Privacy Policy

Last updated: 2026-03-03

Introduction and Contact Information

Last updated: 03.03.2026.
This Privacy Policy explains how K.A.T Group SIA, registration No. 40203598613 (hereinafter - the Company), processes personal data when the “Pik-Up” mobile application (hereinafter - the Platform) is used.
The Platform provides an intermediary service between clients, couriers, carriers, specialists in various fields, merchants, and restaurants by offering a technological solution for requesting and performing services, making payments, and mutual communication. The Company provides a digital environment in which users may place orders, receive services, purchase goods, and organise deliveries, while the Platform functions as technical infrastructure for these transactions.
For any questions, please contact us:
Email: info@pik-up.com

1. Purposes of Data Processing

Personal data is processed for the following purposes:
1.1. creating and maintaining a User account;
1.2. identity verification, where required;
1.3. providing services on the Platform;
1.4. processing payments and administering settlements;
1.5. enabling communication between Clients and Providers;
1.6. ensuring security and preventing fraud;
1.7. improving the User experience;
1.8. fulfilling legal obligations;
1.9. resolving disputes and handling complaints.

2. Personal Data Processed

To ensure the operation, security, and troubleshooting of the Platform (including “Quick Jobs”, “Shared Rides”, and “E-commerce”), we process the following categories of data:
2.1. For all Users:
Identification data: name, surname, profile image.
Contact information: email address, telephone number.
Authentication data: SMS/email codes used to identify the User.
Technical data: IP address, device model, operating system, application version.
2.2. For Providers, Couriers, and Merchants (additional data):
Verification data (KYC): copy of an identity document (passport/ID), selfie photo (biometric data for identity verification), company registration data.
Financial data: payout account details, which may be collected directly by Stripe Connect during onboarding.
Professional information: qualification certificates, vehicle data (make, registration number).
2.3. Payment data:
We do not store full payment card numbers or card security codes. Stripe processes customer payments and payment method details. For accounting, support, refunds, and disputes, we process limited payment information such as Stripe identifiers, payment status, amount, currency, card brand, and the last four digits. Providers and Merchants submit identity, business, and payout account information to Stripe through Stripe Connect onboarding; we receive account, verification, capability, and payout statuses, as well as limited account details.
2.4. Geolocation data (GPS):
We collect precise location data when the application is running in the foreground (open) or in the background (if you are a Provider/Courier in work mode).
The data is used for routes, security, and dispute resolution.

3. Legal Basis and Reasons for Processing

4. Recipients of Personal Data

We protect your data and do not disclose it to third parties except where necessary for service provision:
4.1. Other Platform Users (during service performance):
If you are a Client: your name, telephone number, and delivery address/location are disclosed to the specific Courier or Provider who accepted your order so that they can perform it.
If you are a Provider: your name, profile image, current location (on the map), and vehicle registration number are shown to the Client.
4.2. Service providers:
Payments and payouts: the Stripe company applicable to the User receives payment amount, currency, order or subscription identifiers, payer and payment method data, and, for connected accounts, identity, business, and payout account data. Stripe uses this information to process payments, subscriptions, verification, transfers, payouts, refunds, disputes, fraud prevention, and legal compliance. Stripe-hosted onboarding also presents Stripe’s applicable service agreement and privacy policy.
IT infrastructure: cloud service providers (server hosting), SMS delivery services (authentication codes).
4.3. Law enforcement authorities:
Data may be provided to the police or the State Revenue Service only upon an official request and in accordance with Latvian law.

5. Access to Device Functions

The application requests permission to access:
Camera: required for ID verification, taking a profile photo, or adding photos to advertisements/work reports.
Location: required for route planning, service provision, and security. You may disable it in the device settings, but this will limit the operation of the application.

6. Data Retention Periods

We retain data only for as long as necessary:
Active account: data is retained for as long as you use the Platform.
Accounting data: invoices and payment history are retained for 5 years or as required by law.
KYC identity verification documents: used only for identity verification and not retained after verification is completed.
GPS data: retained for up to 30 days unless a security incident or dispute requires longer retention.
After account deletion: data is deleted or anonymised within 30 days unless there is a lawful basis for retaining it, such as pending litigation or debt recovery.

7. User Rights (“Right to Be Forgotten”)

Under the GDPR, you have the following rights:
Access your data: request information about what data is stored about you.
Correct inaccurate data: update outdated information in your profile.
Delete data (“right to be forgotten”): request deletion of your account and all data through the application settings or by email.
Exception: we cannot delete data that we are required to retain by law, such as invoices for completed transactions.
Withdraw consent: disable GPS or marketing emails at any time.
Submit a complaint to the Data State Inspectorate.
Requests may be submitted by email to: info@pik-up.com. We will respond within 30 days.

8. Security

We use modern technological measures (SSL encryption, secure servers, access controls, data minimisation, and restrictions) to protect your data against loss, theft, or unauthorised access.

9. Changes to this Policy

The Company may amend this Privacy Policy by publishing a new version on the Platform. Amendments enter into force upon publication.