Written to be read once, on a phone, by the person it is about.
This service is not yet operating. The company is being registered and no real delivery has been carried. The database behind this site holds test rows only — no customer's phone number, position or photograph has ever been entered.
This notice is published now so that it is in place before the first parcel, which is what Act 843 requires. The registered name, company number, address and Data Protection Commission registration will appear here on the day they exist, and no personal data will be collected before then.
A business — usually a wholesaler or a pharmacy distributor — hires us to deliver a parcel to you. Everything below exists to get that parcel to the right place and to prove it arrived.
| What | Why we need it |
|---|---|
| Your phone number | To tell you the parcel is coming, and for the rider to reach you if they cannot find you. Given to us by the business sending the parcel. |
| Where you are | A description, and after the first delivery a map point. This is how the rider finds you the second time without ringing. |
| When you are usually in | Worked out from when past deliveries to you succeeded, and any note about how to reach you. Nobody asks you for this — we come at a time you are likely there rather than twice. |
| A photograph at the door | Taken by the rider when the parcel is handed over, so that if the sender later asks whether it arrived, there is an answer. It shows the doorway and the parcel. |
| The rider's location | Recorded when they arrive and when they deliver, so we can tell whether a delivery really happened where it was supposed to. |
| The amount paid | If you pay cash on delivery, we record the amount so it reaches the sender. |
We do not collect your name unless the sender gives it to us, and we do not ask for your ID.
Nobody else.
| What | How long | Then what |
|---|---|---|
| The photograph at your door | 90 days | Deleted. We keep a record that a photo was taken and when — not the picture. |
| Your Osoro Code — the address handle you give senders | 3 years | Deleted. Pause or replace it at any time; a revoked code is never given to anybody else. |
| Who used your Osoro Code, and when | 1 year | Deleted. It is kept so you can see who has been sending to your door. |
| Your phone number on a delivery | 1 year | Removed from the delivery record. |
| The map point for your address | 3 years | Deleted. Every new delivery restarts the clock, so an address you still use is kept. |
| When you are usually in | 3 years | Deleted. Worked out from past deliveries rather than asked for, and it ages out alongside the map point it was learnt with. |
| Notes about how to reach you at home | 3 years | Deleted. Kept for the same time as the hours it explains. |
| Notes a rider wrote about a failed delivery | 180 days | Deleted. |
| Your name and number, if you asked us to ring you back | 2 years | Deleted. We keep that somebody asked about that service, and what came of it — not who. |
| Which language you asked us to write to you in | 2 years | Deleted after two years, or sooner if you ask. It is read when we are writing you a message and at no other time — it is on no list and no report, and it changes nothing about your delivery except the words. |
| Messages between our office and the rider about your delivery | 180 days | The text is deleted; we keep that a message was sent. |
| A review you wrote about a delivery, if you have left one | 180 days | The words are deleted; we keep that a review was left and later withdrawn. That is not the same as pretending there was never one. |
| Your email or phone, if you took a test key to build against this system — and the practice business that came with it | 90 days | Deleted ninety days after the key was last used, along with the practice business and everything you booked in it. None of it was ever real: nothing you did with that key reached a rider, a customer or a telephone. |
| Where you are signed in, if you are a member of staff — the kind of browser, when the session started and when it was last used | 90 days | Deleted after ninety days. There is no address in it. It is on your own sign-in page so that you can see a screen you do not recognise and end it. |
| Your phone number, if you are a member of staff who asked for the morning summary | until you ask us to remove it | Kept until you stop asking, and removed with everything else if you ask us to erase your number. |
| A photograph taken on a haulage job, if you were the person who received the load | 7 years | The picture is deleted. That a photograph was taken, when, and whether it matched where the lorry was stay with the waybill, which is a business record. |
| Your signature, if you signed for a haulage delivery on our driver's phone | 7 years | The image is deleted. Your name and the fact that the goods were signed for stay on the waybill, which is a business record. |
| Your mobile money number, if you paid for a delivery or an invoice from your phone | 7 years | The number is removed. The amount, the date and the payment provider's transaction number stay in the accounts, which the law requires us to keep. |
| Your mobile money number, if we paid you what we owed you by phone | 7 years | The number is removed. The amount, the date and the payment provider's transaction number stay in the accounts, which the law requires us to keep. |
| If you ride for us: where your phone was, every couple of minutes, while you had a stop or a haul run — never when your list is empty — and whether your phone said that position came from a location-faking app | 7 days | Deleted after a week. Nothing is kept of it. |
| Messages you sent to our WhatsApp number — the words you typed. Photos, voice notes and other files you send are not kept at all | 180 days | The words are deleted; we keep that you wrote to us, when, and what we did about it (for example that your delivery was moved to the day you asked for). |
| What you asked for before a delivery — a day, a time of day, somebody to leave it with — if you told us on the tracking page | 180 days | The words are deleted; we keep that you asked for something and when. The delivery it applied to is over by then. |
| Messages we sent you | 90 days | The text is deleted; we keep that we messaged you. |
| The record that a delivery happened, and the money | 7 years | Kept. This is a financial record and the law requires it. It does not contain your name, number or address. |
| What you told us about finding your door | 3 years | Deleted. "The blue gate past the mango tree" is yours, not ours, and it goes when the map point it belongs to goes. |
| The deliveries we worked your usual hours out from | 3 years | Deleted alongside the hours themselves. We do not keep the workings after the answer has gone. |
| The fact that you asked us not to message you | until you ask us to remove it | Kept until you tell us otherwise — and kept even if you ask us to erase everything else. Deleting it is how a business forgets you said no. It holds your number, the day you asked and the reason, and it is used for nothing except leaving you alone. |
These periods are enforced by the software, not by anyone remembering: a job runs and deletes what is past its date. The figures above are read from the same policy that job uses, so this page cannot promise something different from what happens.
Under Act 843 you can:
Everything travels encrypted. Photographs are stored so that they can only be reached through the specific delivery they belong to — there is no way to browse them. Only named staff can sign in, every sign-in is logged, and a rider's phone can be cut off remotely if it is lost.
If something goes wrong and your information is exposed, we will tell you and the Commission.
If we change this, we will say so here and date it.