GDPR

Under the General Data Protection Regulation, DropProof may act as a data controller for website, account, sales, and support information. When customers submit driver, recipient, order, tracking, or proof-of-delivery data, DropProof generally acts as a data processor on the customer's documented instructions.

Where DropProof acts as a controller, we process personal data only when a lawful basis applies.

• Contract: to provide accounts, subscriptions, support, and requested services.
• Legitimate interests: to secure, maintain, analyze, and improve DropProof without overriding individual rights.
• Consent: for optional cookies or communications where consent is required and can be withdrawn.
• Legal obligation: to satisfy applicable tax, accounting, security, regulatory, and law-enforcement duties.

Subject to applicable conditions and exemptions, individuals in the EEA and UK may exercise the following rights:

• Access personal data and receive information about how it is processed.
• Correct inaccurate or incomplete personal data.
• Request deletion, restriction, or portability of eligible personal data.
• Object to processing based on legitimate interests or direct marketing.
• Withdraw consent at any time without affecting earlier lawful processing.
• Complain to the relevant data protection supervisory authority.

When personal data is transferred outside the EEA or UK, we use appropriate safeguards where required, such as adequacy decisions, approved standard contractual clauses, and supplementary technical or organizational measures.

We assess service providers that process personal data and require appropriate confidentiality, security, and data protection commitments. We use measures designed to protect data against unauthorized access, alteration, loss, or disclosure.

If a personal data breach creates a notification obligation, DropProof will notify the appropriate customer or authority within the time required by applicable law.

To exercise GDPR rights or ask a data protection question, email dropproof2026@gmail.com. If DropProof processes your information for one of our customers, we may direct your request to that customer as the responsible controller.