GoBites Privacy Policy

GoBites Ltd (“GoBites”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.

This Customer Privacy Policy (“Privacy Policy”) explains how we collect, use, store, disclose and otherwise process personal data when you access or use the GoBites customer mobile application, website, ordering platform, customer support channels and related services (collectively, the “Services”).

GoBites operates a technology platform that enables customers to discover restaurants and other merchants, place orders, make payments, arrange delivery or pickup where available, communicate in connection with orders, and access other services made available through the GoBites platform.

This Privacy Policy applies primarily to customers and prospective customers of GoBites.

Separate privacy provisions may apply to merchants, vendors, delivery riders, employees, applicants and other persons who interact with GoBites in a different capacity.

We process personal data in accordance with applicable laws of the Republic of Ghana, including the Data Protection Act, 2012 (Act 843) and other applicable laws and regulations.

By accessing or using the Services, you acknowledge that your personal data may be processed as described in this Privacy Policy.

For purposes of applicable Ghanaian data protection law, GoBites Ltd is responsible for personal data that it determines the purposes and means of processing in connection with the Services.

Data Controller: GoBites Ltd Ghana

Website: https://usegobites.com

Email: Hello@usegobites.com

Questions, complaints or requests concerning this Privacy Policy or the processing of your personal data should be directed to our privacy contact.

The personal data we collect depends on how you interact with GoBites and which Services you use.

We may collect the following categories of information.

3.1 Account and Identity Information

When you create or use a GoBites account, we may collect information including:

• your full name;
• telephone number;
• email address;
• date of birth, where provided;
• profile information;
• account identifiers;
• account preferences; and
• information necessary to authenticate or secure your account.

Where certain information is optional, we may indicate this when requesting it.

3.2 Phone Number and OTP Authentication

GoBites may use your mobile telephone number to create, authenticate and secure your account.

When you sign in or perform certain account activities, we may send a One-Time Password (“OTP”) or other verification code to the telephone number associated with your account.

We may process information relating to authentication attempts, verification status, timestamps and related security information to protect your account and the GoBites platform.

You should never disclose your OTP or verification code to another person.

GoBites personnel should not ask you to provide your OTP for the purpose of accessing your account.

3.3 Guest Information

Where GoBites permits you to browse or use portions of the Services as a guest, you may be able to access certain features without creating a full account.

However, information may still be required to complete an order, process payment, arrange delivery, provide customer support or comply with applicable law.

This may include your:

• name;
• telephone number;
• email address;
• delivery address;
• location;
• order information; and
• payment-related information.

3.4 Order Information

When you place or attempt to place an order through GoBites, we may collect and process information such as:

• restaurants or merchants you interact with;
• items viewed;
• items ordered;
• quantities;
• item customisations and selected add-ons;
• special instructions;
• order value;
• applicable fees;
• discounts and promotions;
• delivery or pickup selection;
• order timestamps;
• order status;
• cancellation information;
• refund information;
• delivery status; and
• previous orders.

We use this information to facilitate and administer your orders and improve our Services.

3.5 Delivery Address and Location Information

When you request delivery, we may collect information necessary to determine where your order should be delivered.

This may include:

• delivery address;
• GPS or device location, where permission has been granted;
• map coordinates;
• delivery landmarks;
• campus, building or neighbourhood information;
• delivery notes; and
• other information you voluntarily provide to help a rider locate you.

Where permitted by your device settings and applicable law, GoBites may process location information to:

• identify restaurants and merchants near you;
• determine whether delivery is available;
• calculate or estimate delivery distances;
• determine delivery fees;
• assign appropriate riders;
• facilitate navigation;
• provide live delivery tracking;
• prevent fraud or abuse; and
• improve delivery operations.

You may control certain location permissions through your device settings.

Disabling location permissions may affect some functionality, although you may be able to enter a delivery address manually where that option is available.

3.6 Live Delivery Tracking

GoBites may provide live or near-real-time tracking during the delivery process.

Depending on the stage of an order, location information relating to the assigned rider may be displayed to authorised participants involved in completing the order.

For example, a merchant may be able to see the rider approaching the merchant location, while a customer may be able to track the rider after the order has been collected and is being delivered.

We process location information for these purposes only to the extent reasonably necessary to facilitate delivery, safety, support and operational functions.

3.7 Payment and Transaction Information

When you make a payment through GoBites, we may process information relating to the transaction, including:

• payment method;
• transaction amount;
• payment status;
• transaction reference;
• mobile money provider or payment provider;
• refund status;
• payment timestamps; and
• information required for transaction reconciliation, fraud prevention and customer support.

Payments may be processed by banks, mobile money operators, payment service providers, payment gateways or other regulated third parties.

GoBites may not directly receive or store all sensitive payment credentials used to authorise your payment. Such information may be transmitted directly to and processed by the relevant payment provider.

Your use of a third-party payment service may also be subject to that provider's privacy policy and terms.

3.8 Device and Technical Information

When you use our application or website, certain technical information may be collected automatically.

This may include:

• device type;
• operating system;
• application version;
• browser type;
• IP address;
• device identifiers;
• language settings;
• network information;
• crash information;
• diagnostic information;
• log information;
• session information; and
• dates and times at which you access the Services.

We use this information to maintain the Services, diagnose technical problems, improve performance, secure the platform and understand how our Services are used.

3.9 Customer Support and Communications

If you contact GoBites through our application, website, telephone, email, WhatsApp, social media or another customer-support channel, we may process:

• your contact details;
• the content of your communication;
• order details;
• complaint information;
• photographs or documents you submit;
• refund requests;
• support history; and
• information necessary to investigate and resolve your request.

Where permitted by law, communications may be recorded or retained for quality assurance, dispute resolution, security and training purposes.

3.10 Promotions, Surveys and Campaigns

If you participate in a GoBites promotion, competition, referral programme, survey, event or marketing campaign, we may collect information that you provide in connection with that activity.

Additional terms or privacy notices may apply to specific campaigns.

We may obtain personal data:

Directly from you, including when you:

• create an account;
• provide your profile information;
• place an order;
• enter a delivery address;
• make a payment;
• contact customer support;
• participate in promotions; or
• otherwise communicate with us.

Automatically, including through:

• our mobile applications;
• our website;
• cookies and similar technologies;
• device information;
• application logs; and
• location permissions.

From third parties, including:

• merchants;
• delivery riders;
• payment providers;
• mobile money providers;
• authentication providers;
• mapping and location-service providers;
• analytics providers;
• fraud-prevention providers; and
• other service providers supporting the operation of GoBites.

GoBites processes personal data only where there is an appropriate basis for doing so under applicable law.

