Overview
Dunzo is a hyper-local delivery platform — pick up anything, deliver anywhere. From medicines to alcohol, documents to groceries, Dunzo delivery partners physically access customer locations with knowledge of what’s being delivered. This creates unique privacy concerns that most delivery platforms don’t face.
DPDP Readiness: Section-by-Section Analysis
Section 6 — Consent & Notice 🔴
Dunzo’s consent covers all delivery categories equally. But:
- Medicine pickup reveals health conditions
- Alcohol delivery reveals consumption habits
- Document delivery reveals professional/legal situations
- “Delivery from [specific store]” reveals brand preferences and spending
No granular consent for these sensitive delivery categories.
Section 9 — Data Retention 🔴
No retention timelines for:
- Delivery history (complete log of what was delivered where)
- Photo proofs of delivery (may capture home interiors, faces)
- Route data (delivery partner GPS trails to your location)
- Chat between customer and delivery partner
Section 11 — Rights of Data Principal 🔴
- Can users delete delivery history selectively (e.g., delete alcohol/medicine deliveries)?
- Delivery photos — who owns them? How long stored?
- No portability, no nomination
Risk Assessment
| Category | Risk Level | Potential Impact |
|---|---|---|
| Delivery category inference | Critical | Medicine/alcohol deliveries reveal sensitive info |
| Physical access data | Critical | Partners know home + what you receive |
| Photo proofs | High | Home interior captured |
| Data retention | High | Complete delivery diary indefinitely |
Recommendations
- Categorize deliveries by data sensitivity — Medicine and alcohol deliveries should have enhanced data handling
- Auto-delete delivery photos — Photo proofs deleted within 7 days of successful delivery
- Minimize partner information — Don’t show partners what’s inside sealed packages
- Define retention — “Active orders: until delivery; delivery history: 6 months; photos: 7 days; GPS trails: 48 hours”
How Does Your Policy Compare?
Analysis conducted by DPDP Consulting, a Meridian Bridge Strategy initiative. For a comprehensive compliance roadmap, book a free consultation.