✅ Compliant with POPIA (Protection of Personal Information Act, South Africa)
This Privacy Policy describes how Wangu (Pty) Ltd ("Wangu", "we", "us", or "our") collects, uses, stores, and protects personal information when you use our website at wanguapp.com, our mobile application, or any of our related services (collectively, "the Services"). This policy is aligned with the Protection of Personal Information Act, 2013 (POPIA) of South Africa.
By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please do not use our Services.
1. Who We Are and How to Contact Us
The responsible party for your personal information is:
Wangu (Pty) Ltd
Gqeberha (Port Elizabeth), Eastern Cape, South Africa
Email: hello@wanguapp.com
Website: wanguapp.com
For any privacy-related queries or requests, contact us at the email above with the subject line "Privacy Request".
Information you provide directly
- Account registration: Name, email address, phone number, business name, and business type when you register or sign up for notifications
- Demo and contact forms: Name, contact details, business information, and any messages you send us
- Driver registration: Name, contact details, location, vehicle information, and availability
- Payment information: Processed securely through Paystack — we do not store card details on our servers
- Ordering: Delivery address, order details, special instructions, and order history
Information collected automatically
- IP address, browser type, and device information
- Pages visited, time spent on pages, and navigation patterns
- Referring website or search terms that led you to us
- General geographic location (city/region level) derived from your IP address
Information from third parties
If you connect a third-party account (such as Google) or if a restaurant partner shares your information to facilitate an order or reservation, we may receive information from those parties. We only use this information for the purpose it was shared.
3. How We Use Your Information
- To create and manage your account and provide the Services
- To process orders, reservations, and payments
- To send you transactional communications (order confirmations, delivery updates, booking confirmations)
- To send you service announcements and launch notifications you have opted into
- To respond to your enquiries and provide customer support
- To improve our platform, diagnose technical issues, and develop new features
- To comply with legal obligations and protect our legal rights
- To detect and prevent fraud and abuse
We do not sell your personal information to third parties. We do not use your information for advertising on other platforms.
4. Lawful Basis for Processing
We process your personal information on the following lawful grounds under POPIA:
- Contract performance: Processing necessary to provide the Services you've requested
- Legitimate interest: To improve our Services, ensure platform security, and communicate with you about updates relevant to your use
- Consent: For marketing communications and launch notifications — which you may withdraw at any time
- Legal obligation: Where we are required to process information to comply with South African law
5. Who We Share Information With
We share personal information only where necessary and with appropriate safeguards in place:
- Paystack: Our payment processor handles card and payment data. Their privacy policy applies to payment processing.
- Restaurant partners: If you place an order or reservation, we share the relevant details (name, delivery address, order) with the restaurant fulfilling it.
- Delivery drivers: Drivers receive the delivery address and order details necessary to complete a delivery — not your full profile.
- Service providers: We use third-party services for email delivery, analytics, and infrastructure. These providers are contractually prohibited from using your data for any other purpose.
- Legal authorities: We may disclose information where required by law, court order, or to protect the safety of users or the public.
We do not transfer personal information outside of South Africa except where required by service providers who process data in accordance with appropriate safeguards.
6. How Long We Keep Your Information
- Account data: Retained for the duration of your account plus 3 years after closure
- Order and transaction records: 5 years (as required for financial record-keeping)
- Marketing consent records: Until you withdraw consent plus 1 year
- Contact and enquiry records: 2 years from the date of the last interaction
- Server logs and analytics: 12 months on a rolling basis
After these periods, we securely delete or anonymise your data.
7. How We Protect Your Information
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, destruction, or alteration. These measures include:
- HTTPS encryption for all data in transit
- Encrypted storage for sensitive data
- Access controls limiting which team members can access personal data
- Regular security reviews
- Paystack PCI-DSS compliance for all payment processing
No system is perfectly secure. If we become aware of a data breach affecting your rights, we will notify you and the Information Regulator as required under POPIA.
8. Your Rights Under POPIA
As a data subject under POPIA, you have the following rights:
- Right to access: Request a copy of the personal information we hold about you
- Right to correction: Ask us to correct inaccurate or incomplete information
- Right to deletion: Request deletion of your personal information, subject to legal retention requirements
- Right to object: Object to the processing of your information for marketing or profiling purposes
- Right to withdraw consent: Withdraw consent for any processing based on consent — without affecting the lawfulness of prior processing
- Right to complain: Lodge a complaint with the Information Regulator of South Africa at inforegulator.org.za
To exercise any of these rights, email us at hello@wanguapp.com with "Privacy Request" in the subject line. We will respond within 30 days.
9. Cookies and Tracking
We use cookies and similar technologies to operate our website and improve your experience. These include:
- Essential cookies: Required for the website to function (session management, security). Cannot be disabled.
- Analytics cookies: Help us understand how visitors use the site (pages visited, time on site). You may opt out.
- Functional cookies: Remember your preferences to improve your experience.
You can manage cookies through your browser settings. Disabling analytics cookies will not affect your ability to use the Services.
10. Children's Privacy
Our Services are not directed at children under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected information from a minor, please contact us immediately and we will delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated version on this page with a revised effective date. For material changes, we will notify users via email or a prominent notice on the website. Continued use of the Services after changes are posted constitutes your acceptance of the updated policy.
For any questions, concerns, or requests related to this Privacy Policy or how we handle your personal information:
Wangu (Pty) Ltd
Email: hello@wanguapp.com
Subject line: Privacy Request
We aim to respond to all privacy-related requests within 30 business days.
This policy was last reviewed and updated in March 2026. Wangu (Pty) Ltd is registered in South Africa.