Privacy Policy

1. Introduction

DropSync Courier Services Limited (“DropSync”, “We”, “Us” or “Our”) is committed to protecting the privacy of users of our Rider Application, Customer Application and Website (“Services”).

This Privacy Policy explains how we collect, use, disclose and safeguard your personal data in accordance with the Data Protection Act No. 3 of 2021 of the Laws of Zambia and applicable Google Play Store and Apple App Store requirements.

By accessing or using our Services, you consent to the collection and use of information in accordance with this Privacy Policy.

2. Data Controller

DropSync Courier Services Limited is the Data Controller of all personal data collected through its applications and digital platforms.

3. Legal Basis for Processing Personal Data

We process personal data on the following lawful bases:

• User consent
• Performance of a contract for delivery services
• Legal obligations under applicable laws
• Legitimate business interests such as fraud prevention and service improvement

4. Categories of Personal Data Collected

We may collect the following personal data:

• Full Name
• Phone Number
• Email Address
• Delivery Address
• National ID (for riders)
• Vehicle Registration Details (for riders)
• Bank or Mobile Money Details (for riders under PaaS)
• Location Data (GPS)
• Device Information
• Delivery History
• Proof of Delivery Images

5. Location Data Collection

Location data of Riders is collected in the background while a delivery is active for the purpose of enabling real-time tracking of parcels by customers and merchants.

Location tracking begins when a Rider accepts a delivery job and stops once the job has been completed or cancelled.

6. Use of Personal Data

We use personal data to:

• Provide courier and logistics services
• Enable real-time delivery tracking
• Assign delivery jobs to riders
• Process platform rental subscriptions under our PaaS model
• Verify rider identities
• Improve application functionality
• Communicate service updates
• Comply with legal obligations

7. Platform-as-a-Service (PaaS) for Bike Owners

Independent bike owners who subscribe to DropSync’s Platform-as-a-Service offering may provide additional personal and financial information for onboarding and operational purposes.

This information is used to:

• Assign delivery tasks
• Monitor completed deliveries
• Facilitate platform rental subscriptions
• Track rider performance
• Provide access to merchants and customers within the DropSync ecosystem

8. Sharing of Personal Data

We may share personal data with:

• Technology service providers such as Onde platform
• Cloud hosting providers
• Payment processing partners
• Regulatory authorities when required by law

9. Cross-Border Data Transfers

Your personal data may be processed on servers located outside Zambia. We ensure adequate safeguards are in place for such transfers.

10. Data Retention

Personal data is retained only for as long as necessary to fulfil service obligations or comply with legal requirements under Zambian law.

11. Data Subject Rights

Under the Data Protection Act No. 3 of 2021, users have the right to:

• Access personal data
• Request correction of inaccurate data
• Request deletion of personal data
• Object to processing
• Withdraw consent at any time
• Request data portability

12. Children’s Privacy

Our Services are not intended for persons under the age of 18. We do not knowingly collect personal data from minors.

13. Security Measures

We implement reasonable administrative and technical safeguards to protect personal data from unauthorized access or disclosure.

14. Contact Us

If you have any questions regarding this Privacy Policy or wish to exercise your data protection rights, please contact:

DropSync Courier Services Limited
Email: support@dropsynczm.com

Phone: +260 972 410 584 / +260 975 057 462