Privacy Policy

Your Privacy Matters to Us

Last Updated: July 26, 2026

At Dropoint, we are committed to protecting your privacy and ensuring the security of your personal information. This privacy policy outlines how we collect, use, disclose, and safeguard your data when you use our services.

1. Information We Collect

Account Information:

• Full name and date of birth
• Email address and phone number
• Residential and billing address
• Payment method information (processed securely)
• Identification documents (for verification)

Delivery Information:

• Pickup and delivery locations
• Order history and preferences
• Delivery notes and special instructions
• Recipient contact information

Device & Usage Information:

• Device type, operating system, and browser information
• IP address and geolocation data
• Pages visited and time spent on our platform
• Clickstream data and search queries
• Communication preferences and interaction history

Location Information:

• GPS location data (with your permission)
• Real-time tracking information during delivery

2. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To process orders, arrange pickups and deliveries, and track your shipments in real-time
• Communication: To send order confirmations, delivery updates, support responses, and promotional offers
• Payment Processing: To process transactions and prevent fraudulent activity
• Account Management: To manage your account, verify your identity, and authenticate access
• Service Improvement: To analyze usage patterns, improve our platform, and develop new features
• Quality Assurance: To monitor service quality and train our delivery team
• Legal Compliance: To comply with legal obligations and enforce our Terms of Use
• Marketing: To send you personalized offers and marketing communications (only with your consent)

3. How We Share Your Information

We may share your information with:

• Delivery Partners: We share pickup and delivery locations with our courier partners to facilitate delivery
• Payment Processors: We share payment information with secure third-party payment providers (handled securely with PCI compliance)
• Service Providers: We share data with vendors who assist us in operating our platform (under strict confidentiality agreements)
• Legal Requirements: We may disclose information to law enforcement or regulatory authorities when required by law
• Business Transfers: In case of acquisition or merger, your information may be transferred to the acquiring entity

We do NOT sell your personal information to third parties for their marketing purposes.

4. Data Security

We implement industry-standard security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Our security practices include:

• SSL/TLS encryption for data in transit
• AES-256 encryption for sensitive data at rest
• Secure authentication protocols and password hashing
• Regular security audits and penetration testing
• Limited access to personal information (need-to-know basis)
• Employee training on data protection and confidentiality

Note: While we employ strong security measures, no transmission over the internet is completely secure. We encourage you to use strong passwords and protect your account information.

5. Your Privacy Rights

You have the following rights regarding your personal information:

• Access: You can request a copy of all personal information we hold about you
• Correction: You can correct inaccurate or incomplete information
• Deletion: You can request deletion of your personal information (subject to legal obligations)
• Portability: You can request your data in a portable format
• Opt-Out: You can unsubscribe from marketing communications at any time

6. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your experience. Please refer to our Cookie Policy for detailed information on how we use cookies.

7. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Specifically:

• Account information is retained while your account is active
• Transaction records are retained for 7 years for tax and accounting purposes
• Communication logs are retained for 2 years
• Usage analytics are anonymized after 12 months

8. Children's Privacy

Dropoint services are not intended for children under 18 years of age. We do not knowingly collect personal information from children. If we discover that a child has provided us with personal information, we will delete it immediately.

9. Third-Party Links & Services

Our website may contain links to third-party websites and services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

10. International Data Transfer

Dropoint operates primarily in Kenya. If your data is transferred to another jurisdiction, we ensure it receives the same level of protection as required by Kenyan data protection laws.

11. Your Rights & Complaints

To exercise any of your privacy rights or file a complaint:

We will respond to your request within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC).

12. Policy Updates

We may update this privacy policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes via email or prominent notice on our website. Your continued use of Dropoint services constitutes acceptance of the updated privacy policy.

Register on the App