Legal
Privacy Policy
How KloudDrop Pty Ltd handles personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
- Version
- 1.0
- Effective
- Jurisdiction
- New South Wales, Australia
1. What we collect
We collect the contact details you enter at checkout (first and last name, email address and mobile number), your delivery address including any unit and access notes, the suburb or postcode you enter into the coverage checker, your order contents and order history, the outcome of the delivery and of any collection, and the content of any enquiry or complaint you send us. If you submit a private-event enquiry we also collect the event details, venue details and the confirmations you tick.
2. Identification checks
Our worker sights approved photo identification at the door to confirm you are 18 or over. We record only the outcome of that check — that identification was sighted and accepted, or that the delivery was refused, together with the date, time and worker. We do not photograph, scan, copy or store your identification document, and we do not record your licence number or date of birth.
3. Payments
Card payments are processed by our third-party payment provider. Card numbers, CVCs and cardholder authentication are handled by that provider and never reach KloudDrop's systems. We store only the payment method type, the amount, the provider's transaction reference and the payment status, which we need to match payments to orders and to process refunds and deposits.
4. Location and coverage checking
When you check a suburb or postcode we match the text you type against our published list of serviced suburbs. We do not request or track your device GPS location on this website. Delivery addresses are used to route the driver and are held with your order.
5. Who we share it with
We share the minimum information needed to deliver your order: the delivery name, address, contact number and order contents go to the KloudDrop worker performing the delivery and collection, and to our delivery-dispatch provider Tookan, which allocates and tracks the job. We also use a hosting and database provider to run this website and store order records, and a payment provider to take payments. We do not sell personal information, and we do not share it for third-party advertising.
6. Marketing
We only send promotional messages if you have opted in at checkout. Every promotional message includes an unsubscribe method, and you can opt out at any time by replying to the message or emailing us. Operational messages about an order you have placed are not marketing and are sent regardless.
7. How long we keep it
Order, payment, deposit and identification-check outcome records are kept for seven years to meet Australian tax and business record-keeping obligations. Enquiry and complaint correspondence is kept for two years. Delivery-route data held by our dispatch provider is kept according to that provider's retention settings. When a record is no longer required we delete or de-identify it.
8. Access, correction and deletion
You can ask for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Email contact@klouddrop.com with enough detail for us to find your records — usually your order number and the email address you used. We respond within 30 days. We may need to keep records we are legally required to retain, and if we do we will tell you which ones and why.
9. Security
Access to customer records is restricted to authorised KloudDrop staff by role, enforced at the database level, and staff accounts require individual logins. Data is transmitted over encrypted connections and stored with our hosting provider in managed infrastructure. No system is completely secure; if a data breach occurs that is likely to cause serious harm, we will notify affected people and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.
10. No customer accounts
Checkout is guest-based. This website does not create customer accounts, passwords or logins, so there is no stored customer password to compromise. Order tracking works from a private one-off link issued to you.
11. Complaints
Privacy complaints can be sent to contact@klouddrop.com. We will acknowledge within five business days and give you a written outcome. If you are not satisfied with our response you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
These pages summarise how KloudDrop operates. They do not replace, limit or override the law, including the Public Health (Tobacco) Act 2008 (NSW), the Australian Consumer Law and the Privacy Act 1988 (Cth). Where this website differs from legislation, the legislation applies.