PERSONAL DATA PROTECTION AND PRIVACY POLICY

The data controller is:

WAZIEATS PLC
Douala, Deido
Cameroon
Website: www.wazieats.com
Email: contact@wazieats.com
Phone: +237 659 94 06 17

Requests regarding personal data protection may be sent to the contact details indicated above.

WaziEats seeks to uphold the following principles:

• collect only data strictly necessary for specified purposes;
• use data lawfully, fairly, and transparently;
• maintain information as accurate as possible;
• limit retention periods;
• protect information against unauthorized access, loss, or disclosure;
• restrict access to personnel and systems that require it;
• respect data subject rights.

WaziEats does not sell users' personal data to data brokers or advertisers.

Data categories depend on the services you use.

Identification and Contact Data

We may collect:

• first name and last name;
• phone number;
• email address;
• account identifier;
• address or geographic area;
• information necessary for account verification when required.

Order and Transaction Data

We may process:

• ordered products or services;
• quantities and selected options;
• order history;
• delivery details;
• payment-related details;
• transaction references;
• wallet or settlement information when required by the service.

Vendor, Producer, and Partner Data

Depending on services used, we may process:

• professional activity information;
• product catalogue;
• farm or business information;
• traceability data;
• vendor payment and payout information;
• verification documents when required.

Logistics Data

To execute pickup or delivery, we may process:

• pickup address;
• delivery address;
• recipient contact details;
• requested delivery times;
• package details;
• location data required for delivery execution.

Technical Data

We may collect technical data necessary for system operation and security, including:

• IP address;
• device type;
• browser;
• session information;
• technical logs;
• error reports and access attempt records.

WaziEats may provide a conversational assistant or other automated features allowing users to:

• search for products or services;
• place or prepare an order;
• request delivery;
• track an order;
• obtain customer support;
• provide account or business information.

When you use these features, we may process the content transmitted and details needed to understand and handle your request.

This may include:

• text messages;
• voice messages;
• images;
• documents;
• order or delivery details;
• relevant context from an ongoing conversation.

WaziEats limits the use of this information to providing the requested service, ensuring interaction continuity, maintaining security, and improving quality.

Certain WaziEats features may use artificial intelligence or automation technologies to understand inquiries, propose answers, extract useful information, or facilitate service execution.

The use of these technologies does not confer unlimited authority to automated systems over WaziEats accounts or data.

Significant operational or financial decisions remain governed by authoritative rules, controls, authorizations, and systems within WaziEats.

For example, a user mentioning a price, payment, balance, or delivery fee in a conversation is not sufficient to alter official records in our systems.

WaziEats may analyze certain interactions to:

• detect errors;
• evaluate response quality;
• improve request comprehension;
• prevent abuse;
• enhance security and reliability of automated services.

Where appropriate, WaziEats applies minimization, pseudonymization, or removal of directly identifiable elements.

Certain interactions may be used to improve systems and models operated for WaziEats services, where compatible with stated purposes and applicable legal bases.

Where regulation mandates specific consent for such use, it is obtained separately.

A conversation with our assistant does not automatically constitute blanket consent to train or improve models on all conversation data.

WaziEats may engage specialized service providers to deliver components of its services.

These may include providers for:

• hosting and IT infrastructure;
• artificial intelligence and automation;
• communications and messaging;
• payments;
• mapping and geocoding;
• cybersecurity;
• technical analytics;
• logistics.

These providers only receive information necessary to perform their services and are selected and bound in compliance with contractual and legal requirements.

The list of providers may change as WaziEats evolves and enhances its infrastructure.

We request users never to communicate unnecessary confidential credentials in conversations, including:

• passwords;
• PIN codes;
• OTP verification codes;
• private keys;
• API keys;
• Mobile Money secret codes;
• full bank card numbers;
• other authentication secrets.

WaziEats implements measures to mitigate exposure of such information when detected.

Particularly sensitive data is subject to enhanced protections pursuant to applicable regulations.

Where offered, the WaziEats Credit Score (« WCS ») may use information relating to commercial activity, transaction history, payments, and activity regularity.

Data used must have a relevant relationship to the scoring purpose.

Where an automated decision produces legal effects or significantly affects an individual and applicable legislation provides specific safeguards, the individual may request human intervention, express their viewpoint, and contest the decision.

