Privacy policy

1Who we are

Deliver Now is a delivery service that works in WhatsApp. We are launching in Harare, Zimbabwe. People and shops book deliveries in a WhatsApp chat with us, and approved couriers carry them by motorbike, car or truck.

We also run a web portal where shops and couriers can view their records (they cannot change them there), and an operations dashboard for our staff.

Deliver Now is a product of Millennial Ultra Solutions (Private) Limited, entity number 105480A0242026, of Shop 52, Portal Village, 1 Portal Road, Highlands, Harare, Zimbabwe. In this policy, “we”, “us” and “our” mean that company. We decide how your personal information is used, so under Zimbabwean law we are its data controller.

This policy covers the Deliver Now WhatsApp service, the delivernowafrica.com website, the shop and courier web portal, and our operations dashboard. You can reach us on WhatsApp at +263 79 035 9002, or by email at privacy@delivernowafrica.com.

2What we collect

What we collect depends on how you use Deliver Now.

Everyone who uses Deliver Now

• Your WhatsApp phone number.
• Names you give us, such as your own name or a name you type to sign for a delivery.
• The messages and commands you send us, such as NEW, CONFIRM or TRACK, and the replies we send. We keep these as delivery records.
• Photos sent to us as proof of a delivery, and location pins that couriers share.

When you book a delivery

• The pickup and drop-off zones and street addresses.
• The recipient’s name and WhatsApp number.
• What you are sending, and the vehicle it needs.
• Any goods cash the courier should collect on delivery.
• The fare, the status of the delivery, and the time of each step.

If someone sends you a delivery

The sender gives us your name and WhatsApp number. Section 5 explains how we use them.

If you apply as a courier

• Your full name, national ID number, date of birth and home zone.
• Your vehicle type, how much it can carry, and its number plate.
• Your driver’s licence number.
• The name and number of an emergency contact.
• Photos of your ID, your driver’s licence and your vehicle.
• Whether you are approved, whether you are online or offline, your ratings, your completed jobs and your earnings.

If you register a shop

• The business name and type, zone and address.
• The name of the contact person.
• The business registration number, if you give one.
• How the shop wants goods cash paid out: an EcoCash number or bank account details.
• The WhatsApp numbers of staff the owner invites.

Money records

• Goods cash collected on delivery (cash on delivery).
• The amounts the recipient and the courier each confirm.
• Goods cash a courier still owes back.
• Goods cash returned by EcoCash or at our office, with the payment reference and whether we verified it.
• Courier earnings.

Disputes, cases and staff actions

• The reasons given in disputes and cases, and the decisions our dispatch team records.
• An audit log of the actions our staff take.

Consent records

• When and how you agreed to WhatsApp messages from us: by booking, by sending START, by opening a recipient invitation, by registering, or by accepting a shop’s staff invitation.
• When you sent STOP.

Signing in to the web portal

• Your phone number.
• One-time sign-in codes. We store these only as a hash, a scrambled form that cannot be turned back into the code, and they expire quickly.
• A session token that keeps you signed in.

3How we use it

We use personal information to:

• book, dispatch, carry out and track deliveries, and send updates about them;
• offer jobs to approved couriers who are online and have the right vehicle;
• check couriers before their first job, including their ID, driver’s licence and vehicle;
• run cash on delivery: record what was collected, have both sides confirm the amount, and make sure goods cash goes back to the shop or sender;
• work out and show courier earnings, and pay goods cash out to shops;
• handle disputes and cases, and keep a record of the decisions;
• let you sign in to the web portal and keep your account secure;
• keep the service safe and fair, prevent misuse and fraud, and suspend or block accounts that break our terms;
• keep the records the law requires, such as accounting and tax records;
• answer the messages you send us.

We use personal information only where the law allows it. Usually that is because we need it to carry out a delivery or run an account you asked for, because you agreed (for example to receive our WhatsApp messages), because the law requires us to keep it, or because we need it to keep the service safe and fair.

4WhatsApp messages and your consent

We message you on WhatsApp only after you have opted in. You opt in when you book a delivery, send START, open a recipient invitation, register as a courier or shop, or accept an invitation to join a shop’s staff. We record when and how you opted in.

• Send STOP at any time to stop our messages.
• Send START to turn them back on.
• If you message us after sending STOP, we still answer.

We send messages about deliveries, accounts and the service. We do not send marketing messages.

