Privacy Policy

Last updated: October 2, 2025

This Privacy Policy describes how BAGGO collects, uses, and protects your personal information in compliance with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Data Controller

BAGGO Services Ltd. is the data controller responsible for your personal data.

Contact:
Email: privacy@baggo.eu
Address: 123 Innovation Street, Brussels, Belgium
Data Protection Officer: dpo@baggo.eu

2. Information We Collect

2.1 Account Information:
• Name, email address, phone number
• Date of birth, address
• Profile photo (optional)

2.2 Verification Data:
• Government-issued ID documents
• Proof of address
• Selfie verification photos

2.3 Transaction Data:
• Package details and descriptions
• Delivery addresses
• Payment information (processed by secure third parties)

2.4 Usage Data:
• Device information and IP address
• Browser type and operating system
• Pages visited and actions taken
• Location data (with consent)

3. Legal Basis for Processing

3.1 Contract Performance
3.2 Legitimate Interests
3.3 Legal Obligations
3.4 Consent

4. How We Use Your Data

4.1 To create and manage your account
4.2 To facilitate package delivery services
4.3 To verify your identity (KYC)
4.4 To process payments and prevent fraud
4.5 To send updates and notifications
4.6 To improve our platform
4.7 To comply with legal obligations

5. Data Sharing

5.1 Other users (limited data)
5.2 Service providers
5.3 Legal authorities
5.4 Business transfers

We NEVER sell personal data.

6. Data Security

6.1 SSL/TLS encryption
6.2 EU-based secure servers
6.3 Restricted-access policies
6.4 Security audits
6.5 Optional 2FA

7. Your GDPR Rights

7.1 Right of access
7.2 Rectification
7.3 Erasure
7.4 Restriction
7.5 Data portability
7.6 Objection
7.7 Withdraw consent
7.8 File a complaint

Contact: privacy@baggo.eu

8. Data Retention

Account data: lifetime of account
Transactions: 7 years
KYC: 5 years
Marketing: until withdrawn
After deletion → anonymized or destroyed

9. International Transfers

EU data centers primarily
Approved transfer mechanisms:
• SCCs
• Adequacy decisions
• GDPR safeguards

10. Cookies & Tracking

Essential cookies
Analytics cookies
Preference cookies

Manage via browser settings.

11. Children's Privacy

Not for users under 18
No intentional collection
Immediate deletion if discovered

12. Changes to Policy

Policy updates periodically
You will be notified
Continued use = acceptance
Archives available

13. Contact Us

Email: privacy@baggo.eu
DPO: dpo@baggo.eu
Address: Brussels, Belgium
Phone: +32 2 123 4567

Supervisory authority: APD/GBA