Privacy Notice

1. Who we are

DOA Technologies Ltd, trading as Pantry by FoodBank.ng, is the controller responsible for the personal data described in this notice. We are a private limited company incorporated in Scotland, United Kingdom, company number 899261. You can contact us or our data protection contact at support@foodbank.ng.

UK data protection law (the UK GDPR and the Data Protection Act 2018) applies directly to us as a company established in the United Kingdom, so no separate UK representative is required.

2. The information we collect

• Account information: your name, email address, phone number, date of birth, country, password in hashed form, and account preferences.
• Address and delivery information: your address and postcode, and the name, phone number, address, and delivery instructions of a recipient you nominate.
• Order and group information: items, quantities, delivery choices, Family Basket schedules, Bulk Buy Group membership and contributions, order status, refunds, and support history.
• Payment information: wallet balance, funding amount, payment status, transaction references, and limited payer details returned by our payment providers. We do not receive or store your full card number or card security code.
• Technical and usage information: IP address, browser and device information, security events, session data, pages used, and referral or campaign information.
• Communications: messages, complaints, survey responses, and records of your marketing choices.

3. How and why we use personal data

Where we ask for consent, refusing or withdrawing it does not affect account, order, or legal processing that relies on another lawful basis. We do not make decisions about Pantry customers based solely on automated processing that produce legal or similarly significant effects.

4. Information about other people

Family Basket and delivery features let you give us another person's details. You must have a lawful reason to share those details and should tell the recipient that Pantry will use them to arrange and communicate about the delivery. We use recipient information only for fulfilment, safety, support, fraud prevention, and required records.

5. Who receives information

We share only what is reasonably necessary with:

• our payment provider, Stripe, for hosted checkout, payment confirmation, refunds, fraud controls, and reconciliation;
• hosting, database, authentication, email, monitoring, and customer-support service providers acting under our instructions;
• wholesalers, fulfilment teams, couriers, and delivery partners in the UK or Nigeria, depending on the service you choose;
• professional advisers, insurers, auditors, banks, regulators, courts, law enforcement, or public authorities where necessary or legally required; and
• a buyer or successor if our business or relevant assets are reorganised or transferred, subject to appropriate confidentiality protections.

We do not sell personal data.

6. International transfers

Pantry is operated by DOA Technologies Ltd in the United Kingdom, but uses service providers and fulfilment partners in more than one country, including Nigeria for Family Basket deliveries. This means personal data may be transferred from the UK to Nigeria, the United States, the European Economic Area, or another country. Where UK law treats a transfer as restricted, we use an applicable UK adequacy regulation or contractual safeguards such as the UK International Data Transfer Agreement or UK Addendum, together with supplementary safeguards where required. Contact us for information about the safeguard used for a particular transfer.

7. How long we keep information

We keep personal data only for as long as needed for the purpose collected. Account information is normally kept while your account is active and for a limited period afterwards. Order, payment, refund, tax, and accounting records are kept for the period required by applicable law and to resolve disputes. Security logs and unsuccessful transaction records are kept for shorter periods unless an investigation requires longer retention. We delete or anonymise information when it is no longer needed.

8. Cookies and analytics

We use essential cookies and similar storage to keep you signed in, protect accounts, and remember actions needed to provide the service. We may also use analytics technologies to understand visits and performance. Where UK law requires consent, non-essential technologies should not be used until you choose to allow them. You can change available cookie choices or use your browser controls, although blocking essential cookies can prevent sign-in and checkout from working.

9. Your data protection rights

Depending on the circumstances, UK law gives you the right to:

• ask for a copy of your personal data;
• correct inaccurate or incomplete data;
• ask us to delete or restrict use of data;
• object to processing based on legitimate interests or to direct marketing;
• receive certain data in a portable format; and
• withdraw consent at any time where processing relies on consent.

These rights are not absolute. To exercise one, email support@foodbank.ng with the subject “Pantry data rights request”. We may need information to confirm your identity and will normally respond within one month.

You can also complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint. We would appreciate the opportunity to address your concern first.

10. Security

We use organisational and technical safeguards designed to protect personal data, including encrypted connections, access controls, hashed passwords, provider-hosted card entry, monitoring, and staff access limited by role. No internet service is completely secure, so please use a unique password and tell us promptly if you believe your account has been compromised.

11. Children

Pantry accounts are for people aged 18 or over. The service is not directed to children, and a child must not create an account. A delivery recipient may be younger than 18, but the customer placing and managing the order remains responsible for the account and instructions.

12. Changes and contact

We may update this notice when our services, providers, or legal obligations change. We will post the revised notice here and give additional notice where a change materially affects you. Questions and complaints can be sent to support@foodbank.ng.