Legal
Delivery Partner Privacy Policy
Last updated: 16 September 2026
This policy is a standard-structure draft prepared to align with the Australian Privacy Principles (Privacy Act 1988 (Cth)). It should be reviewed by a qualified Australian lawyer before being treated as final or legally binding.
This page covers Delivery Partners (drivers) using our Delivery Partner app. If you're a customer using our website or account dashboard, see our Privacy Policy instead.
1. Who we are
Mumbai Dabbawala ("we", "us", "our") operates a meal-subscription service delivering home-style dabbas in Perth, Western Australia, using a network of Delivery Partners for pickup and delivery. This policy explains how we collect, hold, use and disclose the personal information of Delivery Partners in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).
Registered business name: Mumbai Dabbawala, operated by INDIAN DABBAWALA PTY LTD. ABN: 71 698 497 602. ACN: 698 497 602. Registered address: 2 Elmwood Ct, Marangaroo WA 6064, Australia.
2. Personal information we collect from Delivery Partners
When you apply to become, or work as, a Delivery Partner, we may collect:
  • Identity and contact details — name, date of birth, email address, mobile number
  • Account credentials and authentication data (e.g. one-time codes, session tokens)
  • Driver application details — name, email, phone number and any message you submit when applying to become a Delivery Partner
  • Vehicle and compliance details — vehicle type, insurance status, assigned delivery zone(s)
  • Emergency contact and safety details — emergency contact name/phone, date of birth, blood group, home address, where provided
  • Employment and payroll details — employment type, department, pay rate, and payslip breakdowns (gross pay, deductions, net pay), where you are engaged as paid staff
  • Attendance records — punch-in/punch-out times and shift history
  • Device push-notification token — used to send shift, dispatch and delivery notifications
3. Precise location, camera and microphone access
The Delivery Partner app requests, and — where you grant it — collects:
  • Precise, real-time location data — collected while you are on shift, for live route navigation, dispatch, and to show a customer your delivery's real-time progress on their tracking map. Also recorded at the moment of a punch-in/punch-out to confirm you are within the expected work area (geofencing).
  • Photos — proof-of-delivery photos taken when you complete a delivery, and a punch-in/punch-out photo taken for attendance verification.
  • Camera and microphone access — the device camera is used to take the photos above; our camera component can technically also access the microphone (a capability of the underlying camera library), but we do not record or use audio at any point.
Each of these permissions is requested with a real, on-device explanation of why it is needed, and declining a required permission (e.g. location) will limit or disable the corresponding feature (e.g. live dispatch/navigation) — consistent with Apple App Store and Google Play platform requirements for permission disclosure.
4. How we collect it
We collect this information directly from you — applying to join, completing onboarding, punching in/out, or making a delivery. Where reasonable and practicable, we collect information directly from you rather than from third parties.
5. Why we collect, hold, use and disclose it
We use this information to:
  • Create and manage your Delivery Partner profile
  • Navigate delivery routes, dispatch you to orders, verify attendance, and show a customer their delivery's real-time progress
  • Run payroll and pay you and other staff engaged as paid employees
  • Send transactional communications (shift/dispatch notifications, attendance confirmations)
  • Provide support and respond to enquiries or complaints
  • Meet our legal, financial and regulatory obligations, including tax, payroll and work-health-and-safety record-keeping
6. Disclosure of personal information
We may disclose your personal information to third parties who help us operate the service, including payroll processing providers, IT hosting providers, and — where genuinely necessary for safety or dispatch — other delivery/logistics staff and contractors. We require these providers to protect your information consistently with the APPs. We do not sell personal information, and we do not use it for third-party advertising. We do not disclose personal information overseas except where a service provider we use processes data outside Australia as part of providing that service (e.g. a hosting provider) — in that case we take reasonable steps to ensure the overseas recipient does not breach the APPs.
7. Data security
We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure, including access controls, encryption in transit, and staff role-based permissions. No system is completely secure, and we cannot guarantee absolute security.
8. Access, correction and deletion
You can view and update most of your personal information directly from your profile in the Delivery Partner app. You may also:
  • Request a copy of the personal information we hold about you
  • Ask us to correct inaccurate or out-of-date information
  • Request account deletion from within the app, or by contacting us — financial, payroll and attendance records are retained only as long as required by law (e.g. tax and work-health-and-safety record-keeping)
To make an access, correction or deletion request that isn't available self-service, contact us using the details in section 10.
9. Notifications
We send shift, dispatch and delivery-status notifications to your device only where you have granted notification permission. You can change this at any time in your device settings.
10. Complaints and contact
If you believe we have breached the APPs or mishandled your personal information, contact us at support@mumbaidabbawala.com.au or by post at 2 Elmwood Ct, Marangaroo WA 6064, Australia. We will acknowledge your complaint and aim to resolve it within a reasonable time. If you are not satisfied with our response, you may refer your complaint to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
11. Changes to this policy
We may update this policy from time to time. The "last updated" date at the top of this page reflects the most recent revision.
Delivery Partner Privacy Policy — Mumbai Dabbawala