Depending on the circumstances, we may process your information because it is necessary:

5.1 To Provide the Services

This includes processing information to:

• create and maintain your account;
• authenticate your identity;
• display relevant merchants;
• process orders;
• transmit orders to merchants;
• process payments;
• arrange pickup or delivery;
• assign delivery riders;
• provide delivery tracking;
• communicate order updates;
• process refunds;
• provide customer support; and
• otherwise perform our obligations in connection with the Services.

5.2 With Your Consent

We may rely on your consent for certain processing activities where consent is required.

For example, we may request permission before accessing certain device location information or sending certain forms of marketing communication.

Where processing is based on consent, you may withdraw that consent subject to applicable law.

Withdrawal of consent does not ordinarily affect the lawfulness of processing carried out before the withdrawal.

5.3 To Protect GoBites, Customers and Other Users

We may process personal data to:

• detect fraud;
• investigate suspicious activity;
• prevent account abuse;
• protect customers, merchants and riders;
• enforce our Terms and Conditions;
• secure our systems;
• investigate disputes;
• establish, exercise or defend legal claims; and
• prevent misuse of the GoBites platform.

5.4 To Comply With Legal Obligations

We may process or retain information where required to comply with applicable laws, regulations, court orders, regulatory obligations, lawful governmental requests, tax requirements, accounting requirements or other legal obligations.

5.5 To Improve GoBites

We may analyse how customers use our Services to:

• improve application performance;
• improve restaurant and merchant discovery;
• improve delivery operations;
• understand customer preferences;
• develop new products and features;
• improve customer support;
• measure service performance; and
• conduct business analytics.

Where reasonably possible, we may use aggregated or de-identified information for analytics and service improvement.

GoBites does not sell your personal data merely because you use our Services.

We may, however, share personal data where reasonably necessary to operate the platform, fulfil an order, comply with the law or protect legitimate interests.

6.1 Merchants

When you place an order, we may provide the relevant merchant with information necessary to prepare and fulfil your order.

This may include:

• your name or an appropriate customer identifier;
• order details;
• special instructions;
• order reference;
• order status; and
• other information reasonably necessary to fulfil the transaction.

We seek to limit the personal information disclosed to merchants to what is reasonably required for the relevant purpose.

6.2 Delivery Riders

Where an order requires delivery, certain information may be made available to the rider assigned to your order.

This may include:

• your name or appropriate identifier;
• delivery location;
• delivery instructions;
• order reference;
• relevant contact functionality; and
• information required to complete delivery.

Where technically feasible, GoBites may limit or mask certain customer information to reduce unnecessary disclosure.

Riders are expected to use customer information only for legitimate delivery purposes and in accordance with applicable GoBites requirements.

6.3 Payment Providers

Information necessary to process payments, verify transactions, issue refunds or investigate payment disputes may be shared with the relevant:

• mobile money operator;
• bank;
• payment gateway;
• payment service provider; or
• financial institution.

These organisations may process personal information under their own legal and regulatory obligations.

6.4 Service Providers

We may engage third parties to provide services such as:

• cloud hosting;
• telecommunications;
• SMS and OTP delivery;
• mapping;
• navigation;
• analytics;
• customer support;
• communications;
• cybersecurity;
• fraud prevention;
• payment processing; and
• software infrastructure.

Such providers should receive only the information reasonably necessary for the relevant service and are expected to process that information in accordance with applicable contractual and legal requirements.

6.5 Government, Regulatory and Law-Enforcement Authorities

We may disclose personal data where we reasonably believe disclosure is required or permitted by applicable law, including in response to:

• court orders;
• lawful requests;
• regulatory investigations;
• law-enforcement requests;
• tax requirements; or
• other legal processes.

We may also disclose information where reasonably necessary to protect the rights, property, security or safety of GoBites, our customers, merchants, riders or other persons.

6.6 Corporate Transactions

If GoBites undergoes a merger, acquisition, financing, restructuring, investment, sale of assets or similar corporate transaction, personal data may be disclosed to relevant professional advisers, investors, lenders or transaction counterparties subject to appropriate confidentiality and legal safeguards.

GoBites recognises that delivery services require a careful balance between operational necessity and customer privacy.

We therefore seek to limit the information available to riders to what is reasonably necessary to:

• collect an order;
• navigate to the delivery location;
• contact the customer where necessary;
• verify delivery; and
• complete the order.

Customer information obtained by a rider through GoBites must not be used for unrelated personal, commercial, marketing, harassment or other unauthorised purposes.

Where supported by the platform, GoBites may restrict, mask or cease displaying certain customer information after delivery is completed.

Customers who believe a rider has misused their personal information should contact GoBites promptly.

GoBites may use delivery verification codes, PINs or similar mechanisms to confirm that an order has been delivered to the correct customer.

You should provide a delivery verification code only when appropriate during the handover process.

Do not provide your delivery verification code prematurely where doing so could falsely indicate that your order has been delivered.

Where permitted by law, GoBites may send you information concerning:

• promotions;
• discounts;
• new restaurants;
• new features;
• special offers;
• GoBites campaigns; and
• other marketing communications.

Where consent is required, we will obtain the appropriate consent.

You may unsubscribe or opt out of eligible direct marketing communications using the unsubscribe mechanism provided or by contacting GoBites.

Transactional and service communications are different from marketing communications.

Even where you opt out of marketing, we may still send communications reasonably necessary for your use of GoBites, such as:

• OTP messages;
• security alerts;
• order confirmations;
• payment confirmations;
• rider and delivery updates;
• refund information;
• important account notices; and
• legally required communications.

If you enable notifications on your device, GoBites may send push notifications relating to orders, deliveries, promotions and other Service-related matters.

You can manage push-notification permissions through your device settings.

Disabling promotional notifications may not prevent certain essential Service-related communications where those communications are necessary to provide the Services.

Our website and digital services may use cookies, software development kits, pixels, local storage and similar technologies.

These technologies may help us:

• remember preferences;
• maintain sessions;
• understand website and application usage;
• measure performance;
• diagnose technical problems;
• improve security;
• prevent fraud; and
• improve our Services.

Where required, we will provide appropriate choices regarding non-essential cookies or similar technologies.

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected or for another lawful purpose.

The applicable retention period may depend on:

• the nature of the information;
• whether your account remains active;
• the existence of an ongoing transaction;
• accounting or tax requirements;
• fraud-prevention requirements;
• dispute-resolution requirements;
• regulatory obligations;
• legal limitation periods; and
• other legitimate legal or operational requirements.

Deleting your GoBites account does not necessarily require the immediate deletion of every record associated with your use of GoBites.

