Privacy policy

1. Who we are

WideVan Pte. Ltd. ("WideVan", "we") operates the delivery management platform at widevan.com and the WideVan driver application (together, the "Service"). We are registered in Singapore. For privacy matters, contact privacy@widevan.com.

2. Our roles

We act as a data controller for information about visitors to our website and about the people who create and administer customer accounts. We act as a data processor for the personal data our customers upload or generate through the Service about their own drivers, staff and delivery recipients. For processor activities, the customer is the controller and our data processing agreement applies.

3. Data we collect

As controller

• Account details: name, work email, company name, billing information and plan.
• Website usage: pages visited, device and browser type, approximate location from IP address, collected through first-party analytics.
• Communications: messages you send through the contact form or by email.

As processor, on behalf of customers

• Driver data: name, PIN-based login, live vehicle location while a shift is active, vehicle checks, incident reports and SOS events.
• Delivery recipient data: name, address, contact details, time windows and delivery notes.
• Proof of delivery: photograph, signature, timestamp and GPS coordinates.
• Stock and order data, including data synced from connected online shops.

4. How we use data

• To provide, secure and support the Service, including route calculation and live tracking.
• To bill customers and communicate about the account.
• To improve the Service using aggregated, de-identified usage data.
• To meet legal obligations and respond to lawful requests.

We do not sell personal data and we do not use customer data to train models or for advertising.

5. Legal bases (GDPR)

Where the GDPR applies, we rely on: performance of a contract (providing the Service); legitimate interests (security, fraud prevention, product improvement); consent (optional analytics cookies and marketing email); and legal obligation. Customers are responsible for establishing a lawful basis for the data they process about drivers and recipients.

6. Location tracking

Driver location is collected only while a driver is signed in and a shift is active. Location collection stops when the driver signs out or ends the shift. Customers must inform drivers that tracking occurs during working hours.

7. Where data is stored

Customers choose a data region at signup. Currently available regions are Singapore and the European Union. Data is encrypted in transit (TLS 1.2 or higher) and at rest (AES-256) and backed up daily. Where data must move between regions, for example to provide support, we use standard contractual clauses or equivalent safeguards.

8. Retention

Customer data is retained for the life of the account and deleted within 30 days of account closure, except where law requires longer retention. Proof of delivery records are retained by default for 7 years to support dispute resolution, unless the customer configures a shorter period. Website analytics are retained for 14 months.

9. Sub-processors

We use a small number of infrastructure, payment and email providers to run the Service. A current list is available on request. Each is bound by written terms that require equivalent protection.

10. Your rights

Depending on your location you may have the right to access, correct, delete, restrict or port your personal data, and to object to processing. Where we are a processor, please direct your request to the customer (your employer or the business that delivered to you); we will assist them. Otherwise, email privacy@widevan.com. You may also complain to the Personal Data Protection Commission of Singapore or your local supervisory authority.

11. Cookies

We use strictly necessary cookies to keep you signed in and, with consent, first-party analytics cookies. We do not use third-party advertising cookies.

12. Children

The Service is for businesses and is not directed at anyone under 18.

13. Changes

We will post changes on this page and, for material changes, notify account owners by email at least 14 days before they take effect.