Etunganun Crave Spot

Legal

Privacy notice

Last updated 3 May 2026. In accordance with Uganda's Data Protection and Privacy Act, 2019 (UDPPA).

1. Who we are

Etunganun Crave Spot is the data controller for personal information collected through this website, our staff apps, and our WhatsApp and SMS channels.

2. What we collect

  • Contact details: name, phone number, optional email.
  • Delivery details: area, village, road, landmark, GPS pin, and written directions.
  • Order details: items, modifiers, totals, payment method, payment references.
  • Rider telemetry while a delivery is active: GPS position, vehicle, and route events.
  • Device data needed for service: IP address, user agent, language.

3. How we use it

We process your data to take and fulfil your orders, route our riders, verify payments with MTN, Airtel, Pesapal and PawaPay, respond to support requests, and send order-status messages by WhatsApp and SMS. Marketing messages are only sent where you have opted in and you can opt out at any time.

4. Lawful basis

We process personal data on the basis of your consent (given when you place an order), to perform the contract between you and us, to meet our legal obligations (tax, regulatory), and for our legitimate business interest in running a safe and efficient delivery service.

5. Who we share it with

Payment processors (MTN MoMo, Airtel Money, Pesapal, PawaPay), mapping and routing (TomTom), messaging providers (Meta WhatsApp Business, EgoSMS), and our hosting provider (Supabase). Each operates under its own privacy terms and handles your data only as needed to deliver the service you requested.

6. Retention

Order and payment records are kept for seven years to meet Uganda Revenue Authority requirements. Rider location history is kept for 90 days. Marketing contact lists are kept while you remain subscribed.

7. Your rights under UDPPA 2019

  • Right of access to your personal data.
  • Right to correction of inaccurate data.
  • Right to erasure where processing is no longer necessary.
  • Right to object to direct marketing.
  • Right to withdraw consent at any time.
  • Right to lodge a complaint with the Personal Data Protection Office (PDPO).

8. Contact us

To exercise any right or ask a question, reach us on our contact page or reply STOP to any marketing message to opt out immediately.