Certain records may need to be retained where required or permitted by law, including transaction, accounting, security, fraud-prevention and dispute-related records.

When information is no longer reasonably required, we may securely delete, destroy, anonymise or otherwise dispose of it in accordance with applicable requirements.

GoBites takes reasonable technical and organisational measures designed to protect personal data against:

• unauthorised access;
• accidental loss;
• unlawful processing;
• unauthorised disclosure;
• alteration;
• destruction; and
• misuse.

These measures may include, as appropriate:

• access controls;
• authentication mechanisms;
• encryption;
• secure infrastructure;
• monitoring;
• logging;
• employee access restrictions;
• security reviews; and
• contractual safeguards for relevant service providers.

However, no internet-based system, electronic transmission or digital storage system can be guaranteed to be completely secure.

Customers are responsible for taking reasonable steps to protect their own accounts, devices, telephone numbers, passwords, OTPs and other authentication information.

Some technology and infrastructure providers used by GoBites may operate servers, cloud infrastructure or support services outside Ghana.

Accordingly, personal data may in certain circumstances be processed or stored outside Ghana.

Where personal data is transferred internationally, GoBites will seek to ensure that the transfer is undertaken in accordance with applicable Ghanaian data protection requirements and that appropriate safeguards are implemented where required.

Subject to applicable law and any lawful limitations, you may have rights concerning personal data held about you.

These may include the right to:

15.1 Request Access

You may request confirmation of whether GoBites processes personal data relating to you and request access to applicable information.

15.2 Request Correction

You may request correction of personal data that is inaccurate, incomplete, misleading or out of date.

Certain profile information may be editable directly through your account.

15.3 Object to Certain Processing

You may have the right to object to certain processing of your personal data, including certain forms of direct marketing.

15.4 Withdraw Consent

Where GoBites relies on your consent for a particular processing activity, you may withdraw that consent, subject to applicable law.

Withdrawal may affect our ability to provide a feature that requires the relevant information.

15.5 Request Deletion

You may request deletion of certain personal data.

This right is subject to lawful exceptions.

For example, GoBites may retain information where necessary for legal compliance, fraud prevention, accounting, disputes, enforcement or other lawful purposes.

15.6 Lodge a Complaint

If you believe that your personal data has been processed unlawfully or your data protection rights have been infringed, you may contact GoBites.

You may also have the right to lodge a complaint with the Data Protection Commission of Ghana.

Where account deletion functionality is available, you may request deletion through the GoBites application, website or designated support channel.

Before processing a deletion request, we may take reasonable steps to verify that the person making the request is authorised to control the relevant account.

Following account deletion, certain information may remain in our records where retention is required or permitted by applicable law.

Information that is retained will remain subject to appropriate safeguards and will not be used for unrelated purposes merely because your account has been deleted.

GoBites is not intended to be used independently by children who do not have the legal capacity to enter into the transactions associated with the Services.

Where a minor uses GoBites, such use should occur with the involvement and appropriate consent or supervision of a parent, guardian or other person legally authorised to act on the minor's behalf, where required by applicable law.

We do not knowingly seek to collect personal data from children contrary to applicable law.

If you believe that a child's personal data has been provided to GoBites unlawfully, please contact us so that we can investigate and take appropriate action.

The GoBites platform may contain integrations with or links to third-party services, including:

• payment providers;
• mobile money providers;
• map providers;
• social media platforms;
• merchant websites; and
• other external services.

This Privacy Policy does not necessarily govern personal data independently collected by those third parties.

We encourage you to review the privacy policies of third-party services you use.

We may process account, transaction, device, location and behavioural information where reasonably necessary to identify or investigate:

• fraudulent transactions;
• unauthorised account access;
• payment abuse;
• promotional abuse;
• suspicious orders;
• false delivery claims;
• merchant or rider misconduct;
• security threats; and
• violations of GoBites policies.

Where appropriate and lawful, we may restrict accounts, suspend transactions, request additional verification or take other measures to protect the GoBites ecosystem.

GoBites may update this Privacy Policy from time to time to reflect:

• changes to our Services;
• new technologies;
• operational changes;
• changes in our business;
• changes in applicable law or regulation; or
• improvements to our privacy practices.

When we make changes, we will update the “Last Updated” date at the beginning of this Privacy Policy.

Where a change is material or where applicable law requires additional notice or consent, we may notify you through the GoBites application, website, email, SMS, push notification or another appropriate communication channel.

We encourage you to review this Privacy Policy periodically.

If you have questions about this Privacy Policy, wish to exercise a data protection right or believe your personal data has been mishandled, please contact:

GoBites Ltd Ghana

Email: Hello@usegobites.com

Support: support@usegobites.com

Website: https://usegobites.com

Please provide sufficient information for us to identify the relevant account or request.

We may need to verify your identity before responding to certain privacy requests.

The Data Protection Commission is the statutory regulator responsible for data protection matters in Ghana.

If you believe your data protection rights have been infringed and your concern has not been satisfactorily resolved by GoBites, you may contact or lodge a complaint with the Data Protection Commission in accordance with applicable law.

This Privacy Policy and GoBites' processing of personal data in Ghana are subject to applicable laws of the Republic of Ghana, including the Data Protection Act, 2012 (Act 843).

Nothing in this Privacy Policy is intended to exclude, restrict or waive any right that a data subject has under applicable law.

GoBites Ltd (“GoBites”, “we”, “us” or “our”) respects the privacy of couriers and delivery riders who use the GoBites platform.

This Courier / Rider Privacy Policy (“Privacy Policy”) explains how GoBites collects, uses, stores, shares, protects and otherwise processes personal data relating to persons who register, apply, go online, receive delivery opportunities or provide delivery services using the GoBites Courier application and related services.

For purposes of this Privacy Policy, the terms “Courier” and “Rider” may be used interchangeably to refer to a person who uses the GoBites platform to receive, collect and deliver orders.

This Privacy Policy applies to:

• prospective GoBites Couriers;
• registered GoBites Couriers;
• active Couriers;
• former Couriers whose information GoBites is lawfully required or entitled to retain; and
• persons interacting with GoBites in connection with a Courier account.

GoBites processes personal data in accordance with applicable laws of the Republic of Ghana, including the Data Protection Act, 2012 (Act 843) and other applicable laws and regulations.

This Privacy Policy should be read together with the GoBites Courier Terms and Conditions, Courier Agreement and any other applicable GoBites policies.

This Privacy Policy concerns the processing of personal data. It does not, by itself, determine whether a Courier is an employee, worker, independent contractor, agent or other category of service provider. Any such relationship is governed by the relevant agreement and applicable law.

