Context

You, or your security team, want to understand what customer data Direct Delivery handles and how it's protected.

Answer

To deliver an order, Autolane handles only the information needed to complete the delivery:

• Your customer's name and contact details (so they can receive the tracking text and notifications)

• The delivery address

• The order and delivery details needed to fulfill and track it

How it's protected Customer data and personally identifiable information are treated as Confidential — Autolane's highest protection class:

• Encrypted both at rest and in transit

• Access is restricted to authorized personnel on a need-to-know basis

• Third-party providers that store or process this data are assessed against Autolane's security requirements

How long it's kept Autolane retains data only as long as there's a business need or a legal or contractual requirement. Customer data is deleted within 90 days of contract termination, and personal information is deleted or de-identified once it's no longer needed. Verified deletion requests from individuals are honored in line with applicable law.

What Direct Delivery does not involve Direct Delivery does not use Autolane cameras or capture images of people. The only data Autolane handles is the delivery information described above.

For full details, see Autolane's Data Management Policy and the Autolane Trust Center.