Privacy Policy

Last updated: December 2024

1. Introduction

Voala AB ("Voala", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our same-day delivery services and website.

We are based in Karlstad, Sweden, and comply with the General Data Protection Regulation (GDPR) and Swedish data protection laws.

2. Information We Collect

Personal Information

When you use our services, we may collect:

• Name and contact information (email, phone number)
• Pickup and delivery addresses
• Payment information (processed securely through our payment providers)
• Company information for business accounts
• Communication records with our support team

Technical Information

We automatically collect:

• IP address and browser type
• Device information
• Usage data and analytics
• Cookies and similar tracking technologies

Location Data

For delivery tracking purposes, we collect location data from our drivers during active deliveries. This enables real-time tracking for our customers.

3. How We Use Your Information

We use your information to:

• Process and fulfill delivery orders
• Provide real-time tracking and delivery updates
• Process payments and manage billing
• Communicate with you about your orders and our services
• Improve our services and develop new features
• Ensure security and prevent fraud
• Comply with legal obligations

4. Legal Basis for Processing

Under GDPR, we process your data based on:

• Contract performance: To fulfill our delivery services
• Legitimate interests: To improve our services and prevent fraud
• Legal obligation: To comply with applicable laws
• Consent: For marketing communications (where applicable)

5. Data Sharing

We may share your information with:

• Delivery drivers: Name, addresses, and contact details necessary for delivery
• Payment processors: To process secure payments
• Service providers: Who help us operate our business
• Legal authorities: When required by law

We do not sell your personal information to third parties.

6. Data Retention

We retain your personal data only as long as necessary to provide our services and fulfill the purposes described in this policy. Order records are kept for 7 years to comply with Swedish accounting requirements. You can request deletion of your account at any time.

7. Your Rights

Under GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate information
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we use your data
• Portability: Receive your data in a portable format
• Object: Object to certain processing activities
• Withdraw consent: Where processing is based on consent

To exercise these rights, contact us at privacy@voala.se.

8. Cookies

We use cookies to improve your experience on our website. Essential cookies are necessary for the website to function. Analytics and marketing cookies help us understand usage and improve our services. You can manage cookie preferences through your browser settings or our cookie consent tool.

9. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption, access controls, and regular security assessments.

10. International Transfers

Your data is primarily processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

11. Children's Privacy

Our services are not intended for children under 16. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us:

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) if you believe your rights have been violated.