Privacy notice
This notice describes what the site actually does with data today. It has not yet been reviewed by a lawyer, and the operating entity and its registered address still need to be filled in before launch.
What we collect
When you request a delivery quote we collect:
- what you want delivered, and any message you add
- the pick-up and destination areas, date and time you pick
- your name, email address and phone number, if you give them
When you submit a business listing we collect the business name, description, contact details and coverage you enter.
We also store a one-way hash of your IP address and your browser user-agent string. The hash lets us apply rate limits and investigate abuse. We do not store the IP address itself, and the hash cannot be reversed back into one.
Visitor measurement
We count visits ourselves rather than using Google Analytics or any other third-party service. Nothing about your visit is sent to another company.
For each page you open we record:
- the page address and title
- the site that linked you here, if any, and any campaign tags in the address
- coarse device information taken from your browser’s user-agent: mobile or desktop, browser name, operating system
- your browser’s preferred language
- anything you type into the site’s search box
- which provider links you click
These are grouped into a single visit using the same one-way hash described above, which is re-salted every day. That means we can see that one person looked at three pages this afternoon, but we cannot tell that the same person came back tomorrow, and we cannot work out who you are.
Raw page-view records are deleted after 180 days. Our legal basis is our legitimate interest in understanding whether the site is useful.
Why we use it
Quote requests exist to be passed to delivery providers — that is the point of sending one. We share the details of your request, including the contact details you provide, with the providers we select as a match, so they can contact you with a quote.
Our legal basis is the performance of a service you asked for, and our legitimate interest in operating the directory and keeping it free of spam.
Who we share it with
Delivery providers matched to your request. We do not sell personal data, and we do not share it for advertising.
Once a provider has your details they are a separate controller of that data and their own privacy policy applies to what they do with it.
Cookies
The public site sets no cookies at all — not for tracking, not for advertising, and not for the visitor measurement described above, which is why you are not asked to accept anything. A single cookie is set only when an administrator signs in, and it exists purely to keep that session active.
How long we keep it
Quote requests are kept while they are being handled and for a reasonable period afterwards so we can resolve disputes and measure whether the service works. Business listings are kept for as long as the listing is published.
Your rights
Under the GDPR you can ask for access to your data, correction of it, deletion of it, or a copy of it, and you can object to us processing it. Email hola@madrid.delivery and we will act on it.
If you are unhappy with how we respond, you can complain to the Spanish data protection authority, the AEPD.
Businesses listed on the site
Listings contain business contact information, not personal information about individuals. If you are a sole trader and your listing includes details you consider personal, email us and we will correct or remove it.