Privacy policy
Last updated: June 2025
Confidentiality and security are fundamental values of KANGURO. This means we are committed to guaranteeing the privacy of our customers' personal data at all times, and to collecting only the information we need, and nothing more.
Below you will find all the necessary information about the personal data we collect, how we process it, and your rights.
Who processes my personal data?
KANGURO DELIVERY S.L., (hereinafter, "KANGURO"), with NIF B06995302, and registered office at Pl. Ausiàs March 1, pl.2 of., 08195 – Sant Cugat del Vallès (Barcelona), and we will act as follows:
KANGURO may act as data controller or data processor when it establishes relationships in its own name or on behalf of a third party, in relation to the data of data subjects or natural persons who are the owners of personal data.
To that end, KANGURO informs that it makes available to all users of its social networks, the website https://kanguro.com/ (hereinafter, the "Website") and the Software it develops, the email address privacidad@kanguro.com for any query, communication or request for information.
KANGURO processes your data in accordance with REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
2. Who are the groups of data subjects?
The personal data collected and processed may come from the following data subjects:
Customers and Prospective Customers in relation to the use of KANGURO's website:
- Persons who provided us with their data through the various forms on the website to make enquiries or obtain information about our services.
- Persons who requested a quote for the services we offer.
- Persons who requested communications about news, products and services and/or promotions from KANGURO.
End Customers/Users of KANGURO:
- End customers/users who use the services offered by KANGURO in the manner they choose in accordance with our terms and conditions.
Software users:
- Suppliers: local businesses that use our services to acquire new customers through the management of packages delivered to their locations via logistics operators.
- Recipients: Users who have made a shipment through an e-commerce platform and have it delivered via a carrier (logistics provider), or who directly choose to make the shipment themselves.
- Delivery drivers.
Partner companies:
- Companies that share with us the personal data necessary to formalise a service contract, so as to provide services to our customers or users.
Candidates:
- Persons who submitted an application to enter recruitment processes.
Customers referred by third parties:
- Customers or end users who use KANGURO's services based on a third party's recommendation or through them.
Website visitors:
- Persons who browse our website and have accepted analytics cookies.
- Users of the chatbot embedded on KANGURO's website.
3. What personal data do we process?
Whether as controller or processor, we process different types of personal data, including:
- Contact information, such as name, email address and phone number.
- User account information, such as username and password.
- Payment information, such as details of KANGURO's physical and/or virtual card.
- Profile information, such as the company where you work, your employee identifier and your benefits model.
- Identity document.
4. For what purposes and on what legal basis do we use personal data?
At KANGURO we process your personal data for the following purposes:
| Purpose | Data subjects | Data categories | Legal basis | Retention period |
|---|---|---|---|---|
| Entering into, development and performance of the contract. The processing of personal data of contact persons of our customers and suppliers is necessary for the performance of the contract between KANGURO and our customers and suppliers, as well as for the maintenance, development and execution of the contractual relationship. | Customers Prospective customers Suppliers |
Identification data (name and surname) Contact data (address, corporate email) |
Performance of a contract | Once the services set out in the contract have been completed, the data contained therein will be retained for 6 years, duly blocked, without prejudice to data subjects having exercised their rights of erasure or objection prior to the expiry of that period. |
| Processing payments, collections and invoicing. At KANGURO, we will process our customers' data to send them invoices and collect the fees agreed in the service contract. Likewise, KANGURO will process its suppliers' data to make payment for the agreed services. | Customers Suppliers |
Identification data (name and surname) Contact data (address, corporate email) Banking data |
Performance of a contract | In accordance with Article 30 of the Spanish Commercial Code, data relating to invoicing will be retained for 6 years after it has been issued. |
| Responding to information or contact requests. At KANGURO we use the contact details provided to respond to your requests and enquiries about products and services, whether submitted through the form available on the websites or directed to the published contact email addresses or our WhatsApp. | Customers Prospective customers Website users |
Identification data (name and surname) Contact data (address, corporate email) |
Consent | Once the request has been resolved, personal data will be retained, duly blocked, for one year. |
| Sending commercial communications. KANGURO processes the contact details provided to inform data subjects who consented to receive commercial information. This information may relate to products, services, activities, news, and/or any promotion that may be of interest to them and related to KANGURO's activities. | Customers Prospective customers |
Identification data (name and surname) Contact data (address, corporate email) |
Consent | Data will be processed for this purpose for as long as the data subject does not duly withdraw their consent. |
| Sending commercial communications related to products or services. KANGURO processes the contact details provided to inform data subjects who consented to receive commercial information. This information may relate to products, services, activities, news and/or any promotion that may be of interest to them and related to KANGURO's activities. Likewise, KANGURO may carry out cross-selling actions, offering complementary or related products or services related to the data subject's activities that may be of interest to them. | Customers | Identification data (name and surname) Contact data (address, corporate email) Financial data |
Consent and legitimate interest | Data will be processed for this purpose for as long as the data subject does not duly withdraw their consent. |
| Analysis of website visits. KANGURO uses various techniques to collect information. These techniques may be used to obtain analytical data on visits to and navigation through our websites. These analytics rely on the use of external services that have their own privacy policy. | Website users | Online identifiers, including identification cookies. Internet Protocol (IP) addresses and device identifiers. Customer identifiers. Information contained in HTTP request headers. Information provided by the browser such as preferred language, time zone and others. Website browsing data: pages visited. |
Consent | Data will be retained in accordance with the terms identified in our Cookies Policy and the privacy policies of the analytics cookie providers. |
| Processing applications for open recruitment processes. KANGURO processes the personal data of persons who wish to apply for open recruitment processes at the company. | Candidates Employees |
Identification data (name and surname) Contact data (address, corporate email) Professional data (CV) |
Consent and, where applicable, performance of a contract | Candidates' data will be retained, after the closure of the recruitment process, for one year, in order to be able to contact them again if a new vacancy arises that might suit them. |
