Privacy Policy
How Drop handles personal information.
This Privacy Policy explains how Drop South Africa collects, uses, stores, shares, and protects personal information across the Drop website, merchant surfaces, driver surfaces, and related operational systems.
Last updated: 19 March 2026
Drop South Africa processes personal information in line with applicable South African law, including the Protection of Personal Information Act, 2013 (POPIA). In this policy, "Drop", "we", "our", or "us" refers to Drop South Africa and the services we operate.
1. Information we collect
Contact and account information, including names, email addresses, phone numbers, company details, and login credentials.
Merchant operational information, including store details, order details, webhook endpoints, and developer configuration.
Driver-related information, including identity, contact details, vehicle information, delivery activity, and location data used for operational dispatch and trip-state management.
Device, browser, usage, log, and diagnostic information collected when you use the website, portal, console, API, or mobile surfaces.
Communications and support information when you contact Drop, submit forms, request onboarding, or engage with operations support.
2. How we use personal information
To provide, operate, secure, and improve the Drop platform and related services.
To onboard merchants, drivers, partners, and operational users.
To authenticate users, issue credentials, enforce account security, and prevent fraud or abuse.
To create, route, track, reconcile, and support deliveries and related operational events.
To communicate service updates, onboarding steps, security notices, legal notices, and support responses.
To comply with legal, regulatory, audit, record-keeping, and enforcement requirements.
3. When we share information
With service providers and infrastructure vendors who help us host, monitor, secure, or support the platform, subject to appropriate safeguards.
Between relevant Drop products and operational teams where necessary to fulfill deliveries, support users, investigate incidents, or manage accounts.
With merchants, drivers, partners, or recipients only to the extent reasonably necessary to fulfill a delivery or support a platform workflow.
With regulators, courts, law enforcement, or professional advisers where disclosure is required or reasonably necessary under law.
In connection with a restructuring, acquisition, financing, or sale of all or part of our business, subject to lawful handling of personal information.
4. Driver and location data
If you use Drop as a driver, we may process location information, trip progression signals, and related device data to support dispatch, route awareness, proof of service, fraud prevention, safety review, and delivery completion workflows.
Location-related data may continue to be processed while an active delivery workflow requires it. Drivers should not use the platform if they do not agree to operational location processing that is reasonably necessary for delivery services.
5. Cookies and website analytics
The public website may use cookies or similar technologies for essential site operation, session continuity, analytics, performance, and security purposes.
Where non-essential technologies are introduced later, Drop should implement appropriate notice and consent handling before relying on them where required by law.
6. Retention and security
We retain personal information only for as long as reasonably necessary for platform operation, support, audit, dispute management, legal compliance, fraud prevention, and legitimate business record-keeping.
Drop uses technical and organisational measures intended to protect personal information against loss, misuse, unauthorised access, disclosure, alteration, and destruction. No system can be guaranteed to be completely secure.
7. Your rights
Subject to applicable law, you may request access to personal information we hold about you, request correction of inaccurate information, object to certain processing, or request deletion where retention is no longer justified.
Where we rely on consent for a specific processing activity, you may withdraw that consent prospectively, subject to legal and operational limitations.
Identity verification may be required before we act on a request.
8. Complaints and regulator contact
If you have a privacy concern, contact Drop first at privacy@dropsa.co.za or support@dropsa.co.za so we can investigate.
You may also lodge a complaint with the Information Regulator (South Africa), which is the independent body established under POPIA. The Information Regulator publishes contact information and complaint channels on its official website.
9. Contact Drop
Privacy questions: privacy@dropsa.co.za
General support: support@dropsa.co.za
Website and commercial contact: sales@dropsa.co.za
