Privacy Policy

1. Information we collect

We collect information that you provide directly, that is generated when you use the Service, and that we receive from devices and partners as described below. We aim to collect only what we need to run the marketplace, process orders, keep accounts secure, and meet legal obligations.

Account and profile

When you register or update your profile, we may collect your name, email address, phone number, password (stored using strong one-way hashing — we do not store your password in plain text), account role (for example customer, shop owner, driver), and business or profile details you choose to add (such as shop name, address, or delivery vehicle information where relevant).

Orders, payments, and logistics

To fulfil orders we process transaction and order data: items purchased, amounts, delivery addresses, geolocation or map pins you provide, status updates, escrow-related records, and identifiers needed to link payments to orders. Payment details may be collected and tokenized by our payment partners; we generally do not store full card numbers on our servers.

Usage, device, and diagnostics

We may collect technical data such as IP address, browser type and version, device type, operating system, approximate location derived from IP, timestamps, and usage patterns (for example pages viewed, features used, and error logs) to secure the Service, fix bugs, and understand aggregate usage.

Communications

When you use in-app chat, support tickets, or email with us, we process the content of those messages and related metadata (such as time sent) as needed to deliver the Service and assist you.

2. How we use your information

Depending on the context, we use personal information for purposes such as:

• Providing the Service: creating and managing accounts, displaying listings, processing carts and checkout, facilitating escrow and payouts, and coordinating delivery.
• Verification and trust: confirming identity or business details where required for onboarding or risk management.
• Communications: sending transactional messages about orders, security, and policy updates; where permitted, sending marketing or product updates (you can opt out of non-essential marketing where we offer that control).
• Safety and integrity: detecting, preventing, and investigating fraud, abuse, and violations of our Terms of Service.
• Improvement: analysing aggregated or de-identified trends to improve features and performance.
• Legal compliance: complying with applicable laws, regulations, court orders, and lawful requests from authorities.

3. Sharing of information

We may share personal information with the categories of recipients below, only as appropriate for the purposes in this Policy:

• Other users: for example sharing delivery address and contact details needed for fulfilment with the relevant shop and driver; chat messages with the participants in a conversation.
• Service providers: hosting, analytics, customer support tools, email delivery, maps, and payment processors — under contracts that require them to protect your information and use it only for the services they provide to us.
• Legal and safety: when we believe disclosure is required by law, to enforce our terms, to protect rights and safety, or in connection with a merger, acquisition, or asset sale (subject to appropriate safeguards).

We do not sell your personal information to third parties for their independent marketing. If we ever use personal data for materially new purposes, we will describe that and, where required, obtain consent or offer a choice.

4. Data retention and security

Retention

We retain personal information for as long as your account remains active, as needed to provide the Service, and as required to resolve disputes, enforce agreements, and meet legal, tax, and accounting obligations. Retention periods can vary by data type; when data is no longer needed, we delete or de-identify it in line with our internal policies, subject to legal holds.

Security

We implement reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, or alteration (such as encryption in transit where appropriate, access controls, and monitoring). No method of transmission or storage is completely secure; we encourage you to use a strong, unique password and to protect your login credentials.

5. Your rights

Depending on where you live, you may have rights regarding your personal information, such as the right to access, correct, or delete certain data, to object to or restrict particular processing, or to port data to another service where technically feasible. You can update much of your profile directly in account settings.

To exercise other rights or ask questions, contact us through the support or contact options available on the Service. We may need to verify your identity before fulfilling a request. If you are unsatisfied with our response, you may have the right to complain to a data protection authority in your jurisdiction where applicable law allows.

6. Cookies and similar technologies

We and our partners use cookies, local storage, and similar technologies to keep you signed in, remember preferences, measure traffic, and improve the Service. Some cookies are essential for the site to function; others help us understand usage in aggregate.

For categories of cookies, choices where available, and how to manage them, see our Cookie Policy.

7. Changes and contact

We may update this Privacy Policy from time to time. We will post the revised version on this page and change the “Last updated” date. If changes are material, we will provide additional notice where appropriate (for example by email or a prominent notice in the app). Continued use of the Service after the effective date means you acknowledge the updated Policy, unless applicable law requires your explicit consent for certain changes.

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us through the channels provided in the Shoboca app or website. For legal notices, use the contact method we designate for formal communications, if any.