top of page

Courier Privacy Notice

Last updated: 12/01/2026

This Courier Privacy Notice explains how Velloney Operations LTD (“we”, “us”, “our”, or “Vellocy”) collects, uses, stores, and protects personal data relating to couriers and delivery partners (the “Courier”) who use the Vellocy platform.

This notice applies only to couriers and should be read alongside our general Privacy Policy.

1. Data Controller

Company name: Velloney Operations LTD
Company ID: HE482287
Registered address: Amiliou 9, Limassol, Cyprus
Phone: +357 94 624103
Email: support@vellocy.com

Velloney Operations LTD acts as the Data Controller for courier personal data.

2. Scope

This notice applies to:

  • Registered couriers

  • Courier applicants

  • Active and inactive delivery partners

Couriers operate as independent contractors and not as employees of Velloney Operations LTD.

3. Personal Data We Collect

3.1 Identification & Contact Data
  • Full name

  • Phone number

  • Email address

  • Date of birth

  • Nationality

  • Government-issued ID (ID card / passport, where required)

3.2 Legal & Compliance Data
  • Right-to-work documentation

  • Tax identification numbers (where required by law)

  • Insurance documents

  • Vehicle details (type, registration, license)

3.3 Financial Data

  • Bank account details for payouts

  • Payment history and earnings

  • Invoices or payout records

3.4 Location & Delivery Data

  • Real-time GPS location during active deliveries

  • Pickup and drop-off locations

  • Delivery routes and timestamps

📌 Location tracking occurs only while the courier is online and accepting deliveries.

3.5 Performance & Usage Data

  • Order acceptance and completion rates

  • Delivery times

  • Customer and restaurant feedback

  • Platform interaction logs

3.6 Communications

  • Messages exchanged via the app

  • Support communications

  • Call logs related to deliveries (metadata only)

4. Legal Bases for Processing

We process courier data under the following GDPR legal bases:

PurposeLegal Basis

Courier onboarding & contractPerformance of a contract

Payments & accountingLegal obligation

Location trackingLegitimate interest

Fraud prevention & safetyLegitimate interest

Platform improvementLegitimate interest

Marketing communicationsConsent (where applicable)

5. How We Use Courier Data

We use courier data to:

  • Verify identity and eligibility

  • Allocate and manage deliveries

  • Calculate and process payouts

  • Provide navigation and routing

  • Monitor service quality and safety

  • Prevent fraud, abuse, or misuse

  • Comply with legal and regulatory obligations

6. Automated Decision-Making

Certain decisions may be automated, including:

  • Order allocation

  • Fraud detection

  • Temporary restrictions based on performance metrics

Couriers have the right to request human review of automated decisions.

7. Data Sharing

Courier data may be shared with:

  • Restaurants (limited delivery-related information)

  • Customers (first name, photo, delivery status)

  • Payment processors and banks

  • IT, hosting, and mapping service providers

  • Authorities, where legally required

We do not sell courier personal data.

8. International Transfers

Some service providers may process data outside the EEA.
Where this occurs, we ensure appropriate safeguards, including:

  • EU Standard Contractual Clauses

  • Adequacy decisions by the European Commission

9. Data Retention

Courier personal data is retained:

  • For the duration of the courier relationship

  • As required by tax, accounting, and regulatory laws

  • For dispute resolution and fraud prevention

Location data is retained only as long as necessary for operational and legal purposes.

10. Your Rights (GDPR)

Couriers have the right to:

  • Access personal data

  • Correct inaccurate data

  • Request deletion (subject to legal obligations)

  • Restrict or object to processing

  • Data portability

  • Withdraw consent at any time

Requests can be made by contacting:
📧 support@vellocy.com

11. Security Measures

We apply appropriate technical and organisational safeguards, including:

  • Encrypted data transmission

  • Access controls

  • Monitoring and logging

  • Secure storage systems

12. Complaints

If you believe your data protection rights have been violated, you may contact:

  • Velloney Operations LTD, or

  • The Cyprus Office of the Commissioner for Personal Data Protection

13. Changes to This Notice

We may update this Courier Privacy Notice from time to time.
Updates will be communicated via the Platform and reflected by a revised “Last updated” date.

bottom of page