Privacy Policy

1. Introduction

CrowdWave ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains our data practices and your rights regarding your personal information. This policy applies to all users of the CrowdWave platform, including our website and mobile applications. By using CrowdWave, you consent to the collection and use of your information as described in this policy.

2. Information We Collect

Account Information: When you register, we collect your name, email address, phone number, date of birth, and government-issued ID information for verification purposes.

Payment Information: We collect payment details including bank account information, credit card data (processed securely through third-party providers), and transaction history.

Location Data: We collect GPS location data to track package delivery routes, calculate shipping distances, and provide real-time tracking to senders.

Device Information: We collect information about your device, including device type, operating system, unique device identifiers, and mobile network information.

Usage Data: We collect information about how you interact with our platform, including pages visited, features used, search queries, and time spent on the platform.

Communication Data: We collect messages, support tickets, and communications between users on our platform.

Cookies & Tracking: We use cookies, web beacons, and similar technologies to enhance your experience and analyze platform usage.

3. How We Use Your Information

We use your personal information for the following purposes:

• To create and manage your account
• To verify your identity and prevent fraud
• To process payments and manage transactions
• To provide customer support and respond to inquiries
• To track and deliver packages
• To send transactional emails and notifications
• To improve our services and user experience
• To conduct research and analytics
• To comply with legal obligations and enforce our terms
• To send marketing communications (with your consent)
• To detect and prevent fraudulent activity
• To personalize your experience on our platform

4. Legal Basis for Processing

Under GDPR and similar data protection laws, we process your personal information based on the following legal grounds:

• Contract Performance: Processing necessary to perform our services and fulfill your requests
• Legal Obligation: Processing required by law, regulation, or court order
• Legitimate Interest: Processing necessary for our legitimate business interests, such as fraud prevention and platform improvement
• Consent: Processing based on your explicit consent, which you can withdraw at any time
• Vital Interest: Processing necessary to protect your vital interests or those of others

5. Data Sharing & Third Parties

We do not sell your personal data. However, we may share your information with:

• Service Providers: Payment processors, cloud storage providers, analytics services, and customer support platforms
• Other Users: Senders and travelers may see limited information about each other (name, rating, delivery address) necessary to complete transactions
• Legal Authorities: When required by law, court order, or to protect our rights and safety
• Business Partners: With your consent, we may share information with partners for joint marketing or service offerings
• Successors: In case of merger, acquisition, or sale of assets, your information may be transferred

All third-party service providers are contractually obligated to protect your data and use it only for specified purposes.

6. International Data Transfers

CrowdWave operates globally, and your information may be transferred to, stored in, and processed in countries other than your country of residence. These countries may have data protection laws that differ from your home country. When we transfer data internationally, we implement appropriate safeguards, including:

• Standard contractual clauses approved by relevant authorities
• Adequacy decisions recognizing equivalent data protection
• Your explicit consent to the transfer

By using CrowdWave, you consent to the transfer of your information to countries outside your country of residence.

7. Data Security

We implement comprehensive security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

• End-to-end encryption for sensitive data transmission
• SSL/TLS protocols for secure website connections
• Secure password hashing and storage
• Regular security audits and penetration testing
• Access controls and role-based permissions
• Firewalls and intrusion detection systems
• Employee training on data protection and privacy
• Incident response procedures for data breaches

While we strive to protect your information, no security system is completely impenetrable. We cannot guarantee absolute security.

8. Cookies & Tracking Technologies

What are Cookies? Cookies are small text files stored on your device that help us recognize you and enhance your experience.

Types of Cookies We Use:

• Essential Cookies: Required for platform functionality and security
• Performance Cookies: Help us understand how users interact with our platform
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Track your activity for targeted advertising (with consent)

Managing Cookies: You can control cookies through your browser settings. Disabling cookies may affect platform functionality. We also respect Do Not Track signals and will not use tracking technologies if you enable this setting.

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete information
• Right to Erasure: Request deletion of your data (subject to legal obligations)
• Right to Restrict Processing: Limit how we use your information
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Opt-out of certain processing activities
• Right to Withdraw Consent: Withdraw consent for data processing at any time
• Right to Lodge a Complaint: File a complaint with your local data protection authority

To exercise these rights, contact us at privacy@crowdwave.eu with your request and proof of identity.

10. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy. Retention periods vary based on the type of information:

• Account Information: Retained for the duration of your account and 3 years after account closure
• Transaction Data: Retained for 7 years for tax and legal compliance
• Payment Information: Retained for 5 years or as required by payment processors
• Location Data: Retained for 90 days unless needed for dispute resolution
• Marketing Data: Retained until you unsubscribe

After the retention period, we securely delete or anonymize your information. Some data may be retained longer if required by law.

11. Children's Privacy

CrowdWave is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will take steps to delete such information and terminate the child's account. If you believe we have collected information from a child, please contact us immediately at privacy@crowdwave.eu.

12. Third-Party Links & Services

Our platform may contain links to third-party websites and services that are not operated by CrowdWave. This Privacy Policy does not apply to third-party services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services before providing your information. Your use of third-party services is at your own risk.

13. Marketing Communications

We may send you marketing emails about new features, promotions, and updates. You can opt-out of marketing communications at any time by:

• Clicking the "Unsubscribe" link in any marketing email
• Updating your notification preferences in your account settings
• Contacting us at privacy@crowdwave.eu

Please note that even if you opt-out of marketing communications, we will continue to send you transactional emails related to your account and transactions.

14. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, and shared
• Right to delete personal information collected from you
• Right to opt-out of the sale or sharing of your personal information
• Right to non-discrimination for exercising your CCPA rights

To exercise these rights, submit a request to privacy@crowdwave.eu. We will verify your identity and respond within 45 days.

15. European Privacy Rights (GDPR)

If you are located in the European Union or European Economic Area, you have rights under the General Data Protection Regulation (GDPR). These include the rights mentioned in Section 9 of this policy. Our Data Protection Officer can be contacted at dpo@crowdwave.eu for any GDPR-related inquiries. You also have the right to lodge a complaint with your local data protection authority.

16. Data Breach Notification

In the event of a data breach that compromises your personal information, we will notify you without undue delay and in accordance with applicable laws. Notifications will be sent to the email address associated with your account. We will also notify relevant authorities as required by law. Our notification will include information about the breach, the types of information affected, and steps you can take to protect yourself.

17. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of CrowdWave following the posting of changes constitutes your acceptance of the updated policy. We encourage you to review this policy periodically to stay informed about how we protect your information.