OML Delivery privacy policy

1. What we collect

• Account: your name, Mauritian mobile number (+230), email address if you give one, language, and the one-time sign-in codes we send you by WhatsApp or email.
• Deliveries (senders): pickup and delivery addresses and districts, the receiver's name and phone number, package type, size, weight and value, your price, instructions and the wanted time.
• Location: the GPS position of the pickup and delivery points, from the address or from your phone if you tap "Use my location". Drivers: the phone's position at pickup, while the delivery is in progress and at the moment of delivery, so the sender can follow it and the proof shows where it was handed over. We do not track location in the background or when you are not on a delivery.
• Proof of delivery (drivers): the receiver's name and signature, a photo of the package, the GPS position and the time.
• Payments: how each delivery is paid, by blink or in cash to the driver. For a blink payment: the amount, its status and time, the blink payment reference and the receipt, made in your name by OML's own sales system (sales.omlcloud.com). You pay in your own banking app; we never see your card or bank account details. Drivers: the earnings, commission and payouts in the driver wallet, and the bank transfer reference of each payout.
• Driver details: vehicle type and registration number, driving licence number and expiry, national identity card number, the districts you work in, availability, bids, ratings and earnings.
• Ratings and comments: the ones you give or receive.
• Licence: the licence key you enter in an app and a device code made by the app (a one-way code derived from the device; it is not your phone number or IMEI). The app asks omlcloud.com once in a while whether your key is still active, sending only the key's licence number.
• Notifications: if you switch them on, a push token from Google Firebase Cloud Messaging in the apps, or a web push subscription in your browser on delivery.omlcloud.com.
• Technical data: our server records the date, time and IP address of requests, for security and to fix errors.
• We do not collect contacts, messages, call logs, files or advertising IDs, and the apps contain no advertising.

2. Why we use it

To create your account and sign you in; to post deliveries, let approved drivers bid, connect a sender with the chosen driver, track the delivery and keep a proof; to take blink payments and pay drivers; to check and approve drivers; to calculate earnings and the platform commission; to check your licence; to answer support requests; to prevent fraud and keep the service safe; and to meet legal duties.

3. Who sees it

• When a sender accepts a bid, the sender and the driver see each other's name and phone number, and the driver sees the addresses and the receiver's details.
• Drivers see open deliveries by district and price, without the sender's contact details, before they win the job.
• OML staff who run the service (the admin app) see what is needed to approve drivers, follow deliveries and make payouts.
• Service providers acting for us: our own server in a data centre (hosting); WhatsApp, for the codes and notices sent from OML's business number, and OML's own mail server for emails; Google Firebase (notifications in the apps, when switched on); and blink by Emtel, with OML's own sales system, for blink payments.
• Authorities, when the law requires it.
• We never sell your data.

4. How long we keep it

While your account is open. Deliveries, proofs of delivery and payment records are kept for up to 7 years for accounting and disputes, then deleted. Sign-in codes expire after 10 minutes. Server logs are kept for up to 90 days.

5. Security

All traffic uses HTTPS. Proof photos and signatures are private files, only for the sender, the driver and OML staff. Access to the server is restricted.

6. Your rights

Under the Data Protection Act 2017 of Mauritius you can ask to see, correct or delete your data, and object to its use. Write to isfaaq@gmail.com.

7. Deleting your account

In any of the apps: Settings › Delete my account. On the web: sign in at delivery.omlcloud.com, open your profile and choose Delete account, or write to isfaaq@gmail.com. Your account and personal data are deleted; records the law requires us to keep are kept only for that purpose.

8. Children

The service is not meant for anyone under 18.

9. Changes

We will show the new date at the top of this policy and tell you in the app about important changes.