1. Who operates the service and scope
This policy describes how ETLALA handles data when you use the customer app, ETLALA website, and related services. Available services may differ by market, city, and merchant. This policy covers visitors and registered customers; feature-specific notices may apply where required.
2. Data we process
We may process your name, phone number, verification codes, account identifier, saved delivery addresses and selected locations, city and market, orders, carts, favorites, reviews, support requests and messages, and delivery or pickup details. We may also process payment-transfer evidence, refund documentation, donation confirmations and images that you choose to submit. The app is not described here as collecting full payment card numbers unless a future payment feature expressly discloses that collection.
3. Device and service information
Technical information may include device type, app version, sign-in session identifiers, Firebase notification tokens, security-related device identifiers, IP addresses, and operational or error logs. The website uses necessary technical features and may remember your language preference. Granting OS notification permission is not, on its own, consent to marketing.
4. Location and permissions
Your permitted or manually selected location helps determine delivery coverage, eligible stores and selected delivery addresses. Relevant location searches may be sent to a mapping provider. You can usually enter an address manually instead of granting device location access. Guest marketing topics use selected city and market, not precise background location.
5. Purposes of processing
We use information to create and verify accounts, determine delivery availability, process orders and payments, show prices and fees, handle unavailable items, cancellations and refunds, operate donations, rewards and wallets when available, provide messaging and support, prevent misuse, secure the service and maintain its performance. Materially different uses require appropriate notice or consent where applicable.
6. Merchants, couriers and service providers
Only data reasonably needed to fulfil an order is shared with the merchant and courier involved, such as delivery instructions, contact details and order items. Hosting, database, map, text messaging, push notification and payment providers may process data needed for the features you use. Access is restricted and appropriate safeguards are expected of processors. Limited information may be disclosed to meet applicable legal obligations.
7. Payments, wallets, rewards and donations
We may retain payment-method selections, transaction references, uploaded transfer receipts, refunds and status information, rather than necessarily storing full payment instrument details. Wallet, rewards and referral records support entitlements, settlements and abuse prevention. Donation records and evidence support processing, confirmation and coordination with the relevant organization.
8. Service and marketing messages
Some messages are needed for orders, security and essential service updates. Offers and marketing are controlled by the applicable preferences and consent settings. Guests can opt into or out of promotional push topics through notification settings; system notification permission alone does not authorize marketing. Marketing SMS may require a separate affirmative choice. You can withdraw optional marketing consent without deleting your account.
9. User content
Submitted ratings or reviews may appear on store pages subject to applicable moderation. Limited information may be shown to the relevant merchant to address feedback. Avoid including unnecessary personal details in public reviews or chats.
10. Retention and security
We retain information as needed for service delivery, security, disputes, accounting and applicable legal obligations. No single retention period applies to every category. Unnecessary account data is removed following an eligible deletion request, while limited transaction evidence may remain for a specific continuing obligation. We apply access controls and security safeguards, but no electronic system can guarantee absolute security.
11. Your rights and account deletion
You may update account details and saved addresses where the app supports this. Request account deletion in the app or at Delete account, without installing the app. Removal may be staged where an active order, refund or other obligation needs to be settled. You can raise data inquiries, corrections or objections through Help & Support in the app, subject to rights under applicable law.
12. Children and international handling
The service is intended for people permitted to conduct transactions, or their authorized guardians as applicable. We do not intentionally solicit children’s information without an appropriate basis. Infrastructure providers may process or store information outside your country, subject to applicable requirements and safeguards.
13. Changes and contact
This policy may be updated as services and requirements change. We will update the revision date and provide additional notice where required. For privacy questions, use Help & Support from the account section of the ETLALA app. Official operator contact details must also be confirmed before store submission.