For personal data for which GoBites determines the purposes and means of processing, GoBites Ltd acts as the responsible data controller under applicable Ghanaian data protection law.

Data Controller: GoBites Ltd Ghana

Website: https://usegobites.com

Privacy Email: Hello@usegobites.com

Courier Support: support@usegobites.com

Questions about this Privacy Policy or how GoBites handles Courier personal data may be directed to the contact information above.

The personal information GoBites collects depends on how you interact with the Courier platform, the services you use and the information reasonably required to operate the delivery service.

We may collect the following categories of information.

3.1 Courier Account and Profile Information

When you register for or maintain a Courier account, we may collect:

• full name;
• telephone number;
• email address, where provided;
• profile photograph, where required;
• date of birth, where required;
• residential or general location information;
• preferred delivery areas;
• emergency contact information, where required;
• account identifiers;
• account status;
• onboarding status;
• availability status; and
• other profile information you provide to GoBites.

We seek to collect only information reasonably necessary for Courier onboarding, platform administration, safety, delivery operations, payment and compliance purposes.

GoBites may use your mobile telephone number as a principal means of identifying and authenticating your Courier account.

We may send a One-Time Password (“OTP”) or verification code to your registered telephone number when you:

• create an account;
• sign in;
• verify your telephone number;
• recover or secure your account;
• make certain account changes; or
• perform another action requiring authentication.

GoBites may process information concerning:

• authentication attempts;
• verification results;
• device information;
• timestamps;
• telephone number verification; and
• security events.

You must keep OTPs and verification codes confidential.

A GoBites employee, merchant, customer or other Courier should not require you to disclose your OTP for the purpose of accessing your account.

To protect customers, merchants, Couriers and the GoBites platform, we may require appropriate identity or eligibility verification.

Depending on our onboarding requirements and applicable law, information may include:

• government-issued identification details;
• identification document images;
• photograph;
• date of birth;
• telephone number;
• address or location details;
• verification status; and
• information reasonably required to confirm that the person operating the Courier account is the authorised account holder.

Where GoBites uses third-party identity-verification providers, relevant information may be transmitted to those providers for verification purposes.

GoBites will seek to limit identity information collected to what is reasonably necessary for legitimate verification, safety, fraud-prevention and legal purposes.

Where relevant to the delivery service, GoBites may collect information about the vehicle or transport method used by a Courier.

This may include:

• vehicle type;
• motorcycle, bicycle, car or other transport category;
• vehicle registration information, where required;
• driving or riding eligibility information, where required;
• vehicle photograph, where required;
• licence details, where applicable;
• insurance information, where required by GoBites or applicable law; and
• delivery equipment information.

This information may be used to verify eligibility for particular delivery types, support safety requirements, assist investigations and administer Courier operations.

Location information is essential to certain functions of the GoBites Courier platform.

Where you have granted the required device permissions and where otherwise permitted by law, the GoBites Courier application may collect precise or approximate location information from your device.

This may include:

• GPS coordinates;
• current or recent location;
• movement information;
• route information;
• pickup location;
• delivery location;
• distance travelled;
• timestamps associated with location events; and
• information indicating whether you are near a merchant, customer or delivery destination.

Location information may constitute personal data because it can identify or be associated with an individual Courier.

GoBites therefore processes Courier location data only for legitimate platform, delivery, operational, safety, support, security and related purposes.

Depending on the functionality of the Courier application and the permissions you grant, GoBites may process location information when you:

• open the Courier application;
• go online or indicate that you are available to receive deliveries;
• receive a delivery opportunity;
• accept an order;
• travel towards a merchant;
• wait at or near a merchant location;
• collect an order;
• travel towards the customer;
• complete a delivery;
• use navigation functionality;
• contact support concerning an active delivery; or
• remain engaged in another active delivery-related process.

Where background location access is required for a particular Courier feature, the application should request the relevant device permission and provide appropriate notice.

GoBites will not represent that location tracking has stopped if the technical operation of the application continues to collect location information.

Conversely, this Privacy Policy does not mean that GoBites necessarily tracks a Courier continuously at all times.

The precise collection of location information depends on:

• application functionality;
• Courier status;
• device permissions;
• operating-system settings;
• delivery status;
• technical requirements; and
• applicable law.

GoBites may use Courier location information to:

• determine which Couriers are available in a particular area;
• identify Couriers near merchants;
• broadcast or assign delivery opportunities;
• determine pickup and delivery proximity;
• calculate estimated arrival times;
• facilitate navigation;
• display the progress of an active delivery;
• help merchants determine when a Courier is approaching;
• help customers track an order after collection;
• verify pickup or delivery events;
• provide Courier support;
• investigate delayed, failed or disputed deliveries;
• detect possible fraud or platform manipulation;
• protect customers, merchants and Couriers;
• analyse delivery performance;
• improve dispatch and logistics;
• understand delivery coverage;
• improve routing;
• calculate operational metrics; and
• improve the GoBites platform.

Location information should not be used for purposes that are materially incompatible with the purposes for which it was collected unless there is an appropriate lawful basis for doing so.

GoBites may provide live or near-real-time Courier tracking during an active delivery.

Live tracking is designed to provide relevant participants with sufficient information to coordinate and complete an order.

For example:

Before Pickup

The merchant may be able to view the location or estimated arrival of the assigned Courier while the Courier is travelling to the merchant.

This assists the merchant in preparing the order and coordinating pickup.

After Pickup

Once the Courier collects the order, the customer may be able to view the Courier's approximate or live location as the Courier travels towards the delivery destination.

This assists the customer in preparing to receive the order and understanding the progress of the delivery.

After Delivery

Customer and merchant access to live Courier location information should ordinarily end when it is no longer reasonably necessary for the relevant delivery.

GoBites may retain certain historical location or delivery records where reasonably necessary for:

• dispute resolution;
• fraud prevention;
• security;
• operational analysis;
• regulatory compliance;
• legal claims; or
• another lawful purpose.

GoBites does not intend to provide customers or merchants with unrestricted access to a Courier's location outside legitimate delivery operations.

When you use the Courier platform, GoBites may process information relating to delivery opportunities presented to you.

This may include:

• delivery request;
• delivery area;
• merchant location;
• customer delivery area;
• estimated distance;
• estimated delivery fee or earnings;
• date and time of the request;
• whether the opportunity was displayed to you;
• whether you accepted, declined or did not respond;
• assignment status;
• pickup status;
• delivery status; and
• cancellation information.

We may use this information to operate the Courier dispatch system and improve delivery allocation.

