1. Who we are

SITÙCKA (“we”, “us”) operates an on-demand Platform for food delivery, grocery delivery, parcel and errand services, and related city commerce. This Privacy Policy explains what personal data we collect, why we use it, who we share it with, and the rights you have.

Depending on your city, a local SITÙCKA affiliate may be the controller of your account data. Processors (hosting, payments, SMS, maps) act on our instructions.

2. Data we collect

We collect information you give us, information created when you use the Platform, and limited information from partners.

Account and profile

• Name, phone number, email address, password hash, language, and profile photo if you upload one.
• Saved delivery addresses, map pins, labels (Home / Work), and default address.
• For vendors: shop name, type, logo, location, opening hours, bank or mobile-money payout details, commission setup, and staff logins.
• For drivers and riders: vehicle type, licence and identity documents submitted for KYC, availability status, and earnings records.

Orders and payments

• Cart contents, special instructions, order history, ratings, and support tickets.
• Payment method tokens, transaction IDs, COD collection status, refunds, and wallet movements. We do not store full card numbers on our servers when a PCI-compliant processor is used.

Location and device

• Approximate location to show nearby restaurants and stores; precise location while a delivery is active if you grant permission.
• Driver/rider GPS during an assigned task, used for dispatch, ETAs, and safety.
• Device type, app version, IP address, language, crash logs, and cookie identifiers (see our Cookie Policy).

Communications

• In-app chat, emails, OTPs, call recordings where legally allowed, and feedback you send to support.

3. How we use data

We use personal data to:

• Create and secure accounts, verify vendors, drivers, and riders;
• Match orders to vendors and assign drivers or riders;
• Process payments, commissions, payouts, and fraud checks;
• Show live tracking, ETAs, and proof of delivery;
• Personalise search, categories, and (with consent) offers;
• Send transactional messages — order status, OTPs, password resets;
• Send marketing only where the law allows and you have not opted out;
• Improve the product, train models on aggregated or de-identified data, and keep the Platform secure;
• Meet tax, accounting, dispute, and law-enforcement obligations.

Legal bases typically include performance of a contract, legitimate interests (security, improvement, limited direct marketing), consent (precise location, non-essential cookies, some marketing), and legal obligation.

4. Sharing

We share data only as needed to run the Platform:

• Vendors receive the customer name, phone, address, and order contents required to prepare and hand over an order.
• Drivers and riders receive pickup/drop-off details, contact number, and parcel notes for the active task. They must not keep this data after completion.
• Payment, SMS, maps, cloud hosting, and analytics providers process data under contract.
• Regulators, courts, or police when the law requires disclosure.
• A buyer of our business, under appropriate safeguards, if we reorganise or sell assets.

We do not sell your personal data.

5. International transfers

Servers or subprocessors may be located outside your country. Where we transfer data internationally we use appropriate safeguards such as contractual clauses and access controls.

6. Retention

We keep account data while your account is open. After closure we retain what we still need for legal claims, tax, anti-fraud, and accounting — typically up to several years depending on local law — then delete or irreversibly anonymise it. KYC images are kept only as long as licensing and safety reviews require. Location traces for completed deliveries are shortened or aggregated after a limited operational window.

7. Your rights

Subject to local law, you may request to:

• Access a copy of the personal data we hold about you;
• Correct inaccurate data (much of this you can edit in Settings or Addresses);
• Delete your account and associated data, except what we must keep;
• Object to or restrict certain processing, including marketing;
• Withdraw consent (for example location or cookies) without affecting prior lawful use;
• Port data you provided, in a common machine-readable format where technically feasible.

Use Help & Support or the privacy contact below. We may need to verify your identity. You may also complain to your local data protection authority.

8. Children

The Platform is not directed at children under 18. We do not knowingly create accounts for minors. If you believe a child has registered, contact us and we will close the account.

9. Security

We use encryption in transit, hashed passwords, role-based admin access, and monitoring. No online service is perfectly secure; please use a unique password and keep OTPs private.

10. Automated decisions

Fraud scoring, ETA calculation, and dispatch ranking may be automated. They do not produce legal effects solely by algorithm without human review where the law requires it. You can contest an automated block via support.

11. Updates

We will post changes on this page and update the “last updated” date. Material changes may also be announced in the app.

12. Contact

Privacy requests: Help & Support in the customer app, or the support email published in the site footer and Platform Settings. Please include the phone or email on the account so we can find your records.