DailyDrop Privacy Policy

Company Name: DailyDrop-uk ltd

Jurisdiction: England and Wales, United Kingdom

Effective Date: 2026

1. Introduction & Overview

DailyDrop-uk ltd ("Company", "We", "Us", or "Our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, share, and safeguard your personal data when you use our mobile applications, website, and technology platform (collectively, the "Platform").

This policy applies to:

• Customers: End-users ordering food, groceries, or goods through the Platform.

• Merchants: Business owners, staff, and representatives listing their goods on the Platform.

• Couriers/Drivers: Independent delivery personnel delivering orders.

Please read this policy carefully to understand our practices regarding your personal data and how we handle it in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller Information

For the purposes of applicable UK data protection laws, DailyDrop-uk ltd is the Data Controller responsible for your personal data.

• Company Name: DailyDrop-uk ltd

• Jurisdiction: England and Wales, United Kingdom

• Contact Email: privacy@daily-drop.co.uk (or your official contact email)

3. Information We Collect

We collect personal data directly from you when you interact with the Platform, as well as automatically through your device.

A. Information Provided Directly by You

• Account Information: Name, email address, phone number, password, and profile photo.

• Delivery Information: Delivery addresses, postal codes, and specific drop-off instructions.

• Payment Data: Payment card details, billing address, and transaction history (processed securely via PCI-DSS compliant payment processors; we do not store full credit card numbers).

• Identity Verification (Merchants & Drivers): Business registration documents, food hygiene certificates, bank account details, government-issued photo ID, and driver’s license.

• Communications: Records of chat interactions with customer support, driver notes, or review submissions.

B. Information Collected Automatically

• Location Data: Precise or approximate GPS location from your mobile device (when enabled) to show nearby merchants, calculate delivery fees, and enable real-time order tracking.

• Device & Usage Data: IP address, device model, operating system, browser type, app activity, log files, and unique device identifiers.

• Cookies & Tracking Technologies: Technical cookies to keep you logged in, remember your cart items, and analyze platform performance.

4. How We Use Your Personal Data & Legal Basis

We use your data under the following lawful bases permitted by UK GDPR:

5. How We Share Your Information

We do not sell your personal data to third parties. However, to operate the Platform, we share your information with necessary third parties:

1. Merchants: We share customer names, order details, and specific item notes with local merchants so they can prepare your order.

2. Delivery Drivers: We share delivery names, phone numbers, and addresses with assigned delivery drivers to complete order drop-offs.

3. Third-Party Service Providers: We share data with trusted tech providers, including:

   • Map Services: Google Maps API (for location matching and routing).

   • SMS & Communication: Firebase / Twilio (for sending OTP codes and order updates).

   • Payment Gateways: Secure payment processors (e.g., Stripe) to handle payment collection.

   • Cloud Hosting: Secure servers hosting our databases.

4. Legal & Regulatory Authorities: We may disclose data if required to do so by UK law, court order, or law enforcement investigations.

6. Data Retention

• We retain your personal information for as long as your account is active or as needed to provide you with services.

• Financial and transaction records are retained for at least 6 years to comply with UK tax laws (HMRC requirement).

• If you delete your account, we will anonymize or permanently delete your personal data within 30 days, except where legal obligations require us to retain it.

7. Your Data Protection Rights (UK GDPR)

Under UK data protection law, you have the following rights regarding your personal information:

• Right of Access: You have the right to request a copy of the personal data we hold about you (Subject Access Request).

• Right to Rectification: You can ask us to correct inaccurate or incomplete data.

• Right to Erasure ("Right to be Forgotten"): You can request that we delete your personal data where there is no legal reason for us to keep it.

• Right to Restrict Processing: You can ask us to pause processing your data in certain circumstances.

• Right to Data Portability: You can request a digital copy of the data you provided to us.

• Right to Object & Opt-Out: You can opt out of marketing communications at any time by clicking the "Unsubscribe" link in emails or disabling push notifications in app settings.

To exercise any of these rights, please contact our support team

8. Data Security

We implement robust organizational and technical security measures (including SSL encryption, restricted database access, and secure token authentication) to protect your personal information against unauthorized access, loss, or misuse.

9. International Data Transfers

Where our service providers or servers operate outside the UK/EEA, we ensure appropriate safeguards (such as UK International Data Transfer Agreements - IDTA or Standard Contractual Clauses) are in place to guarantee that your data receives an equivalent level of protection.

10. Children’s Privacy

The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will immediately delete it.

11. Changes to This Privacy Policy

DailyDrop-uk ltd reserves the right to update this Privacy Policy at any time. Any updates will be published on this page with an updated "Effective Date." We encourage you to review this policy periodically.

12. Contact & Complaints

If you have any questions, concerns, or complaints about how we handle your personal data, please contact us first:

• Company: DailyDrop-uk ltd

If you are not satisfied with our response, you have the right to lodge a complaint with the UK data protection supervisory authority:

• Information Commissioner’s Office (ICO)

• Website: https://ico.org.uk

• Helpline: 0303 123 1113