-
(Compliant with IT Act, 2000 & DPDP Act, 2023)
This Privacy Policy describes how VCO Job, having its registered office at No.903, 80 Feet Rd, 6th Block, Koramangala, Bengaluru, Karnataka – 560095 (“Company”, “Platform”, “we”, “us”, or “our”), collects, processes, stores, uses, shares, and protects Personal Data of individuals registering or operating on the Platform as Delivery Partners / Delivery Personnel / Delivery Boys.
Delivery Partners are hereinafter referred to as “Delivery Partners” or “Data Principals”, as defined under the Digital Personal Data Protection Act, 2023.
By registering, accessing, or using the Platform, you freely, specifically, informedly, unconditionally, and unequivocally consent to the processing of your Personal Data in accordance with this Privacy Policy.
LEGAL BASIS & APPLICABILITY
This Privacy Policy is issued pursuant to:- • Section 43A of the Information Technology Act, 2000
- • IT (Reasonable Security Practices & SPDI) Rules, 2011
- • Digital Personal Data Protection Act, 2023 (India)
Vendors, Professionals, and Customers are governed by separate privacy policies. -
DEFINITIONS (DPDP ACT COMPLIANT)
-
Identity & Contact Data
- • Full name.
- • Mobile number
- • Email address
- • Photograph
- • Date of birth / age verification
- • Residential address
-
KYC & Eligibility Data
- • Government-issued ID (Aadhaar, PAN, Driving License, etc.)
- • Vehicle details (if applicable)
- • Age and eligibility verification
- • Background or verification records (where legally permissible)
-
Financial & Tax Data
- • Bank account details for payouts
- • PAN (if applicable)
- • Earnings, incentives, penalties, and settlement records
Note: Debit/credit card details are not stored. Payments are processed through RBI-compliant third-party payment gateways.
-
Location Data (Delivery Partners Only)
-
Live Location During Active Deliveries:
Real-time GPS location from pickup to delivery completion. -
The Platform may collect and process the following location-related information:
Location data of vendors, warehouses, and customer delivery points. -
Route & ETA Information:
Used for route optimization, delivery tracking, and customer updates. -
Safety & Incident Management:
Location data used for rider safety, emergency assistance, fraud detection, and dispute resolution.
Important:
The Platform may collect and process the following location-related information:
Live location tracking is enabled only during an active delivery, with explicit consent, and is automatically disabled once the delivery is completed.-
Technical & Usage Data
- • IP address
- • Device identifiers
- • App usage logs
- • Crash diagnostics
-
PURPOSE OF PROCESSING OF PERSONAL DATA
(Section 6, Digital Personal Data Protection Act, 2023)
VCO Job processes Personal Data of Delivery Partners only for specific, lawful, necessary, and clearly defined purposes, in accordance with Section 6 of the DPDP Act and the principles of purpose limitation and data minimization.
A. Onboarding & Eligibility Verification- • Identity, Selfie and KYC verification
- • Driving license and vehicle verification (if applicable)
- • Age and eligibility checks
- • Allocation of delivery tasks
- • Sharing pickup and drop details
- • Coordinating successful delivery completion
- • Real-time tracking during active deliveries
- • Route optimization and ETA calculation
- • Customer and vendor coordination
- • Processing delivery fees, incentives, and penalties
- • Bank settlements and payout reconciliation
- • Tax and statutory compliance
- • Rider safety monitoring and emergency response
- • Fraud detection and misuse prevention
- • Responding to lawful requests from authorities
- • Delivery notifications and alerts
- • Customer support and dispute resolution
- • Policy and operational communications
-
CONSENT & LAWFUL BASIS
Processing of Personal Data is carried out:- • With explicit consent obtained during onboarding and through in-app permissions; and/or
- • As a legitimate use necessary for delivery operations, contractual performance, and legal compliance under the DPDP Act, 2023.
-
DISCLOSURE & DATA SHARING
Personal Data is shared strictly on a need-to-know basis, including:-
With Customers
- • Delivery partner name and profile photo
- • Order status and delivery confirmation
- • Live location during active delivery (only when required)
-
With Group Entities & Associated Organizations
- • Group companies, sister concerns, and affiliates
- • NGOs and Co-operative Societies
- • Private Limited Companies, LLPs, Partnership Firms, Proprietorships
- • Franchisees, fleet partners, and authorized representatives
- • Logistics partners, vendors, and subcontractors
- • Branch offices, associates, and operational units Purpose Limitation:
Personal Data may be shared with:
Data sharing is limited to onboarding, delivery execution, payments, safety, compliance, grievance handling, and legal obligations.-
With Data Processors
- • Payment gateways
- • Cloud hosting providers
- • Communication service providers (SMS, Email, Push Notifications)
-
With Government / Legal Authorities
- • Where required by law, court order, or statutory obligation Personal Data is not sold, rented, or shared for independent marketing purposes without explicit consent.
-
DATA SECURITY
The Company implements reasonable security practices, including:- • Encryption at rest and in transit
- • Secure servers and access controls
- • Periodic security audits
- • Role-based access restrictions Despite safeguards, no system can guarantee absolute security.
-
DATA RETENTION & ERASURE
- • Data is retained while the Delivery Partner account is active
- • Retained longer only if required by law (taxation, disputes, audits)
- • Upon request, data is erased or anonymized unless legally required otherwise
-
RIGHTS OF DATA PRINCIPALS (DPDP ACT)
Delivery Partners have the right to:- • Access personal data
- • Correct or update inaccurate data
- • Withdraw consent
- • Request data erasure
- • Nominate another person to exercise rights
- • File grievances or complaints
-
CONFIDENTIALITY OBLIGATIONS
Delivery Partners must:- • Use customer data strictly for delivery fulfilment
- • Not store, misuse, sell, or disclose customer data
- • Maintain confidentiality at all times
-
PLATFORM VS DELIVERY PARTNER DATA ROLE DISCLAIMER
- Delivery Partners act as independent contractors and do not function as Data Fiduciaries for customer Personal Data collected by the Platform. Processing by Delivery Partners shall be limited strictly to delivery fulfilment and governed by applicable data protection laws.
-
AGE RESTRICTION
- Only individuals 18 years and above may register as Delivery Partners.
-
CROSS-BORDER DATA TRANSFER
Data may be processed or stored outside India only in compliance with:- • Digital Personal Data Protection Act, 2023
- • Government-notified permitted jurisdictions
-
POLICY UPDATES
- This Policy may be updated periodically. Updates will be notified via the Platform. Continued usage constitutes acceptance.
-
GRIEVANCE REDRESSAL
- Grievance Officer: Praveen
- Email: info@vcojob.com
- Address: 903, 80 Feet Rd, 6th Block, Koramangala, Bengaluru – 560095
- Grievances will be acknowledged within 48 hours and resolved within statutory timelines.