Legal

Privacy Policy

Last updated June 04, 2026

This Privacy Notice for On My Route Limited (doing business as OnMyRoute) ('we', 'us', or 'our') describes how and why we might access, collect, store, use, and/or share ('process') your personal information when you use our services ('Services'), including when you:

  • Visit our website at onmyroute.co.nz or any website of ours that links to this Privacy Notice
  • Download and use our mobile application (On My Route)
  • Engage with us in other related ways, including any sales, marketing, or events

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you have any questions or concerns, please contact us at privacy@onmyroute.co.nz.


Summary of Key Points

What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use.

Do we process any sensitive personal information? We do not intentionally collect highly sensitive personal information as part of our core service, although some information you provide to us may be sensitive in context, such as exact location, address, or dispute-related information.

Do we collect any information from third parties? We may receive limited information from third-party service providers you choose to use with our Services, such as authentication providers, payment providers, analytics providers, or other technical service providers that help us operate the platform.

How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.

How do we keep your information safe? We have organisational and technical processes and procedures in place to help protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure.

What are your rights? Depending on where you are located and the laws that apply to you, you may have certain rights regarding your personal information.

How do you exercise your rights? Contact us at privacy@onmyroute.co.nz. We will consider and act upon any request in accordance with applicable privacy and data protection laws.


Table of Contents

  1. What Information Do We Collect?
  2. How Do We Process Your Information?
  3. When and With Whom Do We Share Your Personal Information?
  4. Do We Use Cookies and Other Tracking Technologies?
  5. How Do We Handle Social Logins?
  6. How Long Do We Keep Your Information?
  7. How Do We Keep Your Information Safe?
  8. Do We Collect Information From Minors?
  9. What Are Your Privacy Rights?
  10. Controls for Do-Not-Track Features
  11. Do Other Regions Have Specific Privacy Rights?
  12. Location and Delivery Information
  13. Payments and Dispute Handling
  14. Do We Make Updates to This Notice?
  15. How Can You Contact Us About This Notice?
  16. How Can You Review, Update, or Delete the Data We Collect From You?

1. What Information Do We Collect?

Personal information you disclose to us

In short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, create or manage an account, post or claim delivery jobs, contact us, request support, or otherwise interact with the Services.

The personal information we collect may include:

  • Names
  • Phone numbers
  • Email addresses
  • Mailing addresses and delivery-related addresses
  • Usernames and passwords
  • Profile information, account preferences, and communications you send through the platform
  • Payment-related information necessary to process transactions

Sensitive information. We do not intentionally collect highly sensitive personal information as part of our core service. However, some information you provide may be sensitive in context, such as exact addresses, route details, communications, or dispute information.

Payment data. We may collect data necessary to process your payment, such as transaction information and limited payment-related details. All payment data is handled and stored by Stripe. You can review their privacy practices at stripe.com/privacy. We do not store full payment card details on our own servers.

Social login data. If we offer sign-in through a third-party provider such as Google, and you choose to use it, we may receive certain profile information from that provider, such as your name, email address, and profile picture, as permitted by your settings with that provider and as described in Section 5 below.

Application data

If you use our mobile application, we may also collect the following if you grant permission:

  • Geolocation information. We may request access to location-based information from your mobile device to provide location-based services such as route matching. You can change this permission in your device settings.
  • Mobile device access. We may request access to certain features such as your camera and storage. You can change these permissions in your device settings.
  • Mobile device data. We may automatically collect device information such as device model, operating system, browser type, IP address, and app configuration details for security, troubleshooting, and analytics purposes.
  • Push notifications. We may request to send you push notifications about your account, deliveries, or features of the app. You can opt out in your device settings.

Information automatically collected

In short: Some information — such as your IP address and browser characteristics — is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This may include your IP address, browser and device characteristics, operating system, language preferences, referring URLs, and information about how and when you use our Services. This information does not usually reveal your specific identity by itself, but may still be personal information under applicable law.

