Skip to policy
DDELIVERSE
Sign in↗

DELIVERSE · PRIVACY

Your information. Handled with care.

From booking to delivery, understand what we collect, why we need it and the choices you have.

Privacy policyUpdated 25 October 2026
DELIVERSE
01

Purpose comes first

Information used for your account, parcels and support.

02

Access stays limited

Shared with the people and providers needed for the service.

03

You have a voice

Request access, corrections or deletion through Support.

On this page

  1. Who this policy is for
  2. Information we handle
  3. Why we need it
  4. Connected stores & Shopify
  5. Who receives information
  6. Cookies, browser storage & location
  7. How long records are kept
  8. Protecting your information
  9. Your choices & privacy requests
  10. Policy updates
Have a privacy question? ↗
01

Who this policy is for

Deliverse provides shipment booking, courier operations, tracking and merchant support. This policy explains how personal information is handled through our website, shipper workspace and connected delivery services. It covers account holders, merchants, senders and parcel receivers.

For customer information supplied by a merchant, Deliverse processes delivery data on that merchant’s instructions. The merchant is responsible for explaining its own collection and use of customer information. Deliverse also manages information needed for its accounts, service security, records and legal responsibilities.

02

Information we handle

The information depends on the service you use. It may come from you, your merchant or connected store, and the teams completing a delivery.

  • Account and business details: name, contact information, pickup and business addresses, and verification information requested during onboarding.
  • Parcel and receiver details: order references, parcel contents and value, receiver name, phone number, address and delivery instructions.
  • Delivery records: tracking events, delivery or return attempts, relevant location pins and evidence submitted for a shipment or support case.
  • Financial records: cash-on-delivery amounts, charges, payments, refunds and merchant settlement details.
  • Support and technical records: messages and attachments you provide, sign-in and security events, and device or network information associated with requests.
03

Why we need it

We use information to create and manage accounts, check service coverage, price and book parcels, arrange pickups, reach receivers, complete deliveries and returns, and provide tracking updates. Payment and settlement records help reconcile COD collections, charges and amounts due to merchants.

We also use relevant records to answer support requests, investigate delivery exceptions or suspected misuse, maintain reliable services and meet applicable legal obligations. Where a use depends on permission, you can withdraw that permission, subject to any separate obligation to keep necessary records.

We do not sell personal information or use shipment customer data for advertising or unrelated profiling. We do not use it for solely automated decisions with legal or similarly significant effects.

04

Connected stores & Shopify

When a merchant connects a commerce store, Deliverse receives the order information needed for the requested shipping service. Imported orders are placed in a merchant review queue; importing an order does not automatically book a parcel.

For Shopify courier fulfilment, the requested customer fields are name, phone number and shipping address, not customer email. Merchants can review orders and disconnect a store. Disconnecting stops the connection but does not erase records already required for booked shipments or settlement.

Verified Shopify privacy requests are processed through Shopify’s signed privacy webhook workflow. Additional responsibilities for connected merchants are described in our merchant data-processing addendum.

Merchant data processing ↗
05

Who receives information

Information needed to complete a shipment is available to the relevant merchant, authorised courier staff, hubs and service providers involved in delivery, hosting, communications or settlement. Access is limited by role and purpose; a provider may use information only for the service it performs.

We may disclose relevant records when required by a valid legal process or to address fraud, a security incident or a dispute, in accordance with applicable law. We do not give other merchants access to your private account records.

A hosting or service provider may operate outside Pakistan. Where processing involves another country, the same limited purpose and appropriate confidentiality and security requirements apply. External stores and websites have their own privacy policies.

06

Cookies, browser storage & location

Our web services use necessary cookies for signed-in sessions and request security. Browser storage may also hold interface preferences or temporary workflow state. You can clear or block these through your browser, but doing so may sign you out or prevent parts of the workspace from working.

An address or location pin supplied for a shipment helps identify its pickup or delivery point. Delivery staff may record location evidence while carrying out a delivery. Opening this privacy page does not request your device location.

Keep tracking links private: someone with a valid tracking reference may be able to see the public shipment status. Avoid placing passwords, payment credentials or unnecessary personal details in delivery instructions or support attachments.

07

How long records are kept

Retention depends on the record and its purpose. Our published retention schedule distinguishes unbooked store data, shipment records and financial records. A documented legal hold or unresolved dispute can require relevant information to be kept longer.

  • Unbooked Shopify order data: up to 30 days after the last import.
  • Booked source-order snapshots and corrections: up to 90 days after shipment closure.
  • Operational receiver data for completed shipments: up to 365 days, unless a dispute or documented legal duty applies.
  • Minimised accounting and audit records: up to seven years where needed for settlement, tax, fraud or legal obligations.
  • Encrypted backups: up to 30 days.

Records due for removal are deleted or irreversibly redacted under the retention process. A legal hold records its reason, owner and review date. Disconnecting a store or closing an account does not override a necessary financial or legal retention period.

08

Protecting your information

Deliverse uses HTTPS, role and account access controls, and additional authentication for sensitive administrative actions. Protected integration fields are encrypted at rest and access to protected Shopify order details is logged. Our security requirements include separating production and test data, keeping credentials out of logs and encrypting stored backups.

No online system can promise absolute security. If you suspect account misuse, change your password and contact Support. Do not share passwords, one-time codes or recovery codes. Confirmed incidents are assessed and handled through containment, recovery and notification steps where required.

09

Your choices & privacy requests

You can ask to access or correct your personal information, request deletion, or raise a concern about its use. Where applicable, you can withdraw permission or ask for a use to be limited. Some records must remain for active deliveries, disputes, settlement or legal obligations; we will explain relevant limits when handling your request.

Account holders can use authenticated Deliverse Support. Include the request type and a relevant shipment or account reference, without sending passwords or full financial credentials. We may need proportionate identity checks before releasing or changing information.

If you are a receiver without a Deliverse account, contact the merchant or sender that arranged your delivery and ask them to raise the request with Deliverse. Shopify privacy requests can also arrive through Shopify’s mandatory privacy workflow. A parent or guardian concerned about a child’s information can use these same channels.

10

Policy updates

We may revise this policy when our services or handling of information changes. The updated policy will appear at this address with a revised date. This notice explains our practices; it does not replace a separate permission where one is required.

The English and Urdu versions are provided to make the same information easier to understand. If anything is unclear or appears inconsistent, ask Deliverse Support for clarification.

Have a privacy question?

Sign in and open Support in your workspace. Receiving a parcel without an account? Ask your sender to raise a request for you.

Sign in for support↗
↑ Back to top
DELIVERSE

Delivery with clarity.

HomePrivacy policyTerms & conditionsMerchant data processing
© 2026 Deliverse