WaziEats may process personal data to:

• create and manage user accounts;
• provide requested services;
• process and track orders;
• arrange pickup or delivery;
• process payments;
• manage vendors and partners;
• ensure product traceability;
• provide customer support;
• operate conversational and automated features;
• prevent fraud and abuse;
• ensure systems security;
• comply with legal obligations;
• improve services;
• send authorized communications.

Processing may be based on contract execution, pre-contractual steps, legal obligation, consent, or legitimate interest under applicable law.

Data may be collected directly from you.

It may also originate from other transaction participants, such as a vendor, courier, partner, or enterprise client.

Certain details are generated automatically when using services, including:

• order status;
• transaction history;
• technical events;
• security logs;
• information necessary for delivery fulfillment.

Personal data may be accessible to:

• authorized WaziEats personnel;
• vendors or partners involved in a transaction;
• couriers as necessary for delivery;
• technical service providers acting for WaziEats;
• payment service providers;
• competent authorities where legally required.

Where individual data is unnecessary, WaziEats prioritizes aggregated or anonymized data.

Certain service providers or partners may process data outside Cameroon.

In such cases, WaziEats implements formalities and safeguards required by applicable regulations.

Where the GDPR applies, WaziEats utilizes compliant international transfer mechanisms.

Certain logistics features require location data.

This information may be used to:

• determine pickup or delivery addresses;
• organize routes;
• track delivery progress;
• determine courier availability or proximity.

Precise location is only utilized when necessary for the relevant service.

Data is retained for the duration necessary for the purposes for which it was collected.

Certain information may be retained longer where required by law, notably for accounting, tax, contractual, or litigation requirements.

Different data categories may have different retention periods. For example, support chats, location points, accounting vouchers, and security logs carry distinct periods.

Upon expiry, data is deleted, anonymized, or archived as permitted or required by regulation.

WaziEats may use cookies or similar technologies necessary for site operation or to measure and improve usability.

Trackers requiring user consent are only deployed following consent, in accordance with applicable rules.

Users can modify cookie preferences through cookie management tools available on the service.

WaziEats implements proportionate technical and organizational measures to safeguard personal data.

These measures include:

• access controls;
• authentication;
• communications encryption;
• privilege management;
• system monitoring;
• backups;
• restricted access to sensitive environments;
• incident management procedures.

As no system can guarantee absolute security, WaziEats regularly reassesses service-related risks.

In the event of an incident compromising personal data, WaziEats assesses the nature of the incident, affected information, and risks to individuals.

Where applicable regulations mandate notification to competent authorities or affected individuals, WaziEats proceeds with required notifications within legal timeframes.

Subject to conditions and exceptions provided by applicable regulations, you may possess:

• a right of access;
• a right to rectification;
• a right to erasure;
• a right to restriction of processing;
• a right to object;
• a right to data portability where applicable;
• a right to withdraw consent;
• specific rights regarding certain automated decisions.

You may submit your request to: contact@wazieats.com

Reasonable identity verification may be requested to prevent unauthorized disclosure.

You may also contact us if you seek information regarding the use of your data by automated features provided by WaziEats.

Where applicable regulation confers a right to object, withdraw consent, or delete data regarding system improvement, you may exercise this right with WaziEats.

Exercise of this right remains subject to applicable legal exceptions and does not impede processing strictly necessary to provide a service you requested.

WaziEats services are primarily intended for individuals legally capable of entering into transactions.

Where WaziEats offers services accessible to minors, appropriate protections and authorization mechanisms are implemented.

WaziEats does not knowingly collect personal data from minors where processing is not legally authorized.

WaziEats may send communications regarding services, promotions, or offers where authorized by law.

Where consent is required, you may withdraw it at any time.

Transactional messages required for order fulfillment, account security, payment, or delivery do not constitute commercial advertising.

If you believe your personal data has been handled improperly, you may contact WaziEats at: contact@wazieats.com

We will examine your request in accordance with applicable rules.

Where legally entitled, you may also lodge a complaint with the competent data protection authority.

WaziEats may amend this policy to reflect:

• evolution of its services;
• regulatory changes;
• new features;
• changes in service providers;
• updates to security or data protection measures.

In case of material changes concerning the use of personal data, WaziEats will take appropriate measures to inform affected persons.

The date displayed at the top of this policy indicates its current version.

For any questions regarding your personal data or this Privacy Policy:

WAZIEATS PLC
Douala, Deido – Cameroon
Email: contact@wazieats.com
Phone: +237 659 94 06 17
Website: www.wazieats.com