We also collect information through cookies and similar technologies — see our Cookie Policy for details.

  • Log and usage data. Includes IP address, device information, browser type, activity timestamps, pages and files viewed, searches, and other actions taken within our Services.
  • Device data. Includes your device model, operating system, browser type, and system configuration.
  • Location data. We may collect your device's general location based on your IP address and, if you grant permission, more precise location data such as GPS. You can opt out by disabling location settings on your device.

Information collected from other sources

In short: We may receive limited information from third-party service providers connected to our Services.

We may receive limited information about you from third-party service providers you choose to use with our Services, such as authentication providers, payment providers, analytics services, or other technical service providers that help us operate, secure, and improve the platform.


2. How Do We Process Your Information?

In short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.

We process your personal information for the following reasons:

  • To facilitate account creation, authentication, and account management.
  • To deliver and facilitate the delivery of services to you.
  • To respond to your enquiries and provide support.
  • To send you administrative information, including changes to our terms and policies.
  • To fulfil and manage orders, payments, and related transactions.
  • To enable user-to-user communications within the platform.
  • To protect our Services through fraud monitoring and prevention.
  • To evaluate and improve our Services, products, and user experience.
  • To identify usage trends so we can better understand and improve the platform.
  • To comply with our legal obligations and respond to legal requests.
  • To verify accounts, prevent fraud, and maintain marketplace trust and safety.

3. When and With Whom Do We Share Your Personal Information?

In short: We may share information in specific situations with the following categories of third parties.

We may share your data with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf. We take steps designed to require them to protect your personal information and to use it only for the services they provide to us.

Categories of third parties we may share information with:

  • Cloud computing and website hosting providers
  • Data analytics services
  • Data storage providers
  • Payment processors (such as Stripe)
  • User account registration and authentication services
  • Communication and collaboration tools

We may also share your information in these situations:

  • Business transfers. We may share or transfer your information in connection with any merger, sale of company assets, financing, or acquisition of all or part of our business.
  • Other users. When you interact with other users or post content on the platform, certain profile and delivery-related information may be visible to other users where reasonably necessary for the service. If you choose to register through a supported third-party sign-in provider, certain information made available by that provider may also be used in connection with your account.

4. Do We Use Cookies and Other Tracking Technologies?

In short: We may use cookies and other tracking technologies to collect and store your information.

We may use cookies and similar tracking technologies (such as web beacons and pixels) to gather information when you interact with our Services. These help us maintain security, prevent crashes, fix bugs, save your preferences, and assist with site functionality and analytics.

We may also permit third-party service providers to use tracking technologies on our Services for analytics purposes. For full details, see our Cookie Policy.


5. How Do We Handle Social Logins?

In short: If you register or log in using a supported third-party sign-in provider, we may receive certain profile information.

If we offer sign-in through a supported third-party provider such as Google, and you choose to use it, we may receive certain profile information from that provider — typically your name, email address, and profile picture. We will use this information only as described in this Privacy Notice. We do not control how the provider uses your information, and we recommend reviewing its privacy policy.


6. How Long Do We Keep Your Information?

In short: We keep your information for as long as necessary to fulfil the purposes outlined in this Privacy Notice unless otherwise required by law.

We will only retain your personal information for as long as it is necessary for the purposes set out in this notice, unless a longer retention period is required or permitted by law (such as for tax, accounting, dispute, fraud prevention, or other legal requirements). When we no longer have a legitimate business need to process your information, we will either delete or anonymise it. If deletion is not immediately possible (for example, data stored in backup archives), we will securely isolate it until deletion is possible.


7. How Do We Keep Your Information Safe?

In short: We aim to protect your personal information through a system of organisational and technical security measures.

We have implemented technical and organisational security measures designed to protect the security of any personal information we process. We also use third-party providers, such as Stripe, to process payment information securely. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure. While we do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.


8. Do We Collect Information From Minors?

In short: No. The Services are intended only for people aged 18 and over.