When you accept or complete deliveries, GoBites may process information including:

• order reference;
• merchant;
• pickup location;
• customer delivery location;
• order status;
• pickup timestamp;
• delivery timestamp;
• estimated delivery time;
• actual delivery time;
• distance;
• delivery fee;
• delivery instructions;
• delivery verification status;
• cancellation status;
• support incidents;
• proof of delivery, where applicable; and
• related operational information.

Couriers should access customer and merchant information only to the extent necessary to complete authorised delivery activities.

To complete a delivery, GoBites may provide a Courier with limited customer information.

Depending on the delivery stage, this may include:

• customer name or appropriate identifier;
• delivery location;
• map location;
• delivery instructions;
• order reference;
• delivery verification information;
• contact functionality; and
• other information reasonably necessary to complete the delivery.

GoBites may restrict, conceal or mask certain customer information where technically feasible and operationally appropriate.

A Courier must not use customer information obtained through GoBites for:

• personal communication unrelated to the delivery;
• marketing;
• advertising;
• harassment;
• solicitation;
• unauthorised social-media contact;
• unauthorised record keeping;
• sale or disclosure to another person; or
• any other purpose unrelated to legitimate GoBites delivery activities.

Where appropriate, access to certain customer information may cease after delivery is completed.

To facilitate pickup, GoBites may provide information concerning a merchant, including:

• merchant name;
• business location;
• map location;
• pickup instructions;
• order reference;
• merchant contact functionality; and
• other information reasonably required to collect the order.

Couriers must use merchant information only for legitimate delivery purposes.

GoBites may use a delivery code, PIN, OTP, confirmation button, photograph, signature, location confirmation or another mechanism to verify that an order has been delivered.

We may process information relating to:

• verification code status;
• confirmation time;
• delivery location;
• Courier identity;
• customer confirmation;
• support records; and
• other delivery evidence.

Couriers must not falsely record an order as delivered.

Where a delivery verification code is required, the Courier should obtain it at the appropriate stage of the actual handover process.

The GoBites Courier application may allow you to indicate whether you are:

• online;
• offline;
• available;
• unavailable;
• actively completing a delivery; or
• otherwise engaged.

We may process your availability status to determine whether delivery opportunities should be offered to you.

Your status may also be used for dispatch, capacity planning and operational analytics.

GoBites may maintain records concerning your use of the Courier platform, including:

• completed deliveries;
• accepted deliveries;
• cancelled deliveries;
• failed deliveries;
• delivery timestamps;
• order values where operationally relevant;
• distance travelled;
• delivery fees;
• delivery disputes;
• support incidents;
• reliability indicators;
• availability activity;
• pickup and completion events; and
• other delivery-performance information.

We may use such information to administer the platform, support Couriers, investigate disputes, improve operations and maintain the integrity of the delivery service.

Customers, merchants or GoBites may provide ratings, feedback or reports concerning delivery services.

GoBites may process information including:

• customer ratings;
• merchant feedback;
• complaints;
• compliments;
• completed delivery counts;
• delivery reliability;
• cancellation information;
• support incidents;
• performance level or status;
• safety reports; and
• other performance-related metrics.

This information may be used to:

• provide feedback to Couriers;
• administer Courier performance features;
• identify service-quality issues;
• investigate complaints;
• recognise strong performance;
• protect users;
• prevent abuse; and
• improve delivery quality.

Where GoBites takes a significant adverse action against a Courier based substantially on performance information, GoBites may provide applicable information or review procedures where required by law or GoBites policy.

GoBites may use software systems to assist with functions such as:

• delivery broadcasting;
• Courier matching;
• delivery assignment;
• distance calculations;
• ETA calculations;
• fraud detection;
• location analysis; and
• operational prioritisation.

Such systems may take into account information such as:

• current location;
• Courier availability;
• distance from a merchant;
• active delivery status;
• delivery type;
• system capacity; and
• other operational factors.

Where applicable law grants rights in relation to significant decisions made solely by automated processing, GoBites will respect those rights.

GoBites may collect and process information relating to amounts earned through Courier activities.

This may include:

• delivery earnings;
• delivery-fee allocation;
• incentives;
• bonuses;
• adjustments;
• deductions where lawfully applicable;
• pending earnings;
• available balance;
• payout history;
• payout requests;
• payout status;
• transaction reference; and
• reconciliation information.

We process this information to calculate amounts payable, display earnings, resolve disputes, administer payouts, maintain financial records and comply with legal obligations.

Where GoBites supports Courier payouts through Mobile Money, bank transfer or another payment method, we may collect information such as:

• account holder name;
• Mobile Money number;
• Mobile Money network;
• bank name;
• bank account number, where applicable;
• payout preference;
• payout amount;
• transaction reference;
• payout status; and
• information required to reconcile the payout.

Payments may be processed through licensed banks, electronic money issuers, payment service providers or other authorised financial-service partners.

Such providers may process your personal information in accordance with their own legal obligations and privacy policies.

GoBites does not necessarily receive or store all credentials used by a third-party payment provider to authenticate or complete a transaction.

When you use the Courier application, GoBites may automatically collect technical information such as:

• device type;
• operating system;
• application version;
• IP address;
• device identifiers;
• language settings;
• network information;
• application logs;
• crash reports;
• diagnostic information;
• session data;
• authentication events; and
• dates and times of application use.

We may process this information to:

• maintain application functionality;
• diagnose problems;
• improve performance;
• secure accounts;
• detect suspicious activity;
• prevent fraud;
• understand application usage; and
• improve our Services.

When you communicate with GoBites through:

• the Courier application;
• telephone;
• SMS;
• email;
• WhatsApp;
• social media;
• support forms; or
• another authorised channel,

we may collect and retain information concerning the communication.

This may include:

• your identity and contact details;
• order reference;
• complaint details;
• support request;
• photographs;
• documents;
• screenshots;
• messages;
• dispute information; and
• actions taken to address the issue.

Such records may be used for customer and Courier support, training, dispute resolution, safety, fraud prevention and service improvement.

If a Courier reports or becomes involved in an accident, security event, threatening incident, customer complaint, merchant dispute or other safety matter, GoBites may process information necessary to investigate and respond.

Depending on the circumstances, this may include:

• names;
• telephone numbers;
• location data;
• delivery records;
• photographs;
• videos;
• witness information;
• support communications;
• medical or emergency information voluntarily supplied where relevant;
• police or regulatory reports; and
• other evidence reasonably connected to the incident.

Sensitive information will be handled with appropriate care and only where there is a legitimate and lawful reason for processing it.

