Privacy Policy

1. Introduction

1. This Privacy Policy explains how Openrod Pte. Ltd. ("we", "our", "us" and "Openrod") collects, holds, processes, transfers and uses your personal data and what corresponding rights you have in relation to that processing.
2. This Privacy Policy concerns personal data that we collect about you when you use or access our web applications, mobile applications (jointly "Applications") and our website.
3. We operate Applications and websites to act as a platform to connect users of our platform to independent delivery partners and to help facilitate on-demand delivery services ("Services"). Our Applications and Services are primarily designed for adults. We will not knowingly collect personal data from minors (persons under 18, or the equivalent minimum age in the relevant jurisdiction) unless provided with prior consent from a person with parental responsibility.
4. This Privacy Policy applies to personal data of (jointly "you" or "your"):
   • Visitors: individuals who visit our website or access the Applications without being a User;
   • Users: individuals who use, request or receive Services, contact us, enter contests, or subscribe to updates;
   • Agents: representatives of corporate customers or business partners; and
   • Delivery Partners: individuals who provide or apply to provide Services through our Applications.
5. Please read and understand this Privacy Policy before using our website, Services or Applications.

2. Sources of Personal Data

1. When you visit our website or use our Applications and Services, we may ask you to provide personal data. If you do not provide relevant data, we may not be able to provide our Services or respond to your queries.
2. We may collect and process personal data:
   • provided by you directly (for example during account creation, promotions, support requests, or uploading files and images);
   • generated during your use of our website, Services and Applications (for example IP address, device information, unique device identifiers, network configuration and usage data); and
   • obtained from third parties (such as other Users, service providers, business partners, or verification providers).
3. If you provide personal data of other individuals to us, you represent that you have obtained all necessary rights, permissions and consent, or otherwise have lawful authority to do so.

3. What Personal Data Do We Collect About You?

Depending on how you interact with Openrod, the personal data we collect may include:

3.1 From Visitors

• IP address or other unique device identifiers
• Usage of our website or Applications

3.2 From Users

• Name, email address, phone number and address
• Correspondence with us
• IP address or other unique device identifiers
• Payment and banking information
• Geolocation and location information
• Profile information, including login details, language preference, feedback, ratings, order details and referral information
• Service history, including date and time, routing, duration, charges, remarks and in-app communications
• Emergency contact details, where provided

3.3 From Delivery Partners

• Name, phone number, email address and home address
• Payment and banking information
• Geolocation and route data
• Profile, vehicle, licence, insurance and identity verification information
• Ratings, feedback and performance data
• Service history and in-app communications related to deliveries

We only collect personal data that we reasonably need for the purposes stated in this Privacy Policy. We do not collect personal data that is unnecessary or excessive.

4. How Do We Use Your Personal Data?

We may process your personal data for purposes including:

• to provide, maintain and improve our Services, including matching Users with Delivery Partners and enabling tracking;
• to process payments, fees, refunds and wallet transactions;
• to provide customer support and communications;
• to detect, prevent and investigate fraud, misuse, safety issues or unlawful activity;
• to conduct analytics, audits, research and service improvement;
• to verify identity and maintain the security and integrity of the Platform; and
• to comply with legal, regulatory, accounting and contractual obligations.

Your personal data collected by us will not be sold, exchanged or given to a third party for their own direct marketing purposes unless we have your prior consent or another legal basis allowed by applicable laws.

We may also process personal data as necessary to operate safety and compliance controls, including recording and reviewing prohibited / restricted item incidents, Support escalations, Delivery Partner refusal reports, and account review or suspension actions, in accordance with Openrod’s operating procedures and Applicable Law.

5. Personal Data Sharing and Disclosure

1. Our Services require that we share certain personal data with other users. This may include sharing User contact and location details with Delivery Partners after a delivery has been initiated, and sharing Delivery Partner name, contact, vehicle and geolocation details with Users for completing a delivery.
2. We may also share personal data with:
   • our employees, officers or consultants;
   • auditors and external legal and financial advisers;
   • suppliers and processors such as IT, cloud, payment, analytics, customer service, marketing, identity verification, telecommunications and anti-fraud providers;
   • insurers and bankers;
   • regulators, government bodies or law enforcement where required by law or for safety and crime prevention; and
   • another company in connection with a merger, acquisition, restructuring or sale of assets.
3. We will ensure third parties are under appropriate confidentiality obligations before we share your personal data with them.
4. We do not sell your personal data to any third parties.