We do not knowingly collect, solicit, or market to anyone under 18 years of age. You must be at least 18 years old to use the Services. If we learn that personal information from someone under 18 has been collected, we will deactivate the account and take reasonable steps to delete the data. If you become aware of any such data, please contact us at privacy@onmyroute.co.nz.


9. What Are Your Privacy Rights?

In short: You may review, change, or terminate your account at any time, and you may have rights to access or correct your personal information depending on the laws that apply to you.

Withdrawing your consent. If we are relying on your consent to process your personal information, you have the right to withdraw that consent at any time by contacting us using the details in Section 15. Please note this will not affect the lawfulness of processing that occurred before withdrawal.

Account information

You may review or change your account information at any time by logging in to your account settings. Upon requesting account termination, we will deactivate or delete your account and information from our active databases. We may retain some information where reasonably necessary to prevent fraud, troubleshoot issues, assist with investigations, enforce our legal terms, resolve disputes, or comply with applicable legal requirements.

Cookies. You can set your browser to remove or reject cookies, though this may affect certain features of our Services. See our Cookie Policy for more information.

If you have questions about your privacy rights, email us at privacy@onmyroute.co.nz.


10. Controls for Do-Not-Track Features

Most web browsers and some mobile operating systems include a Do-Not-Track ('DNT') feature you can activate to signal your preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognising and implementing DNT signals has been finalised. As such, we do not currently respond to DNT browser signals. If a standard is adopted in the future that we must follow, we will update this Privacy Notice accordingly.


11. Do Other Regions Have Specific Privacy Rights?

New Zealand

We collect and process your personal information in accordance with New Zealand's Privacy Act 2020. This Privacy Notice is intended to satisfy the notice requirements under that Act, including what personal information we collect, from which sources, for which purposes, and who else may receive it.

If you do not provide personal information necessary for our services, it may affect our ability to:

  • Offer you the products or services you want
  • Respond to or help with your requests
  • Manage your account
  • Confirm your identity and protect your account

You have the right to request access to or correction of your personal information at any time. If you believe we are unlawfully processing your personal information, you have the right to submit a complaint to the Office of the New Zealand Privacy Commissioner.


12. Location and Delivery Information

Because our platform helps users arrange deliveries, we may collect and use pickup and drop-off information, route details, and related communications to facilitate bookings, improve matching, support dispute resolution, protect users, and maintain the safety and integrity of the platform. We limit access to this information to what is reasonably necessary for the service.


13. Payments and Dispute Handling

Where payments are processed through third-party providers, we may use transaction-related information to process payments, investigate fraud, resolve disputes, enforce our terms, and comply with legal and regulatory obligations.


14. Do We Make Updates to This Notice?

In short: Yes, we will update this notice as necessary to stay compliant with relevant laws and reflect changes to our Services.

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated date at the top of this notice. If we make material changes, we may notify you by posting a prominent notice or sending you a direct notification. We encourage you to review this Privacy Notice regularly.


15. How Can You Contact Us About This Notice?

If you have questions or comments about this notice, you may email us at privacy@onmyroute.co.nz, use our contact form, or write to us at:

On My Route Limited
[Insert street address]
[Insert city, postcode]
New Zealand

16. How Can You Review, Update, or Delete the Data We Collect From You?

Based on applicable law, you may have the right to request access to the personal information we collect from you, details about how we have processed it, request corrections, or request deletion. You may also have the right to withdraw your consent to our processing of your personal information, where consent is the legal basis relied on. These rights may be limited in some circumstances by applicable law.

To exercise any of these rights, please contact us at privacy@onmyroute.co.nz.

Your rights

Submit a Privacy Request

Under the New Zealand Privacy Act 2020 you have the right to access, correct, or request deletion of your personal data. Use this form to submit a request directly to our privacy team.

This request will be sent to privacy@onmyroute.co.nz. We will respond within 20 working days in accordance with the NZ Privacy Act 2020.