Privacy Policy

Effective Date: August 22, 2026

NDPR & Nigeria Data Protection Act Compliant

1. Introduction

Sanga Eats Nigeria Limited (“Sanga Eats,” “we,” “us”) is committed to protecting personal data in compliance with:

  • Nigeria Data Protection Regulation (NDPR) 2019
  • Nigeria Data Protection Act 2023
  • Applicable CBN and FCCPC regulations

2. Data We Collect

A. Customers

  • Name
  • Phone number
  • Email
  • Delivery address
  • Payment details
  • Device/IP information
  • Precise location (while the app is in use)

B. Riders

  • Name & phone number
  • BVN/NIN (where required)
  • Driver's license
  • Vehicle details
  • Bank details
  • Precise location (including in the background while online)

C. Merchants

  • Business name
  • CAC registration
  • TIN (if applicable)
  • Bank details
  • Business address
  • Precise location (while the app is in use)

3. Legal Basis for Processing

We process personal data based on:

  • Contract performance
  • Legal compliance
  • Legitimate business interest
  • User consent

4. Purpose of Processing

We use data to facilitate orders, process payments, verify identity (KYC), prevent fraud, improve platform services, and comply with Nigerian laws.

5. Location Data

Our apps collect location data in order to operate deliveries. What we collect depends on which app you use.

Sanga (customers and merchants)

We collect precise location only while the app is open and in use, to set and confirm a delivery address, show nearby vendors, and display an order on a map. We do not collect location from this app in the background.

Sanga Driver (riders)

We collect precise location, including direction of travel, while a rider is signed in and set to online, and while a rider is viewing a pickup or an active delivery.

Background collection.When a rider goes online, collection continues in the background even when the app is closed or not in use, so that we can offer trips nearby and keep delivery status live. On Android this is shown by a persistent notification reading “Sanga Driver is active”. On iOS the system background location indicator is shown. Collection stops when the rider goes offline.

Why we collect it

  • Matching riders with delivery requests near them
  • Showing a rider’s live position to the customer and merchant on an active delivery
  • Navigation, distance, and estimated arrival times
  • Confirming pickup and drop-off

Who we share it with

A rider’s live location is shown to the customer and the merchant for the delivery currently being handled. We send coordinates to Google Maps Platform, including its Routes, Places, and Geocoding services, to draw maps, calculate routes, and convert coordinates into street addresses. Google’s handling of that data is governed by the Google Privacy Policy. We do not sell location data, and we do not share it for advertising.

Retention and your choices

Location recorded against a completed delivery is retained on the basis set out in Section 7 (Data Retention). Location may be turned off at any time in device settings, and riders can go offline in the app to stop background collection. Deliveries cannot be offered or completed while location is denied, so those functions will not work.

6. Data Sharing

We may share data with payment processors (e.g., licensed PSPs), logistics partners, regulatory authorities, and law enforcement (where legally required). We do not sell personal data.

7. Data Retention

Personal data is retained only as long as necessary for contract fulfillment, legal and tax compliance, and fraud prevention.

8. Data Subject Rights

Under NDPR and Nigeria Data Protection Act, users may:

  • Request access to personal data
  • Request correction
  • Request deletion
  • Withdraw consent
File complaint with the Nigeria Data Protection Commission (NDPC)

Requests may be sent to: privacy@sangaeats.ng

9. Security Measures

We implement encryption, secure server infrastructure, access control policies, KYC verification, and fraud monitoring systems.

10. Cross-Border Transfers

Where data is transferred outside Nigeria, such transfer shall comply with NDPR cross-border data transfer requirements.

11. Data Protection Officer

Sanga Eats shall designate a Data Protection Officer (DPO). Contact: privacy@sangaeats.ng

12. Policy Updates

We may update this Policy periodically. Continued use of the Platform constitutes acceptance.