Privacy Policy

1. Overview & Data Controller

This Privacy Policy applies to the software platform, website (noda.delivery), and WhatsApp-based messaging interfaces operated by noda technologies ltd ("Noda", "we", "our", or "us"), registered in England and Wales. We are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data We Collect in WhatsApp Conversations

When you interact with the Noda WhatsApp ordering bot, we process only the strictly necessary data points required to execute your order:

• WhatsApp Phone Number & Profile Name: Used for session authentication, order notifications, and delivery coordination.
• In-Session GPS Location Pin: When you choose to share your location pin in WhatsApp, our PostGIS geofencing engine calculates proximity to local merchants. We do not track continuous live location outside of the ordering thread.
• Order Selections & Customizations: Items, basket quantities, and dietary notes forwarded to the merchant kitchen.
• Delivery Verification OTP: A 4-digit code generated to confirm safe doorstep handover.

3. Legal Basis for Processing

We process your data under the legal basis of Performance of a Contract (Article 6(1)(b) UK GDPR) to fulfill orders you place with partner merchants, and Legitimate Interests (Article 6(1)(f)) to prevent fraud and ensure platform integrity.

4. Data Sharing & Third-Party Processors

We share minimal necessary data strictly to fulfill delivery:

• Partner Merchants: Receive item specifications and pickup identifiers to prepare your goods.
• Delivery Couriers: Receive delivery destination addresses and contact telephone numbers to execute carriage.
• Payment Gateways (Stripe / Yellow Card): Process payment transactions under regulated PCI-DSS standards. Noda never stores your full debit/credit card numbers.
• Meta Platforms, Inc.: Provides the underlying WhatsApp Cloud API communication infrastructure.

5. Data Retention & Your Rights

Under UK GDPR, you have the right to access, rectify, or request erasure of your personal data. You may exercise these rights at any time by emailing our Data Protection Officer at privacy@noda.delivery.

6. Contact Us

noda technologies ltd
Email: privacy@noda.delivery or admin@noda.delivery.