Your data, handled with care.

We collect the following categories of information:

• Identity & contact: name, email, phone number, home address, date of birth.
• Customs compliance: Taxpayer Registration Number (TRN) and a copy of your government-issued photo ID, as required for Jamaican import clearance.
• Shipment data: package descriptions, merchant names, tracking numbers, declared values, weights, and purchase receipts you upload.
• Transaction data: invoices, payment method (cash/card — we do not store card numbers), and pickup records.
• Technical data: device type, app/browser version, IP address, and push-notification subscription tokens.

• Receiving, identifying, and forwarding your packages between our US and Jamaica hubs.
• Preparing customs declarations and duty assessments on your behalf.
• Generating invoices and verifying identity at package handoff.
• Sending operational alerts about your shipments (see Section 3).
• Preventing fraud, enforcing our Terms, and meeting legal obligations.
• Improving our service — always with aggregated or de-identified data.

We do not sell your personal information, and we do not use it for third-party advertising.

DriftLine sends operational notifications via in-app feed, email, SMS, WhatsApp, and web push:

• Package intake, flight departure, customs clearance, ready-for-pickup, and invoice notices.
• Account security messages (verification codes, password resets).
• You can disable push notifications in your device settings and manage channels from your dashboard. Operational messages essential to delivering your cargo (e.g. pickup notices) cannot be fully opted out of while you have packages in transit.

We share data only with parties necessary to deliver the service:

• Jamaica Customs Agency and US export authorities — shipment and identity data required by law.
• Air and ocean carriers — manifests with package details.
• Service providers — our hosting and database provider, email delivery, and SMS/WhatsApp messaging providers, each bound to process data only on our instructions.
• Legal requests — where required by a valid court order or to protect the safety of our staff and customers.

• All traffic between your device and our servers is encrypted with TLS.
• Data is stored with a managed cloud database provider with encryption at rest.
• Government ID images are stored in a private bucket, accessible only to authorized verification staff.
• Staff access is role-based and audited; verification codes and API credentials are stored hashed.
• No system is perfectly secure — if a breach affecting your data occurs, we will notify you promptly.

• We use strictly necessary cookies for sign-in sessions and security. No third-party advertising or cross-site tracking cookies.
• A device-type cookie remembers whether you use the installed web app or a browser, so sessions behave correctly.
• Push subscription tokens are stored only while you keep push notifications enabled.

• Account & shipment records: kept while your account is active, and for 7 years after closure where required for customs and tax audits.
• Government ID images: retained while your account is active; deleted within 90 days of verified account closure.
• Notification logs: 24 months.
• Technical logs: 12 months.

Subject to the Jamaica Data Protection Act, you may:

• Access the personal data we hold about you.
• Correct inaccurate details from your account settings or via support.
• Delete your account and associated data, subject to the legal retention periods above.
• Object or restrict certain processing, and withdraw consents (e.g. optional channels).
• Complain to the Office of the Information Commissioner (Jamaica) if you believe we've mishandled your data.

To exercise any right, email privacy@driftlinecouriers.com from your registered address. We respond within 30 days.