GoBites may process Courier account, device, transaction, location, delivery and behavioural information to detect or investigate:

• account takeover;
• identity fraud;
• falsified deliveries;
• false pickup or completion;
• GPS manipulation;
• unauthorised account sharing;
• promotional abuse;
• payment fraud;
• suspicious payout activity;
• theft;
• customer or merchant misconduct;
• threats to platform security; and
• violations of applicable GoBites policies.

Where reasonably necessary, GoBites may:

• request verification;
• investigate an account;
• restrict certain functions;
• temporarily suspend access;
• preserve relevant records;
• refer suspected unlawful conduct to competent authorities; or
• take other appropriate measures.

Any such action remains subject to applicable law and GoBites' contractual obligations.

GoBites may process Courier personal information to:

26.1 Create and Administer Courier Accounts

Including to:

• register Couriers;
• authenticate accounts;
• maintain profiles;
• verify identity;
• communicate account information; and
• provide access to Courier functionality.

26.2 Operate Delivery Services

Including to:

• determine availability;
• identify nearby Couriers;
• broadcast delivery opportunities;
• assign orders;
• facilitate pickup;
• facilitate navigation;
• facilitate delivery;
• track active deliveries;
• calculate estimated arrival times; and
• verify delivery completion.

26.3 Process Earnings and Payouts

Including to:

• calculate earnings;
• display balances;
• process payout requests;
• make payments;
• reconcile transactions;
• investigate payment errors; and
• maintain required financial records.

26.4 Promote Safety and Security

Including to:

• prevent fraud;
• authenticate users;
• investigate suspicious behaviour;
• investigate accidents or incidents;
• enforce platform rules; and
• protect customers, merchants, Couriers and GoBites.

26.5 Provide Support

Including to:

• respond to questions;
• resolve delivery issues;
• address payment disputes;
• investigate complaints;
• recover accounts; and
• provide technical assistance.

26.6 Improve GoBites

Including to:

• analyse delivery operations;
• improve dispatch;
• improve mapping;
• improve Courier experience;
• improve application performance;
• assess platform reliability;
• develop new features; and
• perform business analytics.

26.7 Comply With Law

Including to comply with:

• applicable legislation;
• regulatory requirements;
• court orders;
• lawful governmental requests;
• tax and accounting requirements; and
• other legal obligations.

GoBites will process Courier personal information only where there is an appropriate basis under applicable law.

Depending on the circumstances, processing may be necessary:

• to provide the Courier platform and perform obligations arising from the Courier relationship;
• because you have provided consent;
• to comply with a legal obligation;
• to protect legitimate interests of GoBites or another person where permitted by law;
• to protect safety or security;
• to establish, exercise or defend legal claims; or
• for another basis recognised under applicable law.

Where processing depends on consent, you may withdraw that consent subject to applicable law.

Withdrawal does not ordinarily affect processing that was lawful before consent was withdrawn.

If certain data is technically necessary to provide the Courier service, withdrawing the relevant permission may mean that some or all Courier functionality can no longer operate.

For example, refusing location access may prevent GoBites from determining your proximity to merchants, dispatching certain deliveries, providing navigation or tracking an active delivery.

GoBites does not sell Courier personal data merely because a person uses the Courier platform.

We may share information only where reasonably necessary for legitimate operational, payment, legal, safety or platform purposes.

During an active delivery, GoBites may provide a customer with limited information concerning the assigned Courier.

Depending on the feature and delivery stage, this may include:

• Courier first name or appropriate identifier;
• profile photograph, where used;
• Courier location during the relevant delivery stage;
• estimated arrival time;
• delivery progress;
• vehicle type or other relevant delivery identifier;
• rating, where displayed;
• communication functionality; and
• information reasonably necessary to recognise or communicate with the assigned Courier.

GoBites should not provide customers with unrestricted access to Courier personal information where it is unnecessary for completing the delivery.

To facilitate pickup, GoBites may provide the merchant with limited information concerning the assigned Courier.

This may include:

• Courier name or identifier;
• profile photograph, where applicable;
• location or estimated arrival during the relevant pickup stage;
• order reference;
• pickup status;
• communication functionality; and
• other information reasonably necessary to coordinate collection.

Merchant access to Courier information should be limited to legitimate operational purposes.

We may share information required to process Courier payouts with:

• banks;
• electronic money issuers;
• Mobile Money providers;
• payment service providers;
• payment gateways; and
• other authorised financial institutions.

Information shared may include:

• Courier name;
• telephone number;
• Mobile Money number;
• bank details where applicable;
• payout amount;
• transaction reference; and
• reconciliation information.

Third-party payment providers may independently be required to collect or process additional information under applicable financial-services laws.

The Courier application may rely on third-party mapping, navigation or location technology.

Where necessary, location, route or device information may be processed by or transmitted through these providers to enable:

• map display;
• address search;
• routing;
• navigation;
• distance calculation;
• estimated arrival times; and
• other location-related functionality.

The privacy practices of an independent third-party provider may also be governed by that provider's own privacy policy.

GoBites may engage third parties to support functions such as:

• cloud hosting;
• communications;
• OTP delivery;
• SMS;
• application infrastructure;
• mapping;
• customer support;
• Courier support;
• cybersecurity;
• analytics;
• fraud prevention;
• identity verification;
• payment processing; and
• software development or maintenance.

We seek to provide service providers only with information reasonably required to perform the relevant function and to impose appropriate privacy and security obligations where required.

GoBites may disclose Courier personal information where required or permitted by applicable law, including to:

• courts;
• law-enforcement agencies;
• regulatory authorities;
• tax authorities;
• the Data Protection Commission;
• other competent governmental bodies; or
• professional advisers assisting GoBites with legitimate legal matters.

Information may also be disclosed where reasonably necessary to:

• investigate suspected unlawful activity;
• protect the rights or property of GoBites;
• protect customers, merchants or Couriers;
• respond to emergencies; or
• establish, exercise or defend legal claims.

If GoBites is involved in an investment, financing, merger, acquisition, restructuring, sale of business or assets or similar corporate transaction, relevant personal information may be disclosed to appropriate:

• investors;
• lenders;
• purchasers;
• advisers;
• auditors; or
• transaction counterparties.

Any such disclosure will remain subject to applicable legal and confidentiality requirements.

Where permitted by law, GoBites may send Couriers communications concerning:

• Courier programmes;
• incentives;
• promotions;
• new features;
• events;
• campaigns;
• referral opportunities; and
• other platform opportunities.

Where consent is legally required, GoBites will seek the appropriate consent.

Eligible marketing communications should provide a reasonable means of opting out.

Opting out of marketing does not prevent GoBites from sending necessary operational communications such as:

• OTPs;
• security notices;
• delivery requests;
• account updates;
• payout information;
• policy updates;
• support communications; and
• other messages necessary to operate the Courier service.

