Privacy Notice

Parcelza ("Parcelza", "we", "us") operates the Parcelza delivery tracking platform. Parcelza is the legal name, registered business name, and trading name of the business that owns and operates the platform, based in South Africa.

For the personal data described in this notice, Parcelza is the data controller — we decide how and why your data is processed. You can contact us about your data through the support contact details on our site.

• Account data: name, email address, login credentials, business name.
• Operational data you enter: orders, customer names, delivery addresses, customer contact details, driver details, proof-of-delivery photos and notes.
• Location data: driver GPS positions while a driver has tracking active.
• Support messages: anything you send us when asking for help.
• Usage and device data: IP address, device/browser identifiers, and product usage telemetry.

• Providing the service (accounts, dispatch, tracking, notifications) — performance of our contract with you.
• Security and fraud prevention — our legitimate interest in keeping the platform safe.
• Product improvement — our legitimate interest in understanding usage to improve Parcelza.
• Customer support — performance of our contract and legitimate interests.
• Marketing — only with your consent, which you can withdraw at any time.
• Legal obligations — where we must keep or disclose records by law.

• Service providers/subprocessors: hosting, database, analytics, and support tooling providers that process data on our behalf.
• Merchant of Record (Paddle): for the sale of subscriptions, payment processing, tax compliance, and invoicing. Paddle processes payment data under its own privacy terms; we never see your full card details.
• Professional advisers: legal and accounting advisers where needed.
• Authorities: where disclosure is required by law.

Some of our service providers process data outside South Africa, the UK, or the EEA. Where data leaves these regions, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

We keep personal data only as long as needed for the purposes above. When it is no longer needed, it is deleted or anonymised. Account data is kept while your account is active and for a reasonable period afterwards for legal and accounting purposes.

Depending on your location, you may have the right to access, correct, delete, restrict, or port your personal data, to object to processing, and to withdraw consent at any time. You also have the right to complain to your data protection authority. To exercise any of these rights, contact us — we respond within one month.

We apply appropriate technical and organisational measures, including encryption in transit, access controls, and row-level data isolation between businesses on the platform.

We use essential cookies required for sign-in and security. If we add analytics or marketing cookies, we will ask for your consent and you can manage preferences at any time through your browser settings.