Last updated: 13 August 2026
This Privacy Policy explains how Wunder Delivery (“Wunder”, “we”, “us”) handles personal information through our website, Shopify application, driver portal, support channels and related services (together, the “Service”). It applies to merchants, authorised staff, drivers and website visitors.
1. Our role
For website enquiries, account administration, security and our own business operations, we generally decide why and how personal information is used. When a merchant uses the Service to process Shopify order, customer, recipient, buyer or driver information, the merchant generally controls that information and we process it on the merchant’s behalf and according to its instructions.
The merchant is responsible for giving its customers, recipients, staff and drivers any privacy information required for its own activities. Where a request concerns information controlled by a merchant, we may direct the individual to that merchant and assist it with the request.
2. Information we process
Depending on how you use the Service, we may process:
- merchant, account, subscription and billing details;
- Shopify store identifiers, settings and authorised-user information;
- order, product, delivery, pickup and fulfilment details;
- buyer, recipient and gift-message information collected at product or cart level;
- driver name, telephone number, account status and merchant association;
- driver assignments, authentication events, sessions and delivery-status updates;
- print templates, printer-routing settings and print-job metadata;
- support messages, feedback and enquiry details;
- device, browser, log, security and usage information; and
- AI feature inputs, outputs and credit-usage metadata where those features are used.
3. How we use information
We use information to provide and configure the Service; display and organise orders; generate and route documents; authenticate users; show drivers their assigned deliveries; support recipient contact and fulfilment updates; provide AI-assisted checks and translation; prevent fraud and misuse; provide support; monitor reliability; improve the product; administer subscriptions; communicate service notices; and comply with legal obligations.
4. Driver portal users
A merchant creates or authorises driver access and supplies the information needed to associate a driver with that merchant. A driver may also provide information directly when signing in, requesting an authentication code, using the portal, contacting support or updating a delivery.
Information drivers can see
After authentication, the portal is designed to show a driver only the orders assigned to that driver. An assigned order may include the recipient’s name, delivery address, telephone number, delivery date or time, delivery instructions, order details and fulfilment status where the merchant has made those details available. Drivers must use this information only to complete the assigned delivery.
Authentication and activity
We may process telephone numbers, one-time-code events, session identifiers, device and browser information, security logs, assigned-order views and delivery-status updates to authenticate drivers, maintain sessions, investigate misuse and keep an operational audit trail. Authentication and messaging providers may process a driver’s telephone number and related delivery metadata to provide the requested communication.
Location, photographs and signatures
The current web portal does not collect continuous GPS location, proof-of-delivery photographs or recipient signatures. If we introduce any of these features, we will update this policy and provide an appropriate notice at the point of collection before the feature is used. Device permissions will be requested only where needed for the selected feature.
Driver rights and merchant requests
If a merchant supplied your driver account or assignment information, contact that merchant first to access, correct or delete it. You may also contact us using the details below. We will respond directly where we are responsible for the information and otherwise assist the relevant merchant.
5. Legal grounds
Where applicable law requires a legal basis, we rely on performance of a contract, legitimate interests in operating and securing the Service, compliance with legal obligations, and consent where appropriate. Merchants are responsible for establishing an appropriate basis for the customer, recipient, staff and driver information they submit. This Privacy Policy provides information about processing; agreement to it is not itself treated as consent where another legal basis applies.
6. Shopify and integrations
When a merchant installs or connects the Service, Shopify and supported third-party apps may provide information according to the permissions approved by the merchant. We share information back with those services only as needed for requested features, such as reading order data or updating fulfilment. Those services have their own privacy policies.
7. Service providers and disclosures
We may use vetted providers for hosting, databases, authentication, communications, printing connectivity, monitoring, support, payments and AI processing. They may process information only to provide services to us under appropriate contractual and security obligations. We may also disclose information where required by law, to protect rights and safety, in connection with a corporate transaction, or with the relevant person’s direction or consent.
8. International transfers
Our providers may process information outside your country. Where required, we use recognised safeguards for international transfers and assess the protections available in the destination.
9. Retention and deletion
We retain information only for as long as needed to provide the Service, meet contractual and legal requirements, resolve disputes, maintain security and follow a merchant’s instructions. Retention depends on the type of information, account configuration and applicable law. Authentication and security logs may be retained for a limited period after a session or account ends where needed to investigate misuse. After an account ends, information is deleted or anonymised according to our retention process unless law requires longer storage.
10. Security
We use administrative, technical and organisational safeguards designed to protect information, including access controls, authentication, logging and secure service providers. No system is completely secure. Merchants should remove access when a staff member or driver no longer requires it, and all users should protect their devices and credentials and notify us promptly of suspected misuse.
11. Your rights and choices
Depending on where you live, you may have rights to access, correct, delete or restrict the use of personal information, object to certain processing, withdraw consent where processing relies on consent, or receive a portable copy. If your information was submitted by a merchant, contact that merchant first; we will assist the merchant with valid requests. Hong Kong residents may also exercise rights available under the Personal Data (Privacy) Ordinance.
12. Cookies and communications
We may use essential cookies or similar technologies for authentication, security, preferences and core functionality. Any non-essential analytics or marketing technologies will be described through an appropriate notice or consent tool. You can opt out of promotional email using the link in the message while continuing to receive necessary account, authentication and service communications.
13. Children
The Service is intended for businesses and authorised adult users and is not directed to children. Merchants must not create driver accounts for anyone who is not legally permitted to perform the relevant delivery work.
14. Changes to this policy
We may update this policy as the Service, our processing or legal requirements change. We will publish the revised version with a new “Last updated” date and provide additional notice where required. We will provide notice before introducing materially different uses such as continuous location tracking or proof-of-delivery media collection.
15. Contact
For privacy questions or requests, email hello@wunderdelivery.com. Include enough information for us to identify the relevant account or merchant without sending unnecessary sensitive information.
This policy should be completed with the contracting entity’s registered name and address, confirmed subprocessors and retention schedule, then reviewed by qualified legal counsel before commercial launch.