Effective · 11 August 2026
Privacy Policy
This Privacy Policy explains how Digital Global Organisation OÜ (Estonian registry code 17438249, registered office Alvari tn 18-5, Lasnamäe linnaosa, 13627 Tallinn, Harju maakond, Estonia; "DIGI GO", "we", "us") processes personal data in connection with the DIGI GO mobile application, the digigo.ee website and related services (the "Platform").
We process personal data in accordance with the EU General Data Protection Regulation (GDPR, 2016/679) and the Estonian Personal Data Protection Act.
1. Controller and contact
The controller of your personal data is:
- Digital Global Organisation OÜ
- Registry code: 17438249
- Address: Alvari tn 18-5, Lasnamäe linnaosa, 13627 Tallinn, Harju maakond, Estonia
- Email: info@digigo.ee
For data protection queries please contact the same email address.
2. What data we collect
Account and identity
- first and last name;
- email address and phone number;
- for Couriers: personal identification code, ID document copy, driving licence (where relevant), Business Register entry, vehicle details and registration number;
- profile picture (if the User adds one).
Orders and delivery
- pickup and drop-off addresses;
- shipment description (contents, dimensions, weight, handling notes);
- in-app chat content;
- Courier location and route during the Order (GPS);
- Order status and timestamps.
Payments
- Order amounts, invoice data and payout details;
- we do not store full card details — payment processing takes place inside Stripe (Stripe Payments Europe Limited);
- Courier payout data (bank account, invoice number).
Ratings and reviews
- stars and optional comments given by Users.
Technical data
- device type, operating system and app version;
- language preference and time zone;
- essential cookies on the website — see section 9.
Customer support
- email correspondence content and metadata (time, sender, etc.).
3. Where the data comes from
We collect data primarily directly from the User at account creation and during use of the Platform. Some data is collected automatically (e.g. device info, GPS location with the Courier’s consent, Order metadata).
As part of Courier verification we may check public sources (e.g. the Estonian Business Register) and documents submitted by the Courier.
4. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Account creation and management | performance of contract — art 6(1)(b) |
| Matching, brokering and completing Orders | performance of contract — art 6(1)(b) |
| Processing payments and issuing invoices | performance of contract and legal obligation — art 6(1)(b), (c) |
| Verifying Courier identity and right to operate | legal obligation and legitimate interest (user safety, fraud prevention) — art 6(1)(c), (f) |
| Providing customer support | performance of contract and legitimate interest — art 6(1)(b), (f) |
| Security, fraud prevention and abuse detection | legitimate interest — art 6(1)(f) |
| Accounting and compliance with statutory obligations | legal obligation — art 6(1)(c) |
| Handling disputes and defending legal claims | legitimate interest — art 6(1)(f) |
| Improving the service and aggregated statistics | legitimate interest — art 6(1)(f) |
| Newsletters and marketing (where applicable) | consent — art 6(1)(a) (withdrawable at any time) |
6. Transfers outside the EU/EEA
Most processing takes place within the EU/EEA. Where a processor operates partly outside the EU, we secure the transfer using the European Commission’s Standard Contractual Clauses (SCC) or other safeguards under GDPR article 46.
7. Retention periods
- Account data — while the account exists and for 3 years after closure (to observe limitation periods).
- Orders, invoices and accounting records — 7 years, as required by the Estonian Accounting Act.
- Courier verification documents — until the need for verification ends and 3 years afterwards.
- In-app chat — 12 months after delivery.
- GPS location and route — live during the Order; historic route retained for 90 days to resolve disputes, then anonymised or deleted.
- Ratings and reviews — while the account exists; anonymised on account closure.
- Customer support correspondence — 3 years.
- Security and system logs — up to 12 months.
Where a legal claim or dispute requires longer retention, we retain the data until the claim is resolved.
8. Your rights
Under the GDPR you have the following rights:
- access — obtain a copy of your data;
- rectification — correct inaccurate data;
- erasure ("right to be forgotten") — where there is no legal basis to retain the data;
- restriction of processing — in certain circumstances;
- data portability — in a machine-readable format;
- object — where processing is based on legitimate interest;
- withdraw consent — where processing is based on consent;
- not be subject to solely automated decision-making — see section 10;
- lodge a complaint with the supervisory authority — in Estonia the Data Protection Inspectorate (info@aki.ee, tel +372 627 4135).
To exercise your rights, write to info@digigo.ee. We generally respond within 30 days.
10. Automated decision-making and profiling
10.1. The Platform does not carry out solely automated decision-making that would have legal or similarly significant effects on the User within the meaning of GDPR article 22.
10.2. We use algorithmic ranking to match Couriers to Orders (e.g. based on distance, rating and availability), but the final choice is made by the Sender.
10.3. For fraud prevention we may use automated signals, but any enforcement includes a human decision.
11. Security
We apply organisational and technical security measures, including:
- data encryption in transit (HTTPS/TLS);
- access control and audit logging;
- Data Processing Agreements with processors;
- staff training and confidentiality obligations;
- regular backups and an incident recovery plan.
In the event of a security incident we notify the Estonian Data Protection Inspectorate within 72 hours where required, and affected Users without undue delay.
12. Minors
The Platform is intended for persons aged 18 and over. We do not knowingly collect personal data from persons under 18. If we become aware of such an account, we will close it and delete the data.
13. Changes
We may update this Privacy Policy. We notify Users of material changes in advance via the app and/or email. The current version is always available at digigo.ee/en/privacy.
14. Contact
- Digital Global Organisation OÜ
- Alvari tn 18-5, Lasnamäe linnaosa, 13627 Tallinn, Harju maakond, Estonia
- Email: info@digigo.ee