GoBites retains Courier personal information only for as long as reasonably necessary for the purpose for which the information was collected or another lawful purpose.

Retention periods may depend on:

• whether the Courier account remains active;
• delivery and transaction history;
• payout records;
• tax and accounting requirements;
• identity-verification requirements;
• fraud-prevention needs;
• safety incidents;
• legal disputes;
• limitation periods;
• regulatory requirements;
• ongoing investigations; and
• other legitimate operational or legal considerations.

Closing or deleting a Courier account does not necessarily result in immediate deletion of every record associated with that account.

For example, GoBites may need to retain certain:

• transaction records;
• payout records;
• order records;
• fraud-prevention records;
• legal records;
• safety records; and
• dispute information

for an appropriate period where required or permitted by law.

When personal information is no longer reasonably required, GoBites may securely delete, destroy or anonymise it in accordance with applicable requirements.

GoBites takes reasonable technical and organisational measures designed to protect Courier personal information from:

• loss;
• unauthorised access;
• unauthorised disclosure;
• unlawful processing;
• alteration;
• misuse; and
• destruction.

Appropriate safeguards may include:

• access controls;
• authentication;
• OTP verification;
• encryption where appropriate;
• secure infrastructure;
• system logging;
• monitoring;
• access restrictions;
• security testing;
• employee controls; and
• contractual safeguards for relevant third parties.

However, no electronic platform or method of transmission can be guaranteed to be completely secure.

Couriers are also responsible for protecting their accounts and devices.

You should:

• secure your telephone;
• secure your Courier account;
• keep your OTP confidential;
• avoid allowing another person to operate your account without authorisation;
• promptly report suspected account compromise; and
• keep relevant payment details accurate and secure.

GoBites may use cloud, technology, mapping, communications or other service providers whose infrastructure is located outside Ghana.

This means certain personal information may, in appropriate circumstances, be processed or stored outside Ghana.

Where GoBites transfers personal information internationally, it will seek to ensure that the transfer is carried out in accordance with applicable Ghanaian data protection requirements and that appropriate safeguards are implemented where required.

Subject to the Data Protection Act, 2012 (Act 843), other applicable laws and lawful limitations, Couriers may have rights concerning their personal information.

These may include the following.

40.1 Right to Be Informed

You have the right to receive appropriate information concerning the collection and processing of your personal data.

40.2 Right of Access

You may request information about whether GoBites processes personal data concerning you and, where applicable, request access to information to which you are legally entitled.

40.3 Right to Correction

You may request that inaccurate, incomplete, misleading or outdated personal information be corrected.

Certain information may be editable directly through your Courier account.

40.4 Right to Object

Subject to applicable law, you may object to particular processing of your personal information in circumstances recognised by law.

40.5 Right Relating to Direct Marketing

You may object to the use of your personal information for eligible direct-marketing purposes.

40.6 Withdrawal of Consent

Where a processing activity is based on your consent, you may withdraw that consent.

This will not ordinarily affect processing lawfully carried out before the withdrawal.

Where the information is necessary to provide a particular Courier feature, withdrawal may prevent that feature from functioning.

40.7 Correction, Blocking, Erasure or Destruction

Where provided under applicable law, you may request appropriate correction, blocking, erasure or destruction of personal data processed unlawfully or no longer lawfully required, subject to applicable exceptions.

GoBites may lawfully retain certain information despite an account-deletion request where that retention is necessary for legal, financial, fraud-prevention, safety, dispute-resolution or other lawful purposes.

To make a privacy request, contact:

GoBites Privacy Team

Email: Hello@usegobites.com

Website: https://usegobites.com

Please provide sufficient information for GoBites to identify:

• you;
• the relevant Courier account; and
• the nature of your request.

GoBites may take reasonable steps to verify your identity before granting access to, correcting or deleting personal information.

This verification is intended to prevent another person from unlawfully obtaining or altering your personal data.

Where GoBites provides an account-deletion function, a Courier may request deletion using the method provided through the Courier application, website or designated support channel.

Before completing deletion, GoBites may:

• verify your identity;
• confirm outstanding deliveries;
• address unresolved payout matters;
• preserve information relating to disputes;
• comply with legal retention requirements; and
• take reasonable measures to prevent fraud or misuse.

Deletion of your account does not necessarily require deletion of records GoBites is legally entitled or required to retain.

Information retained following account closure will remain subject to appropriate safeguards and should not be used for unrelated purposes merely because the account has been closed.

You may be able to manage location permissions through your mobile device settings.

Depending on your device, you may be able to choose permissions such as:

• precise or approximate location;
• location only while using the application;
• background location;
• one-time location access; or
• no location access.

Certain permissions may vary by operating system.

Because location is integral to delivery dispatch and tracking, disabling necessary location permissions may prevent or materially limit Courier functions such as:

• going online;
• receiving nearby delivery opportunities;
• being assigned an order;
• navigation;
• merchant tracking;
• customer delivery tracking;
• pickup verification; and
• delivery completion.

GoBites should request only the location access reasonably required by the functionality being provided.

If you stop providing delivery services through GoBites, we may retain certain information concerning your previous activities where reasonably necessary or legally required.

This may include:

• account information;
• completed delivery records;
• payout information;
• transaction information;
• disputes;
• safety records;
• fraud-prevention information; and
• information required for legal, tax, accounting or regulatory purposes.

Former Courier information remains subject to this Privacy Policy to the extent applicable.

The GoBites Courier application may integrate with or link to services operated by third parties.

These may include:

• mapping services;
• navigation applications;
• Mobile Money providers;
• banks;
• payment providers;
• telecommunications providers; and
• other digital services.

Where you leave the GoBites environment or independently interact with a third-party service, that service's own privacy policy and terms may apply.

GoBites is not responsible for the independent privacy practices of a third party merely because the third-party service can be accessed from or integrated with GoBites.

GoBites may update this Privacy Policy periodically to reflect:

• changes to the Courier platform;
• new features;
• operational changes;
• changes in technology;
• changes in data-processing practices;
• legal or regulatory developments; or
• improvements to our privacy programme.

When the policy is updated, GoBites will revise the Last Updated date displayed at the beginning of the policy.

Where changes are material or where applicable law requires additional notice or consent, GoBites may notify Couriers through one or more appropriate channels, such as:

• the Courier application;
• email;
• SMS;
• push notification;
• website notice; or
• another appropriate communication method.

Couriers should review this Privacy Policy periodically.

If you have a concern about how GoBites collects or processes your personal information, please contact GoBites first so that we can investigate the issue.

