Courier Express mobile app privacy policy

Last updated: 5 October 2026

1. About this policy

COURIER EXPRESS LTD, company number C 87861, is registered at 30 Triq L-Imdina, Qormi QRM 9019, Malta.

This policy explains how personal information is handled in Courier Express Malta, Courier Express Driver and their connected delivery services. Our website privacy notice also applies when you use our website. Separate workplace notices may apply to employment information outside the driver app.

For privacy questions and requests, contact hr@courierexpressmalta.com. For app support, contact dispatch@courierexpressmalta.com.

2. Information used

Depending on your role and the features you use, information includes account names, email addresses, telephone numbers, account identifiers and preferences; collection and delivery addresses, recipient details, booking references, delivery instructions and status; driver assignments and work updates; and photographs, documents, signatures or other proof of delivery where those features are used.

Technical information includes device and user identifiers, notification information, app activity, connection information, diagnostics and crash reports. Location information supports address selection, maps, navigation, dispatch and delivery tracking. Payment related information can include charges, transaction references and payment status where payment features are used. Information you send to support is also processed.

Information comes from you, the person or business arranging a delivery, authorised drivers and staff, and the operation of the apps and connected services. Please avoid including unnecessary sensitive information in delivery instructions, uploaded files or support messages.

3. How information is used

Information is used to administer accounts, arrange and perform deliveries, assign work, provide maps and navigation, communicate delivery updates, record delivery outcomes, provide support, process applicable payments, prevent misuse and maintain the apps. Technical services support authentication, notifications, crash reporting and analytics. Personalisation and other enabled features can also affect the information processed.

The legal basis depends on the purpose. Processing may be necessary to perform a contract, comply with a legal obligation, or support legitimate interests such as delivery coordination, service reliability and security, subject to your rights. Where consent is required, it can be withdrawn without affecting earlier lawful processing. Device permission does not by itself authorise every use of personal information.

Courier Express acts as controller for its own operations and obligations. Where information is processed solely under a business customer's documented instructions, the respective responsibilities depend on that arrangement. Contact us if you need help identifying the organisation responsible for your request.

4. Location and device permissions

The customer app uses location in the foreground for relevant features, such as selecting collection and delivery locations. A delivery address entered into a booking is separate from access to the phone's current location.

The driver app uses precise location, including background location while the driver is online and on duty, to support dispatch, nearby requests and delivery tracking. Operational tracking is intended to stop when the driver goes offline or signs out. Drivers should contact operations if they have concerns about location collection outside working time.

Camera, photo and notification permissions support the relevant app features. You can review permissions in your device settings. Restricting a permission may prevent the associated feature from working.

5. Information sharing and service providers

Authorised staff, assigned drivers and the businesses or people involved in a delivery receive information relevant to that delivery and their responsibilities. Technical providers support hosting, authentication, payments, push notifications, maps, crash reporting and analytics. The services used and data involved vary by app, platform and enabled feature.

Professional advisers and public authorities may receive information where necessary for applicable obligations or lawful requests. Please share delivery tracking links only with intended recipients.

6. Processing locations

Primary application data is hosted in Frankfurt, Germany. Technical support access may take place from Lithuania. External services may process information in other countries according to their service arrangements. Transfers outside the European Economic Area are subject to applicable data protection requirements. Contact our privacy address for information about the processing and safeguards relevant to your information.

7. Account deletion and retention

You can initiate an account deletion request within either app or contact hr@courierexpressmalta.com for help requesting deletion. Please identify the app and the email address or telephone number associated with the account. Do not send your password or verification codes.

Once an account deletion request is processed, the account is deactivated. Associated personal account data is deleted from production systems after a period of 30 days during which the account remains unused. If the account is used or reactivated during that period, a new deletion request is needed to begin a new 30 day deletion period.

Removing the app from your phone does not delete your account. Deactivation alone is not completed deletion. Removing a driver account does not necessarily remove delivery records that must be retained for a separate lawful purpose.

Records may need to be retained for legal obligations, security or unresolved claims. The period depends on the record and the applicable purpose. We can explain any applicable retention when handling your request.

The mobile apps do not maintain a separate backup of user data. Deletion from production systems does not establish that every server backup or external service record is removed at the same time. External services may retain records under their applicable retention and deletion policies. Logging out or detaching an account identifier does not necessarily delete all records held by that service. Contact us for information about records relevant to your request.

8. Your rights

Depending on the circumstances, you may request access, correction, deletion, restriction or a portable copy of your information, or object to processing. You may withdraw consent where processing depends on it. These rights are subject to applicable conditions and exceptions.

Send requests to hr@courierexpressmalta.com. We may request proportionate information to verify your identity. We will respond within the time required by applicable law and explain any permitted extension or limitation.

You may complain to Malta's Information and Data Protection Commissioner or another competent supervisory authority. You do not have to contact us first to exercise that right.

9. Security and changes

Protect your account details, keep your device updated and contact us if you suspect misuse. No system can guarantee absolute security. The customer app supports delivery customers and recipients, and the driver app is for authorised drivers. Contact our privacy address if you believe a child's information has been supplied inappropriately.

The published policy will display its revision date. Material changes will be communicated where required.