Privacy Policy

This is an early working draft. It is scaffolding to build the real thing, not authoritative legal text, and it has not been reviewed by a lawyer. Do not rely on it.

This policy explains what personal data Kwip (operated by Duane Chetcuti, trading as Kwip, VAT number MT28953125) collects, why we collect it, and what you can do about it.

We are the data controller for the personal data described here. You can reach us on +356 79 747 360, Monday to Saturday, 9am to 9pm.

Who this covers

Kwip touches a few different people, and we handle each one's data a little differently:

• Senders who book a delivery (Courier merchants).
• Recipients who receive a delivery.
• Merchants who run a Courier account with us.
• Site visitors who browse our website.

A note on recipients

If someone sends you a parcel through Kwip, we hold your name, address, and phone number so we can deliver it and keep you updated, even though you never signed up with us. Our lawful basis is performing the delivery contract and our legitimate interest in getting the parcel to you reliably. You have the same data rights as everyone else (see below), and you can contact us any time to use them.

Data we collect

• Delivery contact details: pickup and drop-off names and phone numbers, and any note added for the driver.
• Address and location data: pickup and drop-off addresses, and live tracking while a delivery is in progress.

• Payment details: handled securely by Stripe. We never see or store your full card number.
• Account and merchant data: if you register, your business details, pickup locations, and billing information.
• How you found us: which of our campaigns you came through, if any.
• Usage data: from cookies and similar tools, only where you have given consent (see our Cookie Policy).

Why we use it

• To book, schedule, deliver, and track parcels.
• To send delivery updates on WhatsApp, with SMS as a fallback.
• To take payment and issue VAT receipts and invoices.
• To provide support and handle any delivery issues.
• To give you the offer of the campaign you came through, and to measure which of our campaigns bring merchants to Kwip.
• To understand how our site is used and improve it, where you have consented.
• To send news and offers, only if you opted in. You can withdraw that consent at any time.

Legal basis

We rely on contract to carry out a delivery, legal obligation for tax and invoicing, consent for analytics, marketing cookies, and marketing messages, and our legitimate interests in running and improving a reliable service, balanced against your rights.

Processors we use

We share only what is needed, with providers who process data on our behalf under contract:

We do not sell your personal data. Where a processor is outside the EU or EEA, we use appropriate safeguards for the transfer.

How long we keep it

We keep operational records to run and improve the service, and anonymise personal data rather than holding it longer than needed. As a guide, recipient contact details are anonymised around two years after the last delivery, and merchant records are kept for the legal and tax period (around seven years) and then anonymised.

Proof of delivery is deleted, not anonymised, and we keep it for 90 days. When we deliver a parcel we record proof that it arrived. Usually that is a photograph of the parcel at the door — the parcel is the subject and we never photograph anyone's face. Where a sender has paid for an identified handover, we instead record the name and ID number the recipient gives us, and where an age check applies, that the recipient was confirmed to be 18 or over. We never photograph or keep a copy of an identity document, and we never record a date of birth.

The photograph, name and ID number are permanently deleted 90 days after delivery. The delivery record around them — the time, the location and the parcel scans — is kept as part of our operational history. If a claim or dispute is open, we keep the proof until it is resolved and then delete it.

Our lawful basis for this is our legitimate interest in being able to show that a parcel was delivered, which is what settles a dispute about whether it arrived.

Your rights

Under the GDPR and Maltese data protection law you can ask to access, correct, delete, or export your data, object to certain processing, or withdraw consent. To make a request, contact us using the details above. You can also lodge a complaint with the Information and Data Protection Commissioner (IDPC) in Malta.

Cookies

We use cookies and similar tools to keep the site working and, with your consent, to measure how it is used and how our ads perform. You can change your choices any time using the Cookie Settings control in the footer. Our Cookie Policy has the full detail.

Contact

Questions about this policy or your data? Call +356 79 747 360 or reach us through the contact options on our site.