5. How do we protect personal data?
At KANGURO, we take technical and organisational security measures to protect your personal data and prevent its loss, misuse, unauthorised access or disclosure. Some of the measures we take include data encryption, restricted access to personal data, and regular training of our staff on data protection matters.
6. How do we store personal data?
We store your personal data on secure cloud servers located in the European Union. We maintain technical and organisational measures to ensure the security of personal data and prevent its loss, misuse, unauthorised access or disclosure.
7. Who has access to your personal data?
KANGURO will only share your personal data with third parties where it is necessary to provide you with our services, where you have asked us something that we need to respond to, or where we are legally obliged to do so. Likewise, your data may be shared with collaborating third parties where there is a legitimate interest related to the services offered and provided that such communication may represent a benefit or added value to you.
We may also communicate data to companies that provide us with services necessary for the ordinary and administrative activities of the company in their capacity as data processors, within the framework of the provision of services such as:
- Payment service and payment processing providers.
- Technology service providers, such as cloud hosting and data analytics service providers.
- Legal and financial advisors.
- Regulatory and governmental authorities, where necessary to comply with our legal obligations, or where legally required by them.
7.1. International data transfers
Currently, your personal data is located on servers within the European Economic Area (EEA). Likewise, some of our cloud service providers are also located outside the European Economic Area (EEA), in particular in the United States. In these cases, international transfers of personal data are made, exclusively where necessary for the provision of our services.
These transfers are carried out in compliance with the provisions of the General Data Protection Regulation (RGPD). In particular, adequate safeguards are applied to protect the data, such as: the EU-US Data Privacy Framework.
8. How do I exercise my rights in relation to my personal data?
Any person has the right to obtain information about the data that KANGURO is processing that belongs to them. These are your rights:
Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where applicable, to request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
In certain circumstances, data subjects may request the restriction of the processing of their data, in which case it will only be retained for the exercise or defence of claims.
In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. KANGURO will cease to process the data, unless there are compelling legitimate grounds, or for the exercise or defence of possible claims.
Portability: The data subject will have the right to receive the personal data concerning them, which they have provided to KANGURO, in a structured, commonly used and machine-readable format when: a) the processing is based on consent or a contract, and b) the processing is carried out by automated means.
We inform you of your right to lodge a complaint with the supervisory authority (Agencia Española de Protección de Datos — AEPD) in the event that the exercise of your rights set out herein has not been satisfactorily addressed.
To exercise the aforementioned rights, you may contact us at: privacidad@kanguro.com. When doing so, please provide the following details:
- Name and surname
- Contact email address
- Right you wish to exercise
- Data to which your request relates
We will resolve your request within a maximum period of one month, notifying you at the email address provided.
9. What is the retention period for your personal data?
We will retain your personal data for as long as is necessary to provide you with our services or to comply with our legal obligations. When we no longer need your personal data, it will be securely deleted or anonymised.
To consult a specific retention period, please refer to the tables in Section 4 of this Privacy Policy.
10. Changes to our Privacy Policy
We reserve the right to update this privacy policy at any time. If we make significant changes to this Privacy Policy, we will inform you by publishing a notice in our application or on our website, or through other appropriate means.
11. Contact details
If you have any questions or concerns about this privacy policy or about how we process your personal data, you may contact us by post at Pl. Ausiàs March 1, pl.1 of 10., 08195 – Sant Cugat del Vallès (Barcelona) or by email at privacidad@kanguro.com.