Messages travel through WhatsApp, which is run by Meta. WhatsApp’s own terms and privacy policy apply to your use of WhatsApp.

5If someone sends you a delivery

The sender gives us your name and WhatsApp number so the delivery can reach you. We do not message you first.

• After booking, we give the sender an invitation link. The sender forwards it to you.
• You choose whether to open the chat with us. If you do, you get updates about that delivery and a private receipt code in your own chat.
• You use the code to confirm the handover. Couriers never see your receipt code.
• If you pay for goods on delivery, you and the courier each confirm the amount.

We use your number only for that delivery’s messages, unless you opt in to more. Send STOP to stop our messages and START to turn them back on.

6Who can see what

People see only what their part in a delivery needs.

• Couriers offered a job see only the pickup and drop-off zones, never addresses.
• The courier assigned to a job sees the pickup and drop-off addresses and the recipient’s name and number while the job is active. They never see the recipient’s receipt code.
• The sender sees the courier’s first name and the status of the delivery.
• The recipient gets a private receipt code for their delivery.
• Shops see only their own deliveries. Recipient numbers are partly hidden.
• Shop staff see only the deliveries they booked. The shop owner can see, and cancel, bookings their staff make.
• Our dispatch staff see what they need to run deliveries and resolve cases. Their actions are recorded in an audit log.

Outside Deliver Now, we share personal information only with the service providers in section 7, or when the law requires us to.

7Service providers and storage outside Zimbabwe

We use these companies to run Deliver Now:

These providers may store and process personal information outside Zimbabwe. Each one handles it to provide its service to us, under its own terms and data protection commitments.

We do not connect to EcoCash or to any bank. When goods cash is returned by EcoCash, our staff check the payment reference by hand.

8What we never do

• We do not sell personal data.
• We do not send marketing messages.
• We do not build advertising profiles.

9How long we keep it

We keep personal information only as long as we need it.

When a period ends, we delete the record, or anonymise it so that it no longer identifies anyone.

10How we protect it

• Each person sees only what their part in a delivery needs (see section 6).
• Job offers show zones, not addresses.
• Recipient receipt codes are private. Couriers never see them.
• Shops see recipient numbers only partly.
• One-time sign-in codes are stored only as a hash and kept for no more than an hour.
• Every action our staff take in the operations dashboard is recorded in an audit log.

No system is completely secure. If a security breach puts your personal information at risk, we will tell you and the Data Protection Authority as the law requires.

11Your rights

Under Zimbabwe’s Cyber and Data Protection Act [Chapter 12:07], you have the right to:

• be told how your personal information is used (this policy does that);
• see the personal information we hold about you;
• have it corrected if it is wrong or incomplete;
• have it deleted (see section 12);
• object to how we use it;
• withdraw your consent at any time, for example by sending STOP. This does not affect what we did before you withdrew it;
• complain to the Data Protection Authority, POTRAZ (see section 14).

To use any of these rights, message us on WhatsApp or write to privacy@delivernowafrica.com. We may ask you to confirm the request from the WhatsApp number we hold, so we know it is you. We aim to reply within 30 days.

Some rights have limits. For example, the law requires us to keep money records for the periods in section 9, even if you ask us to delete them.

12Deleting your data

Send DELETE MY DATA to our WhatsApp number from the Zimbabwe mobile number you have used with us. You do not need an account. From a number outside Zimbabwe, or if you cannot use WhatsApp, write to privacy@delivernowafrica.com.

We reply with a request reference that starts with DR. Within 30 days we delete or anonymise your personal data and confirm on WhatsApp (unless you have sent STOP, which stops that message too). We keep only what the law or an open delivery, case or cash balance requires, for the periods in section 9, and then delete it.

The full steps are on our data deletion page.

13Changes to this policy

We may update this policy. When we do, we will post the new version on this page and change the “Last updated” date at the top.

14Contact us and complaints

• Company: Millennial Ultra Solutions (Private) Limited, entity number 105480A0242026
• Address: Shop 52, Portal Village, 1 Portal Road, Highlands, Harare, Zimbabwe
• Email: privacy@delivernowafrica.com
• WhatsApp: +263 79 035 9002

If you are unhappy with how we have handled your personal information, please tell us first so we can try to put it right.

You can also complain to the Data Protection Authority: the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ), at www.potraz.gov.zw.