Legal

Privacy Policy

This Privacy Policy explains how TheVanApp collects, uses, and protects your personal data.

Last updated: November 2026

1. Who We Are

TheVanApp is operated by Asergis Operations Limited, a company registered in Malta with its registered office at Suite 17, Stonegate, 20 Triq Bernadette, San Gwann SGN 1467, Malta. We are the data controller for the personal data we collect through the Platform.

We are committed to protecting your privacy and handling your personal data in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act (Chapter 586 of the Laws of Malta).

2. What Data We Collect

Account Information: When you create an account, we collect your name, email address and phone number. You sign in with a code sent to your phone or email, so we do not hold a password for you.

Booking Information: When you make a booking, we collect pickup and drop-off addresses, item descriptions, booking time and date, and payment information.

Location Data: With your consent, we collect real-time location data during active bookings to enable live tracking. We also collect approximate location data to match you with nearby drivers.

Payment Data: We collect payment card details, which are processed and stored securely by our payment processor. We do not store full card numbers on our systems.

Drivers and Operators: If you drive with TheVanApp or run an Operator account, we also collect the documents you upload (such as your ID, driving licence, proof of address, right to work and police conduct certificate, and your vans' documents), your bank details for payouts, and your company details if you are an Operator.

Agreement Records: When you accept an agreement in the app, we record the name you type, the date and time, the version of the agreement and a fingerprint of its exact text, your IP address and the app version. This record is our proof that you accepted the agreement, in place of a signature.

Communications: We retain records of your communications with our support team to help resolve disputes and improve our service.

Device and Usage Data: We collect information about the device you use to access the Platform, including IP address, browser type, and usage patterns, to improve our service and prevent fraud.

3. How We Use Your Data

We use your personal data for the following purposes:

Providing the Service: To process bookings, match you with drivers, process payments, and provide customer support.

Safety and Security: To verify identities, prevent fraud, and ensure the safety of our platform and users.

Communications: To send you booking confirmations, receipts, and important service updates. With your consent, we may also send you marketing communications.

Improving the Platform: To analyse usage patterns, conduct research, and improve the features and performance of our Platform.

Legal Compliance: To comply with our legal obligations, including tax reporting and responding to lawful requests from authorities.

4. Legal Basis for Processing

We process your personal data on the following legal bases:

Contract Performance: Processing necessary to fulfil our contract with you (e.g., processing bookings and payments).

Legitimate Interests: Processing necessary for our legitimate business interests (e.g., fraud prevention, platform improvement), where these interests are not overridden by your rights.

Legal Obligation: Processing necessary to comply with our legal obligations.

Consent: Where we rely on your consent (e.g., for marketing communications or location tracking), you have the right to withdraw your consent at any time.

5. Location Data

We collect and use location data to provide our core service, including matching customers with nearby drivers and enabling real-time tracking during bookings. Our full Location Information Policy is available on our website.

Location data is collected only when the app is in use and only with your explicit consent. You can withdraw your consent to location tracking at any time through your device settings, but this may affect your ability to use certain features of the Platform.

We do not sell your location data to third parties or use it for advertising purposes.

6. Data Sharing

We share your personal data with the following categories of recipients:

Drivers: We share your name, pickup/drop-off location, and contact details with the driver assigned to your booking.

Payment Processors: We share payment information with our secure payment processing partners to process transactions.

Service Providers: We use third-party service providers for hosting, analytics (including Google Analytics on our website, only with your consent; see Cookies below), and customer support. These providers are bound by data processing agreements and may only process your data on our instructions.

Legal Authorities: We may disclose your data to law enforcement or regulatory authorities where required by law or to protect the safety of our users.

We do not sell your personal data to third parties.

7. Data Retention

We retain your personal data for as long as necessary to provide our services and comply with our legal obligations. Specifically:

Account data is retained for the duration of your account and for 3 years after account closure. Booking data is retained for 7 years for tax and legal compliance purposes. Agreement records are kept for as long as the agreement applies and for 7 years after it ends. Location data is deleted within 90 days of the booking being completed. Communication records are retained for 2 years.

8. Your Rights

Under GDPR, you have the following rights regarding your personal data:

Right of Access: You can request a copy of the personal data we hold about you.

Right to Rectification: You can request that we correct any inaccurate or incomplete data.

Right to Erasure: You can request that we delete your personal data in certain circumstances.

Right to Restriction: You can request that we restrict the processing of your data in certain circumstances.

Right to Data Portability: You can request a copy of your data in a structured, machine-readable format.

Right to Object: You can object to the processing of your data for direct marketing or where we rely on legitimate interests.

To exercise any of these rights, please contact us at privacy@thevanapp.com. We will respond within 30 days.

9. Cookies

Analytics cookies (only if you accept): With your consent, our website uses Google Analytics, provided by Google Ireland Limited, to count visits and understand which pages are useful. It sets cookies named _ga and _ga_<ID>, which last up to 2 years, and collects information such as the pages you view, how you arrived at our site, your device and browser type and your approximate location (city or country). Google Analytics does not store your IP address. We do not use these cookies for advertising.

Google Analytics is not loaded and these cookies are not set until you choose Accept all on the cookie banner. If you choose Reject all, nothing is set. Your choice is saved in your browser, and you can change it at any time with the Cookie settings link at the bottom of every page, or by clearing your browser's site data.

Strictly necessary storage: Our website does not need cookies to work. Our apps may use similar technologies that are needed for them to work, such as keeping you signed in.

10. Contact and Complaints

If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer at privacy@thevanapp.com.

You also have the right to lodge a complaint with the Office of the Information and Data Protection Commissioner (IDPC) in Malta at idpc.org.mt if you believe we have not handled your data in accordance with applicable law.

If you have any questions about this document, please contact us at info@thevanapp.com or +356 7707 2071.

WhatsApp