NexoZip Ltd ("NexoZip", "Company", "we", "us", or "our"), a company registered in the United Kingdom under number 17323445, with registered office at Suite RA01, 195-197 Wood Street, London, E17 3NU, values and respects the privacy of its users.
This Privacy Policy describes how we collect, use, process, and share the personal data of private and business users ("Customers" or "Users") and independent transport service providers ("Drivers") who use our website (www.nexozip.com) and our mobile application (together, the "Services").
By accessing or using our Services, you agree to the practices described in this Privacy Policy. If you do not agree, you must stop using the platform immediately.
1. Data We Collect
We collect the personal data necessary for our digital marketplace to function properly, split by user type:
- All users (Customers and Drivers): name, email address, phone number, encrypted password, IP address, device type, operating system, cookie identifiers, and browsing data collected automatically during your visit to the site.
- Customers only: shipment details (dimensions, weight, description, photos) and exact pickup and delivery locations.
- Drivers only: vehicle information (model, year, maximum weight capacity, cargo dimensions, and vehicle photos), plus identity verification (KYC) data — driving licence and ID document, submitted for a facial-recognition liveness check.
2. How We Collect and Process Your Data (Our Technical Partners)
NexoZip runs on modern infrastructure, with data processed and stored through specialised technology partners that comply strictly with GDPR and international security standards:
- Hosting & infrastructure (Netlify & GitHub): our website's code and interface are securely built and served via Netlify, with the technical repository protected on GitHub.
- Data storage (Supabase): all profile data, service history, credit balances, bids, and authentication logs are stored securely and encrypted in Supabase's databases.
- Payment processing (Stripe): NexoZip does not store card or bank details on its own servers. When a Driver purchases a credit package (NexoCredits), payment data is collected and processed directly by Stripe, an independent licensed payment provider.
- Automated identity verification (Didit): validation of the driving licence and facial verification of Drivers is handled externally by Didit (didit.me). Didit collects the document images and selfie solely to confirm the document is authentic and that the Driver is a real, qualified person. NexoZip only receives the technical result (Approved or Rejected) to update the account status in Supabase.
- Automated invoicing: to meet tax obligations with the Tax Authority, billing data provided when purchasing credits (name, tax ID, email) is sent to our certified invoicing software to automatically issue the legal document.
3. Legal Basis and Purpose of Processing
We process your personal data on the following legal grounds:
- Contract performance: to allow Customers to post shipments, Drivers to submit bids, and to manage the credits system and each user's internal wallet.
- Legal obligations: to issue invoices and comply with tax and transport regulations.
- Legitimate interest & security: to prevent fraud, scams, and cyberattacks, and to ensure only legally qualified drivers operate on the platform (through identity checks).
4. Data Sharing Between Users
As NexoZip is an intermediation marketplace, once a bid is awarded and the physical transport service is set to take place: the Customer gains access to the selected Driver's name, phone number, vehicle, and ratings; the Driver gains access to the Customer's name, phone number, and exact pickup and delivery addresses. Both parties are bound under the Terms of Service to use this data exclusively to carry out the awarded transport — any other use or sharing is prohibited.
5. Data Retention and Security
Personal data is kept only for as long as necessary for the purposes it was processed for, or to meet legal deadlines (for example, billing data must be kept for 10 years under tax law). We use rigorous technical and organisational security measures — such as SSL/TLS encryption, firewalls, and restricted access controls in Supabase — to protect your data against loss, misuse, or unauthorised access.
6. Your Rights (GDPR)
Under the General Data Protection Regulation, you have the following rights over your personal data:
- Right of access: know what data we hold about you.
- Right to rectification: correct inaccurate or outdated data.
- Right to erasure ("right to be forgotten"): request deletion of your data (subject to legal restrictions or issued invoices).
- Right to portability: receive a copy of your data in a structured format.
- Right to object: object to processing of your data for marketing or specific purposes.
To exercise any of these rights, send a formal request to our support email: administrativa@nexozip.com.
7. Cookies and Similar Technologies
Our website uses essential technical cookies managed by Netlify and Supabase to keep your session active ("Remember me") and to keep the site secure. You can manage or disable cookie preferences through your browser settings, though some site features may stop working correctly as a result.
8. Changes to This Policy
NexoZip reserves the right to update this Privacy Policy at any time to reflect changes to our Services or to applicable legislation. Whenever we make material changes, we will update the date at the top of this document and notify users through the platform or by email.
9. Contact
For any clarification, complaint, or question related to this Privacy Policy or the processing of your data, please contact us:
NexoZip Ltd
Email: administrativa@nexozip.com
Address: Suite RA01, 195-197 Wood Street, London, E17 3NU
UK Company Number: 17323445