Privacy Policy

What data we collect

We only collect the data we need to run the service and fulfil your orders. Depending on how you use Urua, this includes:

• Account details: your name, email address and phone number, which you provide when you create an account.
• Delivery addresses and location: the addresses you save and the location or map coordinates of where you want an order delivered, which we use to plan and complete delivery.
• Order and quote details: the items, errands, meals or store orders you request, along with the quotes and order history tied to your account.
• Contact and enquiry details: if you contact us or ask to be notified when Urua opens in your area, the email address or other contact details you give us so we can respond and keep you updated.

How we use your data

We use the data described above to:

• create and manage your account, and let you sign in;
• take, process and fulfil your orders, errands and quotes;
• arrange delivery to your chosen address and keep you updated on its progress;
• process your payments through our payment partner;
• send you account, order and transactional messages, such as confirmations and delivery updates;
• respond to your questions and provide support;
• keep the service secure, prevent abuse, and meet our legal obligations; and
• contact you about when Urua opens in your area, if you have asked us to keep you updated.

Legal basis

We process your personal data on the following bases:

• Performance of a contract: to provide the service you ask for, such as fulfilling an order and arranging delivery.
• Your consent: for example, when you ask us to keep you updated about Urua or agree to receive certain messages. You can withdraw consent at any time.
• Legitimate interests: to keep the service running, secure and reliable, and to prevent fraud and abuse, where this does not override your rights.
• Legal obligation: where we are required to process data to comply with applicable law.

Who we share it with

We do not sell your personal data. We share it only with the service providers we rely on to run Urua, and only as far as each one needs to do its job. These providers process data on our behalf:

• Supabase

  Authentication and database hosting. Stores your account and order data and handles sign-in.

• OPay

  Payment processing. Handles your payment when you place an order. Urua does not store your card details.

• Shipbubble

  Delivery and courier services. Receives the delivery address, phone number and coordinates needed to deliver your order.

• Resend

  Email delivery. Sends transactional and account emails, such as confirmations and updates.

• Google Maps

  Maps and address geocoding. Helps us locate and confirm delivery addresses.

• Vercel

  Website and app hosting. Serves the Urua website and app to your device.

We may also disclose data where we are required to do so by law or to protect the rights, safety and security of our users and the service.

Cookies and local storage

Urua uses local storage and a service worker to provide core functionality, such as keeping you signed in and letting the app work as a Progressive Web App. These are essential to the way the service runs.

Urua currently uses no third-party advertising or analytics trackers.

International transfers

Some of the service providers we work with operate or store data outside Nigeria. Where your personal data is transferred internationally, we take steps intended to ensure it continues to be protected in line with applicable data protection law.

Data retention

We keep your personal data for as long as it is needed to provide the service, maintain your account and order history, and meet our legal, accounting and security obligations. When data is no longer needed for these purposes, we take steps to delete or anonymise it.

Security

We take reasonable measures to protect your personal data against unauthorised access, loss, misuse and alteration, including relying on reputable providers for hosting, authentication and payments. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to keep your data safe.

Your rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you;
• Correct data that is inaccurate or incomplete;
• Delete your personal data, where there is no overriding reason for us to keep it; and
• Object to or restrict certain processing of your data.

To exercise any of these rights, email us at hello@urua.io. We will respond within the timeframe required by applicable law.

Children

Urua is not directed at children, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at hello@urua.io so we can take appropriate steps.

Changes to this policy

We may update this policy from time to time as the service evolves or as the law changes. When we do, we will revise the "Last updated" date at the top of this page. Significant changes may be communicated to you directly where appropriate.

Governing law

This policy and our handling of your personal data are governed by the laws of Nigeria, including the Nigeria Data Protection Act 2023 (NDPA).

Contact

If you have questions about this policy or how we handle your personal data, or if you want to exercise your rights, contact us at hello@urua.io.