Privacy Policy

How TR Link Ltd collects, uses, and protects your personal data

Effective: 1 January 2026 · Last Updated: 23 September 2026

Company: TR Link Ltd ("we", "us", "our", or "TR Link")
Platform: Tr Link Ltd software products

1. Introduction & Overview

TR Link Ltd is dedicated to safeguarding the personal data and privacy rights of our users, customers, event organizers, volunteers, and delivery drivers. This Privacy Policy details how TR Link Ltd collects, utilizes, discloses, processes, and protects your information when you interact with our web platforms, mobile delivery interfaces, QR-code order portals, and related logistics services.

By accessing or using any services provided by TR Link Ltd, you acknowledge that you have read, understood, and consented to the practices described in this policy.

2. Information We Collect

We collect information strictly necessary to provide food fair logistics, order fulfillment, packaging verification, and delivery operations:

A. Information You Provide Directly

  • Account & Profile Data: Name, email address, phone number, organization name, role credentials (such as Super Admin, Project Creator, Packer, Driver, or Customer).
  • Order & Recipient Information: Customer full name, delivery street address, suburb, postal code, contact phone numbers, delivery instructions, ordered food products, and dietary/portion notes.
  • Customer Verification & Proof of Delivery: Digital signatures, drop-off verification photos, and unique delivery verification PINs.
  • Communications: Inquiries, feedback, support messages, or email reminder responses submitted through our communication services.

B. Information Collected Automatically

  • Real-Time Geolocation & GPS Tracking: When delivery drivers activate their shift or mark orders as "Delivering", our platform collects real-time GPS coordinates to calculate optimal routing, broadcast live delivery ETAs, update dispatch radars, and verify arrival at destination hubs. Driver GPS tracking is active strictly during online shifts and delivery runs.
  • Device & Usage Telemetry: Browser type and version, operating system, IP address, request timestamps, access logs, and referral URLs.
  • Cookies & Local Storage: We use local storage and essential session tokens to preserve authentication sessions, offline manifests, driver route state, and project selections across browser reloads.

3. How We Use Your Information

TR Link Ltd uses collected data for transparent and legitimate business purposes, including:

  • Fulfillment & Logistics: Processing meal packaging manifests, scheduling delivery sequences, generating QR dispatch manifests, and routing delivery runs.
  • Real-Time Tracking & Dispatch: Providing dispatch coordinators and customers with live delivery ETAs, map routes, and driver transit status.
  • Automated Notifications: Sending automated order confirmations, packing alerts, payment receipts, and delivery arrival notifications via email or SMS.
  • Account Administration & Security: Authenticating users, maintaining role-based access control (RBAC), auditing critical project actions, preventing fraudulent access, and enforcing security policies.
  • Customer Support & Service Improvement: Investigating dispatch issues, analyzing delivery route efficiencies, and resolving fulfillment inquiries.

4. Legal Basis for Processing

  • Contractual Performance: Processing is necessary to fulfill orders, coordinate packaging, and execute deliveries requested by customers or event organizers.
  • Legitimate Interests: Operating, optimizing, and securing our logistics software, preventing fraudulent activities, and ensuring timely food distribution.
  • Legal Compliance: Fulfilling statutory requirements, food safety documentation, and tax/accounting obligations.
  • Consent: When you explicitly grant location permissions or opt-in to non-essential communications.

5. Sharing and Disclosure of Information

TR Link Ltd respects your personal information. We do not sell, rent, or trade your personal data to advertisers or third-party data brokers. We only disclose data in the following restricted scenarios:

  • Project Organizers & Delivery Personnel: Authorized event coordinators, packers, and assigned drivers receive only the delivery address, recipient name, phone number, and order items necessary to pack and deliver goods.
  • Trusted Service Providers: We partner with enterprise cloud infrastructure providers (such as Google Cloud Platform, Firebase for secure database hosting, and Google Maps Platform for geocoding and routing APIs). All providers adhere to industry-standard data security and confidentiality agreements.
  • Legal and Regulatory Compliance: Where required by law, subpoena, court order, or governmental authority, or to protect the safety, rights, and property of TR Link Ltd, our users, or the public.
  • Business Transfers: In the event of a merger, acquisition, restructuring, or asset transfer, user data may be transferred subject to the acquirer honoring this Privacy Policy.

6. Location Tracking & Driver Privacy

  • Selective Tracking: Driver GPS location is captured only when a driver is authenticated, toggled "Online", or actively carrying out an assigned delivery trip.
  • Zero Offline Tracking: When a driver toggles "Offline" or finishes their assigned runs, location collection immediately ceases.
  • Transparency: Drivers can verify their GPS transmission status directly on the Driver App dashboard at any time.

7. Data Security and Protection

  • All data transmissions are encrypted in transit using industry-standard TLS/HTTPS protocols.
  • Cloud databases are protected by multi-tenant role-based security rules, preventing unauthorized cross-project data leakage.
  • Production systems are monitored with tamper-evident audit logging for sensitive actions.
  • Access to production databases is strictly restricted to authorized administrative personnel.

8. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy, satisfy legal, tax, or accounting requirements, and resolve potential disputes.

9. Your Rights and Choices

  • Access & Portability: Request a copy of the personal information TR Link Ltd holds about you.
  • Correction: Request rectification of inaccurate, outdated, or incomplete records.
  • Deletion: Request erasure of your personal data where retention is no longer legally mandated.
  • Withdraw Consent: Revoke location or notification permissions at any time via your browser or mobile device settings.
  • Lodge a Complaint: Lodge a complaint with your local data protection authority or the Office of the Privacy Commissioner.

10. Children's Privacy

Our platform is not directed to individuals under the age of 16. We do not knowingly collect personal information from minors without parental or guardian consent.

11. Changes to This Privacy Policy

TR Link Ltd may update this Privacy Policy periodically to reflect technological advancements, operational changes, or legal amendments. The updated policy will be posted on this page with an updated "Last Updated" timestamp.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or how TR Link Ltd handles your personal data, please contact our privacy compliance team:

Company: TR Link Ltd
Attention: Privacy & Data Protection Officer
Email: info@tr-link.co.nz / info@tr-link.co.nz
Corporate Inquiries: info@tr-link.co.nz
Address: Auckland, New Zealand