Privacy Policy

This is an early working draft. It is scaffolding to build the real thing, not authoritative legal text, and it has not been reviewed by a lawyer. Do not rely on it.

This policy explains what personal data kwip (operated by Duane Chetcuti, trading as kwip, VAT number MT28953125) collects, why we collect it, and what you can do about it.

We are the data controller for the personal data described here. You can reach us on +356 79 747 360, Monday to Saturday, 9am to 9pm.

Who this covers

Kwip touches a few different people, and we handle each one's data a little differently:

• Senders who book a delivery (Send customers and Courier merchants).
• Recipients who receive a delivery.
• Merchants who run a Courier account with us.
• Site visitors who browse our website.

A note on recipients

If someone sends you a parcel through kwip, we hold your name, address, and phone number so we can deliver it and keep you updated, even though you never signed up with us. Our lawful basis is performing the delivery contract and our legitimate interest in getting the parcel to you reliably. You have the same data rights as everyone else (see below), and you can contact us any time to use them.

Data we collect

• Delivery contact details: pickup and drop-off names and phone numbers, and any note added for the driver.
• Address and location data: pickup and drop-off addresses, and live tracking while a delivery is in progress.
• Payment details: for Send bookings, handled securely by Stripe. We never see or store your full card number.
• Account and merchant data: if you register, your business details, pickup locations, and billing information.
• Usage data: from cookies and similar tools, only where you have given consent (see our Cookie Policy).

Why we use it

• To book, schedule, deliver, and track parcels.
• To send delivery updates on WhatsApp, with SMS as a fallback.
• To take payment and issue VAT receipts and invoices.
• To provide support and handle any delivery issues.
• To understand how our site is used and improve it, where you have consented.
• To send news and offers, only if you opted in. You can withdraw that consent at any time.

Legal basis

We rely on contract to carry out a delivery, legal obligation for tax and invoicing, consent for analytics, marketing cookies, and marketing messages, and our legitimate interests in running and improving a reliable service, balanced against your rights.

Processors we use

We share only what is needed, with providers who process data on our behalf under contract:

We do not sell your personal data. Where a processor is outside the EU or EEA, we use appropriate safeguards for the transfer.

How long we keep it

We keep operational records to run and improve the service, and anonymise personal data rather than holding it longer than needed. As a guide, recipient contact details are anonymised around two years after the last delivery, and merchant records are kept for the legal and tax period (around seven years) and then anonymised.

Your rights

Under the GDPR and Maltese data protection law you can ask to access, correct, delete, or export your data, object to certain processing, or withdraw consent. To make a request, contact us using the details above. You can also lodge a complaint with the Information and Data Protection Commissioner (IDPC) in Malta.

Cookies

We use cookies and similar tools to keep the site working and, with your consent, to measure how it is used and how our ads perform. You can change your choices any time using the Cookie Settings control in the footer. Our Cookie Policy has the full detail.

Contact

Questions about this policy or your data? Call +356 79 747 360 or reach us through the contact options on our site.