Privacy policy

1. The principle

We collect what a delivery requires and we reveal it only for as long as that delivery is running. A phone number is visible to the people involved in an active delivery and to nobody else. A courier’s position is recorded while they are working and not while they are not.

We follow the Zimbabwe Data Protection Act, and we apply the practices the GDPR is built on — collecting the minimum, using it only for the purpose it was collected for, letting you see it, and deleting it when it is no longer needed.

2. What we collect

From a customer:

• Phone number, and a name if you give one
• Pickup and destination addresses for each delivery
• Package category and description
• Payment records for each delivery

From a recipient:

• Phone number and destination address, given to us by the sender
• Whether and when the delivery was handed over

From a courier:

• Phone number, name, and a photograph
• Identity documents, and any licence or registration the transport requires
• Position while on an active delivery
• Delivery history, earnings, and reliability record

3. Who can see what

Access is scoped to a live delivery rather than granted permanently. During a delivery, the customer sees the courier’s name, photograph and position; the courier sees the pickup and destination addresses and the contact number they need; and the recipient sees the courier’s name and the delivery’s progress.

When the delivery closes, that access ends. Phone numbers are not retained in anyone else’s address book, and a courier cannot look up a past customer.

4. Location

A courier’s position is recorded only while they are on an active delivery. It is not recorded when they are off duty, and it is not visible to anyone at those times.

The track of a completed delivery is kept for 90 days as evidence — it is what a dispute about whether a package arrived is decided against — and then deleted, unless a dispute is still open.

5. Delivery PINs

A delivery PIN is generated randomly and stored only as a salted hash. It cannot be read back by anyone at GO!, it is never shown to the courier, and it is never written to a log. The record is deleted 30 days after the delivery.

6. Payments

No card details ever reach GO! systems. Payment is by cash or through EcoCash, and in the EcoCash case the payment provider handles the transaction; we record that it happened, for how much, and against which delivery.

7. How long we keep it

8. Closing your account

You can ask us to close your account. When we do, your name, phone number and email address are replaced with placeholders everywhere they appear.

Delivery, payment and audit records are kept. We cannot delete a financial record without breaking the accounts it belongs to, and we cannot delete a chain of custody without destroying the evidence a past dispute was decided on. What we can do — and do — is remove your identity from them.

9. Your rights

You can ask us to:

• Show you the personal information we hold about you, as a file you can download
• Correct anything that is wrong
• Delete your personal information, subject to the records described above

10. Who we share it with

With the other people in your delivery, for as long as it is running. With our payment provider, to take payment. With law enforcement where we are legally required to, in which case we record that it happened.

We do not sell personal information, and we do not share it for advertising.

11. Contact