• Data controller: Delhi Rasoi Oy
• Business ID: 2331506-4
• Address: Siltakatu 11, 02770 Espoo, Finland
• Data Protection Officer: Hashmat Rahmanzadah
• Privacy contact: rahman@delhirasoi.fi

We process driver information for the following purposes:

• Creating and managing driver accounts.
• Authenticating access to the App and protecting account security.
• Assigning delivery orders to available drivers.
• Tracking and managing deliveries.
• Providing live delivery status to authorized restaurant and dispatch staff.
• Sending order and delivery-status push notifications.
• Calculating delivery distance and time.
• Maintaining delivery, operational, payroll and reporting records.
• Handling customer-service requests, disputes, safety issues and misuse.
• Maintaining, securing and troubleshooting the App and backend systems.

The legal basis may include performance of the employment or contractor relationship, compliance with legal obligations, and Delhi Rasoi's legitimate interests in operating deliveries, protecting its systems, ensuring safety, preventing misuse and maintaining business records.

Where consent is required by law, we will request it separately. You may withdraw consent where processing is based on consent, although disabling required permissions may prevent the App from functioning.

Account information

• Full name.
• Email address.
• Phone or contact number.
• Restaurant or delivery affiliation.
• Account credentials and authentication information.

Device and technical information

• Device identifier.
• Device type and operating system.
• App version.
• Push-notification device token.
• Technical diagnostics and error information.

Order and delivery information

The App displays information obtained from Delhi Rasoi's order-management systems, including order number, items, order total, restaurant information, customer name, delivery address, customer contact details where needed for delivery coordination, delivery status and tracking information.

This information is displayed to the driver only for completing an assigned delivery. It is not collected from the driver.

The App collects precise GPS location data when location permission and tracking are enabled. Location may be collected while the App is open and in the background.

Location is used to identify available drivers, support delivery assignment, provide live delivery tracking, calculate delivery distance and time, maintain delivery records, and investigate delivery or safety issues.

Location may be sent approximately every 15–60 seconds or after a configured distance change, depending on device settings, GPS availability and App configuration. Location collected during an active order may be linked to that order.

When background tracking is active, the operating system may show a persistent notification or location indicator. You can disable location permissions in device settings. Location is optional for general App access: drivers can continue to log in, view assigned orders, view order details and maps, and update delivery status without location permission. Disabling location permission prevents optional live delivery tracking and may limit delivery coordination features that depend on live location.

We use collected information only as necessary for delivery operations and related business purposes. We do not use driver location or account information for advertising, behavioral profiling or unrelated marketing.

Customers generally receive delivery status and relevant delivery progress. Driver personal contact details are not provided to customers unless necessary for delivery coordination or required by law.

We do not sell driver personal data and do not share it with advertising networks or data brokers.

• Delhi Rasoi internal systems: account, order, delivery, location and technical information for core App functionality.
• Authorized restaurant and dispatch staff: driver name, delivery status and relevant live location during an assigned delivery.
• Push-notification providers, such as Firebase Cloud Messaging: device token and notification data to deliver order alerts.
• Technical service providers: limited information required for hosting, security, maintenance and troubleshooting.
• Authorities or professional advisers: where disclosure is required by law or necessary to protect rights, safety, systems or property.

Service providers are selected with appropriate care and are required to process personal data lawfully and confidentially.

We retain personal data only for as long as necessary for the purposes described in this policy, unless a longer period is required or permitted by law.

• Driver account information is retained while the account is active and for a limited period afterward when needed for legal, accounting, operational or dispute-related purposes.
• Location history is retained according to Delhi Rasoi's operational retention schedule and may be retained longer when needed for an ongoing dispute, legal obligation, safety matter or business record.
• Order and delivery records are retained according to applicable legal and business-record requirements.
• Device tokens are removed when a driver logs out, changes account or when the token is no longer needed.

When information is no longer required, it is deleted, anonymized or securely archived where legally permitted.

Account Deletion and Data Retention Requests

Driver accounts are created and administered by Delhi Rasoi. Drivers cannot create accounts within the App.

A driver may request deletion of their account or personal data by contacting info@delhirasoi.fi. We may request information needed to verify the requester’s identity before processing the request.

Upon a verified request, we delete or anonymize personal data that is no longer necessary for delivery operations and that we are not legally required to retain.

We may retain limited information where required or permitted by applicable law, including records necessary for accounting, taxation, employment administration, fraud prevention, dispute resolution, security, or legal obligations. Retained information is kept only for the applicable retention period and is not used for unrelated purposes.

We use reasonable technical and organizational measures to protect personal data, including:

• HTTPS communication between the App and backend services.
• Token-based authenticated API access.
• Access controls for internal systems.
• Restricted access to driver, order and location information.
• Security and confidentiality obligations for personnel and service providers.
• Technical monitoring and troubleshooting procedures.

Passwords should be stored using a secure one-way password-hashing method and are not intended to be stored in plain text.

Depending on applicable law, you may have the right to:

• Request access to personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of data, subject to legal and operational obligations.
• Request restriction of processing.
• Object to processing based on legitimate interests, including direct marketing.
• Request data portability where applicable.

To exercise your rights, contact rahman@delhirasoi.fi. We may request information needed to verify your identity. We generally respond within one month as required by applicable law.

You may also disable location permissions or log out. Location permission is optional for general App access and is used for optional live delivery tracking and delivery coordination.

You may lodge a complaint with the Finnish data protection supervisory authority if you believe your personal data has been processed unlawfully.

• Office of the Data Protection Ombudsman
• Ratapihantie 9, 6th floor, 00520 Helsinki, Finland
• P.O. Box 800, 00521 Helsinki, Finland
• Telephone: 029 56 66700
• Email: tietosuoja@om.fi

Delhi Rasoi Oy may update this Privacy Policy when the App, processing activities or applicable law changes. The “Last updated” date will be changed when a new version is published. Material changes may also be communicated to drivers through the App or email.