6. International Transfer of Personal Data

As Openrod may operate across multiple markets, we may transfer your personal data to locations outside your country or region. We will ensure that such transfers take place subject to this Privacy Policy and comply with applicable laws, including putting in place appropriate safeguards where required.

7. Security of Personal Data

1. Once we receive your personal data, we will use reasonably practicable steps and security measures as required under applicable laws to protect it against unauthorised or accidental access, processing, erasure, loss or use.
2. Your personal data will be kept confidential and disclosed only on a need-to-know basis for the purposes set out in this Privacy Policy.
3. You are responsible for keeping your Applications password confidential. Please notify us immediately if you believe your password or account has been compromised.
4. Transmission of information through the internet is not completely secure. Although we use security measures, we cannot guarantee absolute security of personal data transmitted to the Applications.

8. Retention of Personal Data

1. Personal data collected from you will not be kept longer than necessary for the purposes stated in this Privacy Policy unless otherwise required or permitted by applicable laws.
2. We may retain personal data for longer where necessary to comply with contractual or legal obligations, resolve disputes, or where you have consented to continued retention.
3. At the end of the retention period, we will delete or anonymise personal data, and securely destroy physical documents containing personal data where applicable.

9. Your Rights

Subject to applicable data protection laws in your jurisdiction, you may have the right to:

• obtain information about and access personal data we hold;
• request correction of inaccurate or incomplete data;
• request erasure, blocking or anonymisation in certain circumstances;
• request portability of certain personal data you provided to us;
• withdraw consent where processing is based on consent;
• object to or request restriction of certain processing; and
• lodge a complaint with a competent authority if you believe your rights have been infringed.

You may exercise your rights by contacting us at support@openrod.com. Please note that we may still be entitled to process or retain personal data where we have another lawful basis to do so.

10. Account Security Management Measures

To maintain the security of your account and the integrity of the Platform, we may require you to update or reset your password or cooperate with other verification measures based on reasonable security considerations. We may adjust these measures from time to time based on risk assessments or legal requirements.

11. Cookies

We may use cookies or similar technologies to enable Platform functionality, analyse usage patterns and improve performance and user experience. You may manage cookie preferences through your browser or device settings.

12. Third-Party Links

1. Our website or Applications may include links to third-party products or services.
2. Those third-party websites have their own separate privacy policies and terms, which you should review before using their services.
3. Openrod takes no responsibility or liability for the content and activities of third-party linked websites or their products and services.

13. Changes to Our Privacy Policy

1. We may update this Privacy Policy from time to time in response to changing legal, technical or business developments. When we update it, we will take appropriate measures to inform you, consistent with the significance of the changes. You can see when this Privacy Policy was last updated by checking the date displayed at the top.
2. By continuing to use our website, Applications or Services, you will be deemed to have accepted the updated Privacy Policy. If you do not consent to material changes, we may not be able to continue providing the Services to you.

14. Contact Us

All comments, queries, complaints, data access requests or data correction requests relating to our use of your personal data should be addressed to:

Openrod Pte. Ltd.

68 Circular Road, #02-01

Singapore 049422

Email: support@openrod.com

15. Direct Marketing

1. We may use your name, email address, phone number and/or address to send newsletters, promotions, service updates, surveys, event invitations and similar communications where permitted by law.
2. We will not use your personal data for direct marketing unless we have received your consent where required by applicable laws.
3. You may request us to cease using your personal data for direct marketing at any time by clicking unsubscribe in an email or contacting support@openrod.com.

16. Language Versions

In case of any discrepancy between the English version and any regional language version of this Privacy Policy, the English version prevails.

Appendix — Singapore (PDPA)

This Privacy Policy is intended for individuals protected by Singapore's Personal Data Protection Act ("PDPA") and any other applicable laws.

If you become aware of any security breach, data leak or other information security incident related to the Platform, you should promptly inform Openrod so that we can take appropriate steps, including notifying relevant authorities and affected persons where required under the PDPA and guidance from the Personal Data Protection Commission (PDPC) of Singapore.

Openrod respects data subject rights under the PDPA, including access, correction, deletion, portability and withdrawal of consent where applicable, and will cooperate with data subjects to facilitate the effective exercise of those rights.