GuelphDropsPrivacy policy
- We collect the details needed to move a package from a sender to a recipient and to prove what happened.
- We do not sell personal information, use ad trackers, or add you to marketing lists.
- Drivers may see route and package information needed to evaluate a request. The assigned driver receives the contact and handoff details needed to complete it.
- We use recipient contact details only for the delivery you named them for, including status email when that notification service is enabled.
- Ask a question or request access through our privacy support form.
1.Who we are
GuelphDrops operates a direct P2P package-delivery service in Guelph, Ontario. We are responsible for the personal information handled through this service. This policy describes how GuelphDrops handles personal information and applies alongside applicable Canadian privacy law.
2.What we collect
| Category | Information | Why it is needed |
|---|---|---|
| Sender | Name, phone, optional email, pickup address, safe-drop note | To arrange collection, provide status, and resolve a handoff. |
| Recipient | Name, phone, optional email, delivery address, PIN preference | To make the direct delivery and send optional status messages when enabled. |
| Package & delivery record | Package description and weight, order ID, pickup code, recipient PIN where selected, timestamps, status, delivery issue notes, photo proof | To assess the job, record custody, investigate a problem, and show delivery proof. |
| Account | Name, email, phone, password hash | To sign in and display your own delivery requests. Passwords are stored as salted hashes, not readable passwords. |
| Driver | Name, contact details, vehicle, availability, working preferences, jobs accepted | To operate the driver board, contact drivers, and handle safety and payment obligations. |
| Technical safety | IP address in rate-limit logs, email delivery events, session cookies | To prevent abuse, maintain sign-in, and stop sending to bounced or unsubscribed emails. |
3.How we use it
We use this information to offer, assign, complete, and support a direct delivery. When transactional email is enabled, we may contact the sender and recipient about that delivery: request received, driver accepted, pickup confirmed, driver on the way, delivery completed, or a delivery issue. We do not use address, phone, or email details to build advertising audiences or sell marketing data.
4.Who sees it
| Person or service | What they receive | Why |
|---|---|---|
| Driver considering a job | Pickup and delivery addresses, time window, route estimate, package description and weight, pay | To make an informed choice about accepting the direct job. |
| Assigned driver | Sender and recipient names, addresses, phones, safe-drop note, and package details | To complete the direct trip and handoffs safely. The sender or recipient presents any handoff code; the driver enters it but is not sent the code. |
| Authorized support team | Delivery and driver records | To handle safety, support, payment questions, and disputes. |
| Email provider | Email address and transactional message content, when email delivery is enabled | To send delivery and account emails. |
| Address lookup provider | Address text only | To validate an address inside Guelph. We do not send contact information with it. |
| Hosting/security providers | Information necessary to host and protect the service | Infrastructure, fraud prevention, and reliability. |
Service providers may process information outside Canada. Information processed in another country can be subject to that country’s laws. We disclose information to authorities only when legally required or permitted.
5.Delivery email
Sender and recipient emails are optional when email updates are available. We use them for the individual delivery or account: booking confirmation, driver status, photo proof, a delivery issue, password reset, and essential service notices. You can ask us to stop email to your account address from the account page. We retain an unsubscribed address on a suppression list so we do not email it by mistake.
6.Photo proof
For a photo-proof delivery, the driver photographs the package at the delivery location. Drivers are instructed to photograph the package and placement—not people. The photo is visible to authorized support staff and the sender through their delivery record. A recipient PIN delivery may also have a photo as supporting evidence, but the PIN is the hand-to-hand confirmation.
7.How long we keep it
We keep personal information only as long as reasonably necessary for delivery support, accounting, fraud prevention, claims, and legal obligations. A record may be retained longer for an active dispute, investigation, legal hold, or legal requirement. We may keep a do-not-email record so we do not resume messages that a person asked us to stop.
8.Your choices and access
You can ask to access or correct personal information, withdraw optional email consent, close an account, or ask how an address or delivery photo has been used. We may need to retain limited information where it is needed to complete a delivery, resolve a dispute, prevent fraud, or meet a legal obligation. Submit a privacy request through the Help Centre.
9.Security
- Sign-in passwords are stored as salted password hashes.
- Session cookies use HttpOnly and SameSite protections, and the service is delivered over HTTPS.
- Public forms use rate limits and automated-abuse controls.
- Pickup codes, recipient PINs, and photo proof create delivery records without requiring a stranger to access an account.
- Drivers are expected to use information only for the accepted direct job and never for follow-up contact.
No system can promise zero risk. If a privacy breach creates a real risk of significant harm, we will take the notification and remediation steps required by applicable law.
10.Contact
Use the privacy support form. For service terms, see the Terms of service.