Partner as a restaurant

Privacy Policy

Effective Date: 15th September 2025

1. Introduction

Papaye Fast Foods is one of Ghana’s most iconic homegrown restaurant chains, founded in 1991 and known for serving quality yet affordable meals that blend local flavours with fast-food convenience. With branches across Accra and beyond, Papaye has built a strong reputation for its signature grilled chicken, fried rice, and generous portions.What makes Papaye stand out is its authentic Ghanaian identity, consistent food quality, and deep customer loyalty. Unlike foreign franchises, it offers a uniquely local taste experience while maintaining high standards of hygiene, service, and value for money, making it a beloved name in Ghana’s dining scene.

2. Scope of This Policy

Papaye Fast Foods is one of Ghana’s most iconic homegrown restaurant chains, founded in 1991 and known for serving quality yet affordable meals that blend local flavours with fast-food convenience. With branches across Accra and beyond, Papaye has built a strong reputation for its signature grilled chicken, fried rice, and generous portions.What makes Papaye stand out is its authentic Ghanaian identity, consistent food quality, and deep customer loyalty. Unlike foreign franchises, it offers a uniquely local taste experience while maintaining high standards of hygiene, service, and value for money, making it a beloved name in Ghana’s dining scene.

3. Personal Data We Collect

We collect various categories of personal data, including:

a. Customers

  • Full name
  • Contact number
  • Delivery address
  • Email address (optional)
  • Payment information (processed through third-party providers)
  • Location data (for real-time delivery tracking)
  • Order history and preferences
  • Device information and usage logs

b. Restaurant Partners

  • Business name and registration number
  • Business address and GPS location
  • Representative’s full name and contact details
  • Bank account and payment settlement information
  • Menu data, pricing, operational hours

c. Riders and Logistics Providers

  • Full name
  • Government-issued ID and verification documents
  • Driver’s license and/or rider permit
  • Contact details
  • Bank account details
  • Live GPS location during delivery operations
  • Attendance, delivery logs, and performance metrics

d. Staff and Contractors

  • Employment details
  • Background check results
  • Access credentials
  • System activity and audit logs

e. General Users and Visitors

  • IP address
  • Browser type
  • Device identifiers
  • Usage patterns (e.g., pages visited, time spent)
  • Cookie data (subject to user consent)

4. Purpose of Data Collection

We only process personal data for specific, explicit, and legitimate purposes:

  • Order fulfillment: To process food orders and coordinate delivery
  • Communication: To send