Privacy Policy

Who operates Speedway

Speedway Global Operations Infrastructure Limited (Business Registration No. 81104297) is the legal entity operating Speedway services and is referred to in this policy as “Speedway”. Its registered office is Unit 2904-05, 29/F, Universal Trade Centre, 3 Arbuthnot Road, Central, Hong Kong S.A.R. Bestway and RaffsSync are trading names of Speedway. Privacy enquiries can be sent to [email protected] or [email protected].

Information we collect

• Account profile details such as name, phone number, email address, login identifiers, language preferences and support history.
• Go customer activity such as saved addresses, delivery notes, orders, bookings, baskets, payment status, refunds, disputes and support requests.
• Crew and driver activity such as assigned work, availability, route status, task events, delivery proof, attendance readiness and operational updates.
• Central and business activity such as business profile, staff roles, catalogues, orders, Cashier, production, service, customer display and back-of-house workflow events, settlement records and reporting data.
• CrewHQ workforce data such as staff profiles, roles, shifts, attendance events, approvals, 2FA status, device signals, telemetry, geo-location and biometric-style verification status where enabled.
• Payroll-ready and future payroll add-on records such as approved attendance, payee details, pay rates, deductions, reimbursements, payroll exports and employee self-service records where enabled by agreement.
• Technical and security information such as device type, browser, app version, IP address, diagnostics, logs, fraud-prevention signals and security events.

How we use information

• To provide and improve Speedway Go, Crew, Central, CrewHQ and related operational services.
• To process orders, bookings, deliveries, payments, settlements, refunds, disputes and support cases.
• To support fast, reliable and secure Speedway experiences across modern devices.
• To enable workforce visibility, attendance, telemetry, location-aware workflows, 2FA and verification features where configured.
• To prepare payroll-ready records, reports, exports and future payroll add-on workflows where enabled by the customer.
• To protect users, businesses, crews, drivers and Speedway from fraud, abuse, security incidents, service misuse and operational risk.
• To comply with applicable legal, accounting, tax, safety, payment, audit and regulatory requirements.

Location, telemetry and verification data

Speedway uses location, telemetry, device and verification signals to support delivery, dispatch, attendance, field visibility, fraud prevention, safety and service quality. Workforce monitoring, biometric-style verification, 2FA, geo-location and telemetry features are enabled according to customer configuration, staff notices, consent or lawful basis, operating policies and written agreements.

Google API Services and Limited Use

Speedway uses Google APIs for user-facing functionality such as Google Sign-In, account linking, maps, places, routing and location-related services. Speedway use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including Limited Use requirements. Speedway does not sell personal and sensitive user data.

Sharing and service providers

Speedway shares information only where needed to operate, secure, support or improve the service, or where required by law or written agreement. This can include payment providers, hosting providers, communications providers, mapping services, analytics, support tools, accounting/payroll integrations, fraud-prevention services, banks, regulators, professional advisers and authorised customer administrators.

Security

Speedway uses technical, organisational and operational safeguards designed to protect personal data and business data. These safeguards include secure access controls, role-aware permissions, encrypted transport, monitoring, logging, account protection, operational reviews and controlled access to production systems.

Retention and deletion

Speedway keeps information for as long as needed to provide services, support users, operate the business, meet legal/accounting/tax requirements, prevent fraud, resolve disputes, enforce agreements and maintain safety and security. Users and authorised business contacts can request account deletion or privacy support by contacting [email protected] or [email protected]. Some records remain retained where required for legal, security, accounting, payroll, dispute, audit or fraud-prevention purposes.

Your choices and rights

Users can contact Speedway to request access, correction, deletion, restriction or privacy support for personal data connected to Speedway services. Business and workforce records may also be subject to employer, customer, accounting, payroll, legal, safety or contractual retention requirements. Speedway will review requests according to the applicable service role, identity verification, customer agreement and legal requirements.

International operations and infrastructure

Speedway is incorporated in Hong Kong S.A.R. and operates services across multiple markets, including Indonesia. Speedway services may use RaffsSync Core, a Speedway trading and technology name, together with trusted service providers. Data may be processed, stored or supported from locations outside the user’s city or country where needed to operate secure, reliable and scalable services. Speedway applies operational safeguards and provider controls appropriate to the service and agreement.

Updates to this policy

Speedway updates this Privacy Policy as the platform, workforce services, integrations, legal requirements and operating model evolve. The latest version is published at Speedway.Global/privacy.