Privacy Policy – Fetch Barbados

Data Controller: Exarsys Ltd (operating as "Fetch Barbados")

01 Our Commitment to Data Privacy

Exarsys Ltd (operating as "Fetch Barbados") is the Data Controller of your personal information. We are committed to processing your data transparently and securely. This policy explains how we collect, use, and protect your information when you use our mobile application and services.

02 Lawful Basis for Processing

Under the Barbados Data Protection Act (DPA), we only process your data when we have a legal basis:

Contractual Necessity: To create your account and facilitate food orders between you and Merchant Partners.
Consent: For precise location tracking and marketing communications.
Legitimate Interests: To prevent fraud, improve app performance, and ensure the safety of our marketplace.

03 Information We Collect

Identity & Contact: Full name, email address, and mobile phone number.
Geolocation Data: Real-time location (via GPS/Wi-Fi) to show nearby surplus food. You may withdraw consent for this via your device settings at any time.
Technical Data: Device ID, operating system, and App usage patterns.
Financial Data: Payments are processed via secure third-party gateways (e.g., Stripe). We do not store full credit card numbers on our servers.

04 How We Use Your Location

Fetch Barbados is a location-centric service. We use your location to:

Identify the Merchant Partners closest to you.
Provide accurate "Collection Windows" based on your proximity.
Send alerts when you are near a participating store (if background location is enabled).

05 Data Sharing and Disclosure

We do not sell your data. We share information only with:

Merchant Partners: Your name and order ID to verify your pickup.
Service Providers: Cloud hosting (AWS), payment processors, and mapping services (Google Maps).
Legal Authorities: Only when required by Barbados law or to protect against immediate harm.

06 Your Rights Under the Barbados DPA (2019-29)

As a "Data Subject" in Barbados, you have the following enforceable rights:

Right of Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure: Request that we delete your data (the "Right to be Forgotten").
Right to Withdraw Consent: You may opt-out of location tracking or marketing at any time.
Right to Lodge a Complaint: If you are unsatisfied with our response, you may contact the Office of the Data Protection Commissioner of Barbados.