Privacy Policy

Effective Date: May 12, 2026

NDPR & Nigeria Data Protection Act Compliant

1. Introduction

Sanga Eats Nigeria Limited (“Sanga Eats,” “we,” “us”) is committed to protecting personal data in compliance with:

  • Nigeria Data Protection Regulation (NDPR) 2019
  • Nigeria Data Protection Act 2023
  • Applicable CBN and FCCPC regulations

2. Data We Collect

A. Customers

  • Name
  • Phone number
  • Email
  • Delivery address
  • Payment details
  • Device/IP information

B. Riders

  • Name & phone number
  • BVN/NIN (where required)
  • Driver's license
  • Vehicle details
  • Bank details

C. Merchants

  • Business name
  • CAC registration
  • TIN (if applicable)
  • Bank details
  • Business address

3. Legal Basis for Processing

We process personal data based on:

  • Contract performance
  • Legal compliance
  • Legitimate business interest
  • User consent

4. Purpose of Processing

We use data to facilitate orders, process payments, verify identity (KYC), prevent fraud, improve platform services, and comply with Nigerian laws.

5. Data Sharing

We may share data with payment processors (e.g., licensed PSPs), logistics partners, regulatory authorities, and law enforcement (where legally required). We do not sell personal data.

6. Data Retention

Personal data is retained only as long as necessary for contract fulfillment, legal and tax compliance, and fraud prevention.

7. Data Subject Rights

Under NDPR and Nigeria Data Protection Act, users may:

  • Request access to personal data
  • Request correction
  • Request deletion
  • Withdraw consent
File complaint with the Nigeria Data Protection Commission (NDPC)

Requests may be sent to: privacy@sangaeats.ng

8. Security Measures

We implement encryption, secure server infrastructure, access control policies, KYC verification, and fraud monitoring systems.

9. Cross-Border Transfers

Where data is transferred outside Nigeria, such transfer shall comply with NDPR cross-border data transfer requirements.

10. Data Protection Officer

Sanga Eats shall designate a Data Protection Officer (DPO). Contact: privacy@sangaeats.ng

11. Policy Updates

We may update this Policy periodically. Continued use of the Platform constitutes acceptance.