1. Summary
Delv Express is a logistics platform operated by Lazyfoxs Logistics Pvt Ltd ("we", "us", "Delv Express"). We collect only what we need to deliver shipments, run the platform, and improve it. We do not sell personal data. We do not share it with advertisers. This policy explains what we hold, why we hold it, and how you can exercise your rights under the Digital Personal Data Protection Act, 2023 (DPDP) and other applicable law.
If you only read one section, read Your rights and Contact.
2. Who we are
Delv Express is operated by:
- Lazyfoxs Logistics Pvt Ltd, the Data Fiduciary under DPDP Act 2023
- Registered office: Haripur Siho, Muzaffarpur, Bihar 843119, India
- Corporate office: Plot 63, Udyog Vihar Extension, Ecotech-II, Surajpur, Greater Noida, Uttar Pradesh 201306, India
- Contact: hello@delvexpress.com · +91 79054 61842
3. What we collect
3.1 You give us
- Account data: name, work email, phone, company, role, password (hashed).
- Operational data: shipment details — sender, receiver, address, weight, contents description, value, courier preferences, COD flag.
- Billing data: GSTIN, billing address, payment instrument (handled by PCI-DSS-compliant payment processors; we don't store full card numbers).
- Support data: emails, tickets, call transcripts, screen recordings shared during troubleshooting.
3.2 We collect automatically
- Device & log data: IP address, user-agent, browser type, OS, time zone, referrer URL, pages visited, time on page.
- Cookies and similar: see our Cookie Policy.
- Tracking data: GPS coordinates of vehicles and riders during an active shipment (used to compute ETAs and serve tracking pages).
3.3 We receive from partners
Courier partners, payment processors, identity-verification vendors, and analytics providers may share shipment status updates, KYC results, or aggregated usage data.
4. How we use it
- Operate the platform — book pickups, generate labels, dispatch, track, deliver, settle, refund.
- Authenticate you and protect your account from fraud or abuse.
- Provide customer support and respond to grievances.
- Bill you and process payments.
- Improve the platform — failure analysis, RTO modelling, courier scoring, network design.
- Comply with legal obligations — tax, e-way bill, customs, anti-money-laundering, regulator requests.
- Send transactional notifications (delivery updates, exceptions, payment receipts) and — only if you opted in — newsletters or promotional updates.
5. Lawful basis (DPDP Act 2023, Section 4 & 7)
Under DPDP Act 2023, we process personal data on these grounds:
- Consent — for marketing communications and optional analytics.
- Legitimate use — for performing the shipment contract you booked.
- Legal compliance — for tax, GST, e-way bill, customs and regulator obligations.
- Public interest / safety — for fraud prevention, network security, and law-enforcement cooperation where required.
You can withdraw any consent-based processing at any time without affecting the lawfulness of past processing.
7. Retention
We keep data only as long as needed:
- Account data: while the account is active, plus 90 days after deactivation.
- Shipment records: 8 years from delivery date (required by Indian commercial and tax law).
- Tracking GPS data: 90 days from delivery, then aggregated and anonymised.
- Support tickets: 3 years from closure.
- Marketing consent records: 3 years from last interaction.
8. Security
- All data in transit is encrypted using TLS 1.3.
- All data at rest is encrypted with AES-256.
- Production access is gated by SSO, MFA, time-bound JIT permissions, and is fully audit-logged.
- We run quarterly third-party penetration tests and continuous SAST/DAST on our code base.
- Incident response: notify affected Data Principals and the Data Protection Board of India within 72 hours where required by law.
10. International transfers
Where data leaves India (e.g. when a global cloud provider replicates backups outside India, or when a cross-border shipment requires sharing data with foreign customs authorities), we transfer only to jurisdictions notified by the Government of India under DPDP Act 2023 §16, and we use Standard Contractual Clauses where applicable.
11. Children
Delv Express is a business-to-business service and is not directed at children under 18. We do not knowingly collect personal data of children. If you believe a child has provided data, contact us at hello@delvexpress.com and we'll delete it.
12. Your rights as a Data Principal
Under DPDP Act 2023 §11–§15, you have the right to:
- Access — request a summary of personal data we hold about you.
- Correction — ask us to correct inaccurate or incomplete data.
- Erasure — request deletion, subject to legal retention obligations (e.g. tax records).
- Withdraw consent — at any time, without affecting prior processing.
- Nominate — appoint someone to exercise your rights in case of death or incapacity.
- Grievance redressal — escalate to our Grievance Officer (see below).
To exercise any right, email hello@delvexpress.com with the subject line DPDP Request. We'll respond within 30 days.
13. Grievance officer
If your request is not resolved, escalate to:
- Grievance Officer: Grievance Cell, Lazyfoxs Logistics Pvt Ltd
- Email: grievance@delvexpress.com
- Phone: +91 79054 61842 (Mon–Sat, 10am–7pm IST)
- Address: Plot 63, Udyog Vihar Extension, Ecotech-II, Surajpur, Greater Noida, UP 201306
If still unresolved, you may approach the Data Protection Board of India established under DPDP Act 2023 §18.
14. DPDP Act 2023 — at a glance
India's Digital Personal Data Protection Act, 2023 sets out the rules for handling digital personal data. Key concepts:
- Data Principal — the individual to whom personal data relates (you).
- Data Fiduciary — the entity that decides why and how data is processed (us).
- Notice & consent — clear, specific, free, informed, unconditional, unambiguous consent for non-statutory processing.
- Significant Data Fiduciary — designation we may receive based on volume; triggers additional duties (DPO, audits, impact assessments).
15. Changes
We update this policy when our practices change or law changes. We'll notify you of material changes by email and via an in-app notice at least 30 days before they take effect.
16. Contact
- Email: hello@delvexpress.com
- Privacy-specific: privacy@delvexpress.com
- Phone: +91 79054 61842
- Postal: Lazyfoxs Logistics Pvt Ltd, Plot 63, Udyog Vihar Extension, Ecotech-II, Surajpur, Greater Noida, UP 201306, India