Privacy Policy

01 Data We Collect

Account Information

• Business name, commercial registration details, and industry type.
• Contact person name, email address, and phone number.
• Billing address and payment method details.

Order Data

• Pickup location, delivery address, recipient name, and recipient phone number.
• Package description, declared value, and COD amounts.
• Order status history, timestamps, and proof-of-delivery photos.

Technical Data

• API keys issued, API request logs, and webhook endpoint URLs.
• Browser/device information, IP addresses, and session tokens for portal access.

Financial Data

• Wallet top-up records, transaction history, and COD settlement statements.

02 How We Use Your Data

• To create and manage your business account on the Karrix platform.
• To process delivery orders, match them to DC Partners, and provide real-time tracking.
• To manage your prepaid wallet, charge delivery fees, and settle COD amounts.
• To send operational notifications: order confirmations, status updates, and delivery alerts.
• To investigate and resolve delivery disputes using order logs and proof-of-delivery data.
• To generate invoices and financial reports accessible from your portal.
• To monitor API usage and enforce fair-use policies.
• To improve platform features and resolve technical issues.

03 Recipient Data You Provide

When you create delivery orders, you provide personal data about your customers (name, phone, address). As the business submitting this data, you are responsible for ensuring you have the legal right to share it with Karrix for the purpose of completing the delivery. Karrix processes recipient data solely to fulfil the delivery and does not use it for any other purpose.

04 Data Storage & Security

All data is stored on secure servers. Data in transit is encrypted via HTTPS/TLS. We enforce role-based access controls so that only authorised Karrix personnel can access your account data. API keys are hashed and stored securely.

05 What We Do Not Do

• We do not sell your business or order data to third parties.
• We do not share your data with advertisers or marketing networks.
• We do not use your customers' delivery addresses for any purpose other than completing the delivery.
• We do not retain API request payloads beyond operational logging needs.

06 Sharing of Information

Your data is shared only as necessary to operate the service:

• DC Partners: Pickup and delivery details are shared with the accepting DC Partner to execute the order.
• Drivers: Delivery address and recipient contact are shared with the assigned driver solely for delivery execution.
• Legal compliance: We may disclose data if required by Kuwait law or a court order.
• Infrastructure providers: Hosting and cloud services that process data on our behalf under strict confidentiality agreements.

07 Data Retention

• Account data is retained while your account is active and for 2 years after closure.
• Delivery order records are retained for a minimum of 3 years for financial audit purposes.
• API access logs are retained for 90 days.
• Financial transaction records are retained as required by Kuwait commercial law.

08 Your Rights & Data Deletion

You may request access to, correction of, or deletion of your account data by emailing [email protected] with the subject "Business Data Request". Include your registered business name and email address.

Requests are processed within 30 days. Note that financial records required by law cannot be deleted on request.

09 Changes to This Policy

Material changes will be communicated via email at least 7 days before taking effect. Continued use of the platform constitutes acceptance.

10 Contact Us