Back to home

Privacy Policy

BEKIRIM PRIVACY POLICY Last Updated: August 2026 Website: https://bekirim.com INTRODUCTION Bekirim ("We", "Us", "Our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our mobile application, website, and services (collectively, the "Service"). Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Service. GOVERNING LAW This Privacy Policy is governed by the Personal Data Protection Act (BDPA) of Brunei Darussalam and applicable Brunei law. --- SECTION 1: INFORMATION WE COLLECT 1.1 PERSONAL INFORMATION YOU PROVIDE We collect the following personal information when you register and use our Service: CUSTOMERS - Full name - Email address - Phone number - Residential address or delivery address - Payment information (bank account details, Digital Wallet activity) - Profile information (photo, preferences) - Communication history with Drivers DRIVERS - Full name - Email address - Phone number - Home address - Driver's license number and expiry date - Vehicle information (make, model, registration, insurance details) - Bank account information for payment withdrawal - Insurance provider and policy details - Payment and withdrawal history - Communication history with Customers BOTH CUSTOMERS AND DRIVERS - Account preferences and settings - Device information (if using mobile app) - Support and complaint history 1.2 INFORMATION COLLECTED AUTOMATICALLY We automatically collect: - Location data (GPS coordinates, route information) while the app is active or in use - Device identifiers (device type, operating system, app version) - Usage analytics (pages visited, features used, time spent on app, error logs) - IP address and internet service provider information - Browser type and version (for web users) - Interaction logs (delivery requests, acceptances, cancellations) 1.3 INFORMATION FROM THIRD PARTIES We may receive information from: - Payment processors (transaction details, verification status) - Mapping services (Google Maps - location services) - Communication platforms used for support 1.4 SENSITIVE INFORMATION We collect and process the following sensitive data: - Driver's license information - Vehicle insurance details - Payment information - Location data (Drivers especially) --- SECTION 2: HOW WE USE YOUR INFORMATION 2.1 PERSONAL INFORMATION USAGE We use your personal information to: - Create and maintain your account - Verify your identity and eligibility - Process payments and manage Digital Wallet transactions - Facilitate deliveries and communicate with Drivers/Customers - Verify manual bank transfers and payment transactions - Provide customer support and resolve disputes - Comply with legal and regulatory obligations - Send service-related notifications and updates - Detect and prevent fraud - Improve and optimize the Service - Conduct research and analytics - Enforce our Terms and Conditions 2.2 LOCATION DATA USAGE For Drivers: - Display real-time location on the app map - Calculate delivery routes and optimize efficiency - Track delivery completion and verify service - Ensure Driver safety and accountability - Provide location-based delivery features For Customers: - Verify delivery location - Display Driver location for delivery tracking - Optimize delivery routes 2.3 MARKETING AND COMMUNICATIONS We may use your email and phone number to: - Send service updates and announcements - Notify you of new features or promotions - Request feedback and conduct surveys - Contact you regarding account issues You may opt out of marketing communications at any time by updating your account preferences. 2.4 ANALYTICS AND IMPROVEMENT We use non-personal analytics data to: - Understand user behavior and preferences - Improve app performance and features - Analyze trends and usage patterns - Debug and fix technical issues - Enhance user experience --- SECTION 3: INFORMATION SHARING AND DISCLOSURE 3.1 DRIVER AND CUSTOMER INFORMATION SHARING - Customers' delivery addresses are shared with the Driver accepting the delivery - Drivers' vehicle information and location is shared with Customers during delivery - Phone numbers may be shared to facilitate communication (subject to user preferences) - Names are shared for identification purposes 3.2 THIRD-PARTY SERVICE PROVIDERS We share information with third parties who assist us: SUPABASE (Database Provider) - Your personal data and transaction records are stored on Supabase servers - Supabase processes data as per our data processing agreement - Your data is encrypted and secured by Supabase GOOGLE MAPS - Location data and delivery addresses are sent to Google Maps API for routing - Google processes location data according to its own privacy policy - We do not store your data on Google's servers; it is used for real-time routing only LOVABLE PLATFORM - App infrastructure is hosted on the Lovable platform - Lovable may have access to usage logs and app performance data - Lovable complies with data protection requirements PAYMENT PROCESSING - Bank details and transaction information required for manual verification - Admin staff verify payment transactions manually - Payment data is not stored longer than necessary for verification 3.3 LEGAL REQUIREMENTS We may disclose your information: - To comply with Brunei law or legal processes - To enforce our Terms and Conditions - To protect our rights, privacy, safety, or property - To protect against fraud or security threats - When required by government or law enforcement 3.4 BUSINESS TRANSFERS If Bekirim is acquired, merges with another entity, or undergoes restructuring: - Your personal data may be transferred as part of that transaction - We will notify you of any such changes 3.5 WITH YOUR CONSENT We will not share your information for purposes other than those listed above without your explicit consent. --- SECTION 4: DATA RETENTION 4.1 RETENTION PERIODS We retain your personal information for the following periods: ACTIVE ACCOUNTS - Retained for the duration of your account INACTIVE/DELETED ACCOUNTS - Retained for 3 years after account closure or deletion - After 3 years, data is securely deleted (except where required by law) PAYMENT RECORDS - Retained for 3 years for audit and compliance purposes - Tax and financial records retained as required by Brunei law LOCATION DATA - Retained while delivery is in progress - Deleted upon delivery completion (except for dispute resolution) - Retained for 90 days if disputes are pending CUSTOMER SUPPORT RECORDS - Retained for 1 year after resolution - Longer if required for dispute resolution 4.2 LEGAL HOLDS If you are subject to a legal hold or dispute, we retain your data until the matter is resolved. 4.3 SECURE DELETION When data is deleted, it is securely and permanently removed from our systems. --- SECTION 5: DATA SECURITY 5.1 SECURITY MEASURES We implement the following security practices: - Encrypted transmission of sensitive data (HTTPS) - Secure password hashing and storage - Access controls limiting employee access to personal data - Regular security monitoring and updates - Secure deletion of data when no longer needed - Encryption of data at rest on Supabase servers 5.2 LIMITATIONS While we take reasonable security measures: - No system is 100% secure - Users are responsible for keeping passwords confidential - We are not liable for data breaches caused by user negligence - Third-party service providers (Supabase, Google Maps) have their own security measures 5.3 DATA BREACH NOTIFICATION If a data breach occurs that affects your personal information: - We will investigate the breach - We will notify affected users as soon as practicable - We will comply with Brunei law notification requirements - We will provide guidance on protective measures --- SECTION 6: USER RIGHTS 6.1 RIGHT TO ACCESS You have the right to: - Request access to your personal data - Obtain a copy of your data in a readable format - Submit a request via email to [INSERT CONTACT EMAIL] - Receive a response within 30 days 6.2 RIGHT TO CORRECTION You have the right to: - Correct inaccurate or incomplete information - Update your personal data through your account settings - Request corrections via our support team 6.3 RIGHT TO DELETION You have the right to: - Request deletion of your personal data - Have your account and associated data removed - Submit a deletion request via email - Receive confirmation within 30 days - Note: Some data may be retained for legal or contractual reasons 6.4 RIGHT TO DATA PORTABILITY You have the right to: - Receive your personal data in a structured format - Transfer your data to another service - Request a data export through your account 6.5 RIGHT TO WITHDRAW CONSENT You have the right to: - Withdraw consent for data processing at any time - Opt out of marketing communications - Disable location sharing (if the feature allows) - Contact us to exercise this right 6.6 EXERCISING YOUR RIGHTS To exercise any of these rights, contact us at: Email: [INSERT CONTACT EMAIL] Website: https://bekirim.com Include sufficient information for us to identify you. We will respond within 30 days. --- SECTION 7: COOKIES AND TRACKING TECHNOLOGIES 7.1 COOKIES We use cookies on our website to: - Store your login credentials - Remember your preferences - Improve your user experience - Analyze website traffic and usage Refer to our separate Cookie Policy for detailed information about cookie usage. 7.2 LOCAL STORAGE The mobile app uses local storage to: - Store your login session - Cache user preferences - Maintain app functionality 7.3 TRACKING TECHNOLOGIES We do not use third-party tracking or retargeting technologies at this time. --- SECTION 8: CHILDREN'S PRIVACY 8.1 AGE REQUIREMENTS - Customers must be at least 12 years old - If under 18, parental or guardian consent is required - Drivers must be 18 years old or older 8.2 PARENTAL CONSENT - If a child (under 18) registers, we collect parental consent information - Parents/guardians are responsible for monitoring account activity - We reserve the right to request verification of parental consent 8.3 PROTECTING CHILDREN - We do not knowingly collect data from children under 12 - If we become aware of such collection, we will delete the data immediately - Parents/guardians may request removal of their child's account --- SECTION 9: INTERNATIONAL DATA TRANSFERS 9.1 DATA LOCATION - Your data is primarily stored in Supabase servers - Supabase servers may be located outside Brunei Darussalam - By using our Service, you consent to your data being transferred and stored internationally - International transfers are subject to data protection agreements 9.2 THIRD-PARTY LOCATIONS - Google Maps processes location data according to Google's data storage practices - Lovable platform may process data according to its privacy policies --- SECTION 10: THIRD-PARTY LINKS AND SERVICES 10.1 EXTERNAL LINKS Our Service may contain links to third-party websites and services: - We are not responsible for their privacy practices - We encourage you to review their privacy policies - We do not endorse or control third-party websites 10.2 THIRD-PARTY INTEGRATIONS - We do not share more data than necessary with third parties - Third parties are contractually obligated to protect your data - We are not liable for third-party data handling --- SECTION 11: CHANGES TO THIS PRIVACY POLICY 11.1 MODIFICATIONS We may update this Privacy Policy at any time: - Changes will be effective immediately upon posting - Major changes will be notified to users via email or in-app notification - Continued use of the Service constitutes acceptance of changes 11.2 NOTIFICATION - We will update the "Last Updated" date at the top of this policy - For significant changes, we will provide additional notice --- SECTION 12: CONTACT US If you have questions about this Privacy Policy, your data, or our privacy practices, please contact us: Email: [INSERT CONTACT EMAIL] Website: https://bekirim.com Address: [INSERT BEKIRIM BUSINESS ADDRESS] Response time: We aim to respond to privacy inquiries within 30 days. --- SECTION 13: BRUNEI REGULATORY COMPLIANCE 13.1 BDPA COMPLIANCE This Privacy Policy complies with Brunei's Personal Data Protection Act (BDPA): - We process data fairly and lawfully - We collect data only for specified, lawful purposes - We do not retain data longer than necessary - We ensure data accuracy and security 13.2 DATA PROTECTION OFFICER For BDPA inquiries or complaints, contact: Brunei Personal Data Protection Authority (if applicable) Email: [INSERT CONTACT EMAIL] --- END OF PRIVACY POLICY