Effective · 11 August 2026

Privacy Policy

This Privacy Policy explains how Digital Global Organisation OÜ (Estonian registry code 17438249, registered office Alvari tn 18-5, Lasnamäe linnaosa, 13627 Tallinn, Harju maakond, Estonia; "DIGI GO", "we", "us") processes personal data in connection with the DIGI GO mobile application, the digigo.ee website and related services (the "Platform").

We process personal data in accordance with the EU General Data Protection Regulation (GDPR, 2016/679) and the Estonian Personal Data Protection Act.

1. Controller and contact

The controller of your personal data is:

  • Digital Global Organisation OÜ
  • Registry code: 17438249
  • Address: Alvari tn 18-5, Lasnamäe linnaosa, 13627 Tallinn, Harju maakond, Estonia
  • Email: info@digigo.ee

For data protection queries please contact the same email address.

2. What data we collect

Account and identity

  • first and last name;
  • email address and phone number;
  • for Couriers: personal identification code, ID document copy, driving licence (where relevant), Business Register entry, vehicle details and registration number;
  • profile picture (if the User adds one).

Orders and delivery

  • pickup and drop-off addresses;
  • shipment description (contents, dimensions, weight, handling notes);
  • in-app chat content;
  • Courier location and route during the Order (GPS);
  • Order status and timestamps.

Payments

  • Order amounts, invoice data and payout details;
  • we do not store full card details — payment processing takes place inside Stripe (Stripe Payments Europe Limited);
  • Courier payout data (bank account, invoice number).

Ratings and reviews

  • stars and optional comments given by Users.

Technical data

  • device type, operating system and app version;
  • language preference and time zone;
  • essential cookies on the website — see section 9.

Customer support

  • email correspondence content and metadata (time, sender, etc.).

3. Where the data comes from

We collect data primarily directly from the User at account creation and during use of the Platform. Some data is collected automatically (e.g. device info, GPS location with the Courier’s consent, Order metadata).

As part of Courier verification we may check public sources (e.g. the Estonian Business Register) and documents submitted by the Courier.

4. Purposes and legal bases

PurposeLegal basis (GDPR)
Account creation and managementperformance of contract — art 6(1)(b)
Matching, brokering and completing Ordersperformance of contract — art 6(1)(b)
Processing payments and issuing invoicesperformance of contract and legal obligation — art 6(1)(b), (c)
Verifying Courier identity and right to operatelegal obligation and legitimate interest (user safety, fraud prevention) — art 6(1)(c), (f)
Providing customer supportperformance of contract and legitimate interest — art 6(1)(b), (f)
Security, fraud prevention and abuse detectionlegitimate interest — art 6(1)(f)
Accounting and compliance with statutory obligationslegal obligation — art 6(1)(c)
Handling disputes and defending legal claimslegitimate interest — art 6(1)(f)
Improving the service and aggregated statisticslegitimate interest — art 6(1)(f)
Newsletters and marketing (where applicable)consent — art 6(1)(a) (withdrawable at any time)

5. Sharing data

We share data only where necessary with the following recipients:

  • The other party to your Order — between the Sender and the Courier we share name, phone number (in-app chat may mask the personal number where technically supported), pickup and drop-off addresses, vehicle info, rating and Order details. This sharing is unavoidable in order to arrange the delivery.
  • Payment service provider — Stripe Payments Europe Limited (Ireland); see the Stripe privacy policy.
  • Map and routing providers — to display maps and routes on the Platform.
  • Customer support and infrastructure providers — cloud hosting, email delivery, error monitoring. They act as processors on our instructions and are bound by a GDPR-compliant Data Processing Agreement.
  • Accountants and auditors — where legally required.
  • Public authorities — courts, investigative bodies and supervisory authorities on the basis of a legal obligation.
  • In the event of corporate reorganisation — a possible successor entity; in that case we notify Users in advance.

We do not sell personal data to third parties for advertising or marketing purposes.

6. Transfers outside the EU/EEA

Most processing takes place within the EU/EEA. Where a processor operates partly outside the EU, we secure the transfer using the European Commission’s Standard Contractual Clauses (SCC) or other safeguards under GDPR article 46.

7. Retention periods

  • Account data — while the account exists and for 3 years after closure (to observe limitation periods).
  • Orders, invoices and accounting records — 7 years, as required by the Estonian Accounting Act.
  • Courier verification documents — until the need for verification ends and 3 years afterwards.
  • In-app chat — 12 months after delivery.
  • GPS location and route — live during the Order; historic route retained for 90 days to resolve disputes, then anonymised or deleted.
  • Ratings and reviews — while the account exists; anonymised on account closure.
  • Customer support correspondence — 3 years.
  • Security and system logs — up to 12 months.

Where a legal claim or dispute requires longer retention, we retain the data until the claim is resolved.

8. Your rights

Under the GDPR you have the following rights:

  • access — obtain a copy of your data;
  • rectification — correct inaccurate data;
  • erasure ("right to be forgotten") — where there is no legal basis to retain the data;
  • restriction of processing — in certain circumstances;
  • data portability — in a machine-readable format;
  • object — where processing is based on legitimate interest;
  • withdraw consent — where processing is based on consent;
  • not be subject to solely automated decision-making — see section 10;
  • lodge a complaint with the supervisory authority — in Estonia the Data Protection Inspectorate (info@aki.ee, tel +372 627 4135).

To exercise your rights, write to info@digigo.ee. We generally respond within 30 days.

9. Cookies

On the website we use only essential cookies (e.g. language preference and session management), which are technically necessary for the service to function. These cookies do not require separate consent under GDPR article 6(1)(f) and the exemption in § 5(3) of the ePrivacy Directive.

We do not use marketing or tracking cookies or third-party analytics.

10. Automated decision-making and profiling

10.1. The Platform does not carry out solely automated decision-making that would have legal or similarly significant effects on the User within the meaning of GDPR article 22.

10.2. We use algorithmic ranking to match Couriers to Orders (e.g. based on distance, rating and availability), but the final choice is made by the Sender.

10.3. For fraud prevention we may use automated signals, but any enforcement includes a human decision.

11. Security

We apply organisational and technical security measures, including:

  • data encryption in transit (HTTPS/TLS);
  • access control and audit logging;
  • Data Processing Agreements with processors;
  • staff training and confidentiality obligations;
  • regular backups and an incident recovery plan.

In the event of a security incident we notify the Estonian Data Protection Inspectorate within 72 hours where required, and affected Users without undue delay.

12. Minors

The Platform is intended for persons aged 18 and over. We do not knowingly collect personal data from persons under 18. If we become aware of such an account, we will close it and delete the data.

13. Changes

We may update this Privacy Policy. We notify Users of material changes in advance via the app and/or email. The current version is always available at digigo.ee/en/privacy.

14. Contact

  • Digital Global Organisation OÜ
  • Alvari tn 18-5, Lasnamäe linnaosa, 13627 Tallinn, Harju maakond, Estonia
  • Email: info@digigo.ee