that they adhere to confidentiality agreements and are compliant with our Privacy Policy. We also monitor their compliance regularly.

f. Public Disclosure

Any content or personal data that you share in publicly accessible areas of the platform (e.g., discussion boards, chats, or feedback sections) will be visible to others.

g. Protection Against Unauthorized Access

You are responsible for keeping your account login credentials, including your password, confidential. We advise you not to share your password with anyone. We do not assume any responsibility for unauthorized access due to password leakage.

h. Data Retention and Deletion

You may withdraw consent for data collection or sharing, and we will comply by deleting your personal information, unless we are required by law to retain it.

i. Risk and Transmission of Data

While we implement robust security measures to protect your data, please be aware that the transmission of personal data over the internet is not 100% secure. Any data transmitted is at your own risk.

4. Retention of Personal Data

We will retain your Personal Data for as long as your account is active and being accessed. If your account remains inactive for a period of three years or if you request the closure of your account, your Personal Data will be retained for seven years from the account closure or inactivity date ("End Date"). We may retain your Personal Data beyond this period if it is necessary to comply with our legal or contractual obligations or if you have consented to its continued retention. At the end of the retention period, we will ensure that your Personal Data and any related platform data are securely deleted. Any physical documents containing your Personal Data will be securely destroyed through shredding or another means of confidential disposal. We will ensure that our data processors retain your Personal Data only for as long as is necessary to fulfill the purposes outlined in this Privacy Policy. Data processors will delete Personal Data if it is no longer required for the stated purposes, unless retention is required by law or is in the public interest.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies, such as web beacons, to enhance your experience on our platform. These technologies help us personalize your app experience, track app performance, analyze user behavior, improve security, and prevent fraudulent activities. By using our platform, you consent to the use of these cookies. You can manage or disable cookies through your device settings at any time. Additionally, we may use third-party analytics tools, such as Google Analytics, which comply with relevant privacy regulations. Some cookies may also be used for marketing and advertising purposes, which you can opt out of via your browser settings or through our cookie management tool, if available. We will not use cookies for purposes other than those outlined in this policy, and we ensure that any third-party service providers we partner with for cookies or tracking technologies also comply with relevant privacy laws.

6. Security

We will ensure that your Personal Data is stored securely and protected by us and our data processors against unauthorized or accidental access, processing, erasure, loss, or use. Your Personal Data will be kept confidential and secure except for the purposes and uses as set out in this Privacy Policy and will only be disclosed on a “need-to-know” basis. Once we receive your Personal Data, we will use all reasonably practicable steps to ensure that it is stored securely. If we outsource and entrust your Personal Data to data processors, we will use contractual and other means to monitor their compliance with this Privacy Policy. Our security measures may include SSL certificate signing, TLS encryption, and hashed password storage. However, please be aware that the transmission of information through the internet is not completely secure. Although we adopt security measures to protect your Personal Data, we cannot guarantee its security during transmission to the Platform. Any transmission is at your own risk.

7. Personal Data Access Requests

You have the right to request a copy of your personal data held by us, unless we are exempted under applicable law. You are also entitled to request the transfer of your data to another organization in a machine-readable format. For such requests, please contact our Privacy Officer. We will provide a copy of the requested data within 30 days of receiving your request. If we are unable to meet this deadline, we will notify you before the 30-day period expires and provide the data as soon as possible thereafter. A fee may be charged to cover the necessary costs incurred in processing the request, including time spent and photocopying charges (INR 2 per page). In responding to your request, we will not disclose any personal data identifying another individual unless they consent or the data can be redacted to protect their identity. We may refuse to comply with a request if we cannot verify your identity, if it would disclose a third party's data, if compliance is prohibited by law, if the request is not in writing or is not in English, if sufficient information is not provided to locate the data, if the request is unreasonable due to multiple similar requests, if another party controls the data, or if we are otherwise permitted to refuse under law. If we refuse to comply, we will notify you in writing within 30 days, providing the reasons for refusal, and will keep a record of the refusal for at least four years.

8. Requests to Update Personal Data

You have the right to request corrections to any inaccuracies in your Personal Data. If you believe any of your personal data is inaccurate, you may request us to make necessary corrections after fulfilling a data access request. We will correct any inaccuracies at no charge within 30 days of receiving your request. However, if we believe the data is accurate or if the proposed correction is not appropriate, we may refuse to make the correction and will notify you in writing with the reasons for refusal. We will maintain a record of the reasons for refusal for at least four years. Additionally, if you wish to delete your personal data, you can do so by requesting account closure or withdrawing your consent in line with the procedures outlined in this Privacy Policy. Upon receiving such requests, we will take appropriate steps after verifying your identity.

9. Compliance with Applicable Laws

By using our Platform, you acknowledge and agree that this Privacy Policy and the security measures we implement to safeguard your Personal Information and Sensitive Personal Data or Information (as defined under the Information Technology Act, 2000, and its associated rules) align with reasonable security practices as outlined under Section 43A of the Information Technology Act, 2000. We ensure that all personal data handled through our Platform is in compliance with relevant laws and regulations governing data protection in India, and we implement appropriate security measures to protect such data from unauthorized access, disclosure, or misuse.

10. Miscellaneous Provisions

While using our Platform, you may encounter external links to third-party websites. Although we strive to provide quality, secure, and relevant external links, we advise you to exercise caution when clicking on these links. We disclaim any liability for losses or damages resulting from your use of such external websites, and your interaction with these sites is governed by their respective Terms and Conditions and privacy policies. Additionally, to comply with anti-money laundering regulations in various jurisdictions, we reserve the right to report any suspicious transactions to relevant authorities. If we determine, at our sole discretion, that a transaction is suspicious, we may take necessary actions, including reporting the incident to law enforcement, deactivating or terminating your account, or restricting you from creating a new account on the Platform. Furthermore, if we suspect misuse of our services for unlawful activities, such as financing terrorism or engaging in other criminal activities, we reserve the right to report such transactions to authorities without prior notice to you.

11. Personal Data Protection Contact

If you have any questions, concerns, or requests regarding your Personal Data, please fill out the contact form. We will address your queries within 30 business days.