This Policy explains how OrderStraight collects, uses, processes and protects personal data when the Driver App, Delivery Company/Dispatcher system, merchant/client pages, tracking/location-sharing links and related OrderStraight services are used. It applies to Drivers, Delivery Company users, merchants, customers and other individuals whose data is processed through the service.
OrderStraight provides the technology platform. Depending on the data and purpose, OrderStraight may act as Controller or as Processor on behalf of a Delivery Company or another party. The role is determined by who decides the purpose and essential means of processing under applicable law and agreements.
We may process name, telephone number, email where applicable, account/login information, Terms/consent records, identification, driving licence, Driver photograph, vehicle, insurance and permit data where required for the service.
Where verification features are enabled, Driver photographs, live selfies or identity-matching data may be processed. If the process involves biometric or other sensitive personal data, additional legal requirements apply and a separate explicit notice/consent will be presented where required.
OrderStraight may process current or background Driver location while the Driver is Online, during an active trip, or where a feature requires it and device permission is enabled. Location is used for dispatch, navigation, pickup-arrival tracking, trip tracking, authorized merchant/customer/Delivery Company visibility, security and fraud prevention.
We may process order numbers/status, acceptance/arrival/pickup/delivery times, locations, distances, merchant/customer data necessary for delivery, delivery instructions, COD amount, delivery fees and related operational records.
We may process IP address, device type/identifiers where available, app/browser version, login records, security events and indicators of misuse or location manipulation.
OrderStraight may use WhatsApp, SMS, push notifications or other channels for operational notices, tracking/ location-sharing links and order/account communications. Telephone number, message status and information necessary to deliver/manage the communication may be processed.
Data may be used to operate the platform; create/manage accounts; verify identity/documents; dispatch, navigate and track deliveries; enable communications; create records/reports; manage billing/subscriptions; prevent fraud; protect the platform; provide support; resolve operational disputes; comply with legal/regulatory obligations; and improve service reliability through lawful means.
Processing is carried out under the legal basis applicable to each activity. Where Prior Consent is required, it must be explicit, documented, clear and specific as to purpose and duration. Merely reading this Policy is not blanket consent to all processing; separate in-app consent will be requested where legally required.
Data may be shared as necessary with the Driver’s associated Delivery Company, the merchant/customer associated with the order, providers of hosting, mapping, communications, messaging, notifications, payments, support and security, and governmental/judicial authorities where disclosure is legally required. Personal data is not sold to advertisers.
OrderStraight uses service providers as necessary to operate the platform. A current service-provider/ subprocessor list is made available through OrderStraight or on request and identifies relevant categories/ entities and purposes where required by law or contract.
Some hosting, mapping, messaging or cloud services may involve processing/storage outside Jordan. Where international transfer occurs, OrderStraight will comply with Jordan’s Personal Data Protection Law and applicable safeguards and will obtain consent or take additional steps where legally required.
Unless law or contract requires a different period, OrderStraight applies the following default framework: account/profile and verification documents for the account term and up to two years after closure; trip/billing/ COD records for up to five years after the transaction where needed for financial records or disputes; detailed trip location for up to 12 months after the trip, then deleted or concealed unless a legal need or dispute exists; security/login logs for up to 12 months; and Terms/consent acceptance records for up to five years after account closure. Where OrderStraight acts as Processor for a Delivery Company, deletion/return may occur sooner under the Company’s instructions and applicable law.
At the end of the purpose or processing period, data is deleted, concealed or returned according to OrderStraight’s legal role and applicable law, except information retained for statutory, financial, security, rightsprotection or dispute-resolution purposes.
OrderStraight implements reasonable technical and organizational safeguards proportionate to the processing. Measures may include access controls, login records, backups, password protection, encryption/encoding where appropriate, logical separation of company accounts and security review procedures.
OrderStraight handles personal-data security breaches in accordance with applicable law and internal security procedures. Where a breach is likely to cause severe harm, legally required notifications to affected individuals and the competent authority will be made within the periods required by law.
Individuals have rights provided by applicable law, which may include information/access, obtaining a copy, withdrawal of Prior Consent, correction/update, restriction to a specified scope, erasure/concealment, objection to unnecessary processing/profiling, transfer of a copy as provided by law, and awareness of breaches affecting the security/integrity of their data.
Privacy, access, correction, deletion or consent-withdrawal requests may be submitted through Contact OrderStraight inside the application or the official OrderStraight contact channel. Reasonable information may be requested to verify the requester’s identity before acting on a request.
The application may request permissions such as location, camera, photos/files and notifications where needed for a specific feature. Refusing a necessary permission may prevent certain functionality. Device permissions are managed through the operating system.
Driver/customer data will not be used for unrelated marketing unless there is an appropriate lawful basis and separate consent is obtained where required.
OrderStraight is intended for commercial and operational use. A Driver account may not be created by a person who is not legally eligible to drive and perform deliveries. If a minor’s data is incidentally processed as part of a delivery, it is processed only as necessary for the service and as permitted by law.
The platform may use automated rules to assist dispatch, identify nearby Drivers or detect fraud/security indicators. Where profiling or automated processing produces a legal or similarly significant effect subject to specific legal requirements, OrderStraight will apply those requirements.
OrderStraight may update this Policy. Material changes will be communicated through an appropriate channel and renewed acceptance/consent will be requested where required by law.
For privacy questions or requests, use Contact OrderStraight inside the application or the official OrderStraight contact channel. This channel should remain available for personal-data requests and complaints.
Personal-data processing is subject to the laws, regulations and instructions applicable in the Hashemite Kingdom of Jordan, including Personal Data Protection Law No. 24 of 2023 and instruments issued under it.
This Policy is provided in Arabic and English. In the event of inconsistency or conflict of interpretation, the Arabic version shall prevail and be binding.
By selecting “I Have Read the Privacy Policy”, the user confirms review of this Policy. Any separate explicit consents required by law will be collected through dedicated in-app screens.
OrderStraight — a product by JSIT · Hashemite Kingdom of Jordan
Questions about these documents: legal@orderstraight.com