Contact:

GoBites Ltd Ghana

Privacy Email: Hello@usegobites.com

Courier Support: support@usegobites.com

Website: https://usegobites.com

GoBites will consider legitimate privacy complaints and take appropriate action where required.

The Data Protection Commission of Ghana is the statutory body responsible for regulating data protection under Ghanaian law.

If you believe that GoBites has infringed your rights concerning personal data, you may have the right to lodge a complaint with the Data Protection Commission in accordance with applicable law.

Nothing in this Privacy Policy prevents a Courier from exercising a lawful right to contact the Commission.

This Privacy Policy and GoBites' processing of Courier personal information in Ghana are subject to applicable laws of the Republic of Ghana, including the Data Protection Act, 2012 (Act 843).

Nothing in this Privacy Policy is intended to exclude, restrict or waive any data-protection right that cannot lawfully be excluded, restricted or waived.

For questions, privacy requests, complaints or concerns concerning this Courier Privacy Policy, contact:

GoBites Ltd Ghana

Privacy Email: Hello@usegobites.com

Courier Support: support@usegobites.com

Website: https://usegobites.com

When contacting us regarding a privacy matter, please provide sufficient information to allow us to identify the relevant account and understand your request.

We may request appropriate identity verification before disclosing, correcting or deleting personal information.

Welcome to GoBites Merchant (“GoBites”, “we”, “our”, or “us”).

This Privacy Policy explains how GoBites collects, uses, stores, shares, and protects information when merchants, restaurants, grocery stores, pharmacies, bakeries, cafés, convenience stores, and other food businesses use the GoBites Merchant mobile application and related services.

By creating a merchant account or using the GoBites Merchant App, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy applies to:

• GoBites Merchant mobile application
• Merchant Portal
• GoBites website
• Merchant onboarding
• Customer support interactions
• Communications with GoBites

This policy does not apply to third-party websites or services that operate independently from GoBites.

Depending on how you use GoBites Merchant, we may collect the following information.

Business Information

• Business name
• Business registration details (where applicable)
• Business category
• Store description
• Business address
• Delivery locations
• Operating hours
• Tax identification numbers (where required)

Merchant Account Information

• Full name
• Phone number
• Email address
• Password (encrypted)
• Profile photo (optional)

Identity Verification Information

Where required by law or our policies, we may request:

• Government-issued identification
• Business ownership verification
• Banking verification
• Mobile Money verification

This information helps us reduce fraud and maintain marketplace trust.

Payment Information

To process merchant payouts, we may collect:

• Mobile Money number
• Bank account information
• Account holder name
• Bank name
• Transaction history
• Settlement information

GoBites does not store your payment card details unless processed through an approved payment provider.

Order Information

We collect information relating to orders processed through the platform, including:

• Order number
• Ordered items
• Customer delivery address
• Delivery status
• Order value
• Discounts
• Taxes
• Refund information
• Cancellation reasons

Menu Information

Merchants may upload:

• Food photos
• Product descriptions
• Pricing
• Inventory availability
• Product categories
• Add-ons
• Preparation times

Device Information

We may automatically collect:

• Device model
• Operating system
• App version
• Device identifiers
• IP address
• Crash reports
• Diagnostic information

Usage Information

We collect information regarding how merchants use the application, including:

• Login activity
• Features used
• Pages viewed
• Session duration
• Button interactions
• Performance analytics

This helps us improve our products.

Location Information

With your permission, GoBites may access your device location to:

• Verify business location
• Improve delivery operations
• Detect fraudulent activity
• Assist customer support

Location services can be disabled from your device settings; however, some features may become unavailable.

We use your information to:

• Create and manage merchant accounts
• Process customer orders
• Facilitate deliveries
• Process merchant payouts
• Improve platform security
• Prevent fraud
• Provide customer support
• Improve our products
• Send important account notifications
• Monitor platform performance
• Comply with legal obligations
• Resolve disputes
• Enforce our Terms & Conditions

GoBites may send notifications regarding:

• New orders
• Order updates
• Payment confirmations
• Settlement notifications
• Important account alerts
• Security alerts
• Product updates

Marketing notifications are optional and can be disabled from your device settings.

We do not sell your personal information.

We may share information only when necessary with:

Customers

Customers may see:

• Business name
• Store logo
• Store location
• Operating hours
• Menu
• Ratings and reviews

Delivery Partners

Delivery partners may receive only the information necessary to complete deliveries, including:

• Pickup location
• Order number
• Customer delivery details
• Order status

Payment Providers

To facilitate payments and settlements, we may share information with licensed payment processors and financial institutions.

Service Providers

We may use trusted third-party providers for:

• Cloud hosting
• Analytics
• Customer support
• Push notifications
• Payment processing
• Identity verification

These providers may access information only to perform services on our behalf.

Legal Authorities

We may disclose information where required by law or to:

• Comply with court orders
• Prevent fraud
• Protect users
• Protect GoBites
• Investigate illegal activity

We implement administrative, technical, and physical safeguards designed to protect your information.

These measures include:

• Encryption in transit
• Secure authentication
• Role-based access controls
• Monitoring and logging
• Secure cloud infrastructure
• Regular security updates

While we strive to protect your information, no system can guarantee absolute security.

We retain information only for as long as necessary to:

• Provide our services
• Maintain financial records
• Resolve disputes
• Meet legal and regulatory obligations
• Improve our platform

When information is no longer required, it is securely deleted or anonymized.

Depending on applicable law, you may have the right to:

• Access your information
• Correct inaccurate information
• Update your account
• Delete your account
• Object to certain processing
• Request data portability
• Withdraw consent where processing relies on consent

Certain requests may be limited where GoBites must retain information for legal, regulatory, or security purposes.

Our websites and services may use cookies and similar technologies to:

• Remember preferences
• Improve performance
• Analyze usage
• Enhance security

You can manage cookie preferences through your browser settings where applicable.

GoBites Merchant is intended for business owners and individuals who are at least 18 years old.

We do not knowingly collect personal information from children.

Your information may be processed or stored in countries outside your country of residence where our service providers operate.

Where required, we implement appropriate safeguards to protect transferred information.

We may update this Privacy Policy from time to time.

Material changes will be communicated through the GoBites Merchant App, email, or our website. The updated version becomes effective on the date stated at the top of this policy.

If you have questions about this Privacy Policy or our privacy practices, please contact us:

GoBites Ltd.

• Email: Hello@usegobites.com
• Support: support@usegobites.com
• Website: https://usegobites.com

You can also visit our Support page.

By registering for, accessing, or using the GoBites Merchant App, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, disclosure, and processing of your information as described herein.