Privacy Policy

---

Effective Date: October 23, 2025
Last Updated: October 23, 2025
Entity: On Ya Way Now Corp (“we,” “us,” “our”)
Website: https://onyawaynow.com

We respect your privacy. This policy describes how we collect, use, share, and protect personal information in connection with our courier, logistics, and digital services.

Provided by you: name, contact info, addresses, payment data (processed via Stripe), messages, and service details.

Automatically collected: IP address, browser/device type, geolocation, pages visited, cookies, and analytics.

From third parties: USPS, Coupa, SAM.gov, Stripe, or verified partners.

• Provide and improve services
   
• Process secure payments
   
• Verify identity and prevent fraud
   
• Comply with law and contracts
   
• Communicate updates, notices, and support
   

We never sell data. We share information only with:

• Trusted service providers (under confidentiality)
   
• Law enforcement or regulators when required
   
• Business transfers (if the company is sold or merged)
   

• HTTPS encryption
   
• PCI DSS–compliant payment processing
   
• Restricted access & least-privilege control
   
• Routine audits, patches, and encryption at rest
   

We keep data only as long as needed for operations or legal purposes, then delete or anonymize it in accordance with applicable regulations.

We also maintain records of data-access and deletion requests to demonstrate compliance with data-protection laws.

You have the right to:

• Access, correct, or delete your personal information
   
• Opt out of marketing communications
   
• Request portability or restriction (GDPR/CCPA)
   
• File complaints with regulators
   

If you wish to access, correct, delete, or transfer your personal information, please email privacy@onyawaynow.com with the subject line “Data Request (DSAR).”
We will respond within 30 days of receiving your verified request, as required by applicable law.

For your protection, we may request additional information to verify your identity before fulfilling any DSAR.
We maintain internal records of all DSARs and responses to comply with privacy regulations.

If we require additional time to process your request, we will notify you with an explanation.

• Contact details: name, business name, email, phone, and mailing address.
   
• Service details: delivery instructions, pickup and drop-off locations, notes.
   
• Account details: login credentials if you create an account.
   
• Payment information: processed securely by our payment processors (e.g., Stripe). We do not store full card numbers.
   
• Communications: messages sent by email, forms, chat, or phone.
   

• Device and usage data: IP address, browser, device type, pages visited, timestamps.
   
• Cookies, pixels, and similar technologies (see Cookies below).
   
• Approximate location derived from IP for security and fraud prevention.
   

• Payment processors (e.g., Stripe) regarding payment status and fraud signals.
   
• Government/enterprise platforms we integrate with (e.g., USPS, Coupa, SAM.gov) as required for contracts and compliance.
   
• Service providers (hosting, email, analytics) and publicly available sources.
   

• Provide, operate, and improve the Services, including routing and delivery.
   
• Process payments and manage invoices and refunds.
   
• Authenticate users, prevent fraud/abuse, and secure our systems.
   
• Communicate about orders, deliveries, support, and policy updates.
   
• Comply with contracts, law enforcement requests, and legal obligations.
   
• Analyze site performance and improve user experience.
   

We do not sell or rent personal information. We share limited data with:

• Service Providers under confidentiality and data-processing terms (payment processors, hosting, IT/security, email/SMS vendors, analytics, and operational partners).
   
• Government or Enterprise Platforms to fulfill contracts and legal requirements.
   
• Business Transfers related to mergers, acquisitions, or asset sales.
   
• Legal Compliance to protect rights, safety, or comply with law.
   

We retain personal information only as long as necessary for the purposes above, including legal, accounting, or reporting requirements.
When no longer needed, we delete or de-identify data.
We also log DSAR-related requests and responses to demonstrate compliance.

We use cookies and similar technologies to remember preferences, keep sessions secure, and analyze traffic (e.g., Google Analytics).
You can control cookies via your browser settings; some features may not function without them.
For detailed information, see our Cookie Policy.

• HTTPS (SSL/TLS) across the site.
   
• Payment processing via Stripe, a PCI DSS Level 1 validated provider. We do not store full card details.
   
• Role-based access controls and least-privilege permissions.
   
• Encrypted data at rest for sensitive records where applicable.
   
• Firewalling, logging, and routine patching and vulnerability checks.
   
• Vendor due diligence and data-processing agreements.
  No method of transmission or storage is 100% secure, but we continually enhance our safeguards.
   

You may exercise your data rights at any time by emailing privacy@onyawaynow.com.
We will verify your identity and respond within 30 days.
If you are a California or EEA/UK resident, you have additional rights as outlined below.

CCPA/CPRA (California):
California residents may request disclosure or deletion of personal information and opt out of “sharing” for cross-context behavioral advertising. We do not “sell” personal information as defined by CCPA.

GDPR (EEA/UK):
Where applicable, you may have rights to access, rectify, erase, restrict, or object to processing, and to request data portability. Our legal bases include contract performance, legitimate interests, legal obligations, and consent where required.

If we transfer personal data internationally, we use appropriate safeguards (e.g., Standard Contractual Clauses) to protect your information.

Our Services are intended for individuals aged 18 and older.
We do not knowingly collect data from children.
If we learn that a child’s information has been collected, we will delete it promptly.

Our site may link to or integrate with third-party services (e.g., USPS/Coupa, Stripe, Google Maps).
Those services have their own privacy policies, which govern their data practices.

We may update this Policy periodically.
All updates will be posted here with a new “Effective Date.”
Significant changes may also be communicated via email or website notice.

On Ya Way Now Corp
152 Presidents Dr, Durham, NC 27704
privacy@onyawaynow.com
(984) 985-3155
https://onyawaynow.com

© 2025 On Ya Way Now Corp. All rights reserved.

✅ This version is fully DSAR-compliant under GDPR, CCPA/CPRA, and general global privacy best practices — including:

• Identity verification
   
• 30-day response time
   
• Recordkeeping obligations
   
• Dedicated DSAR process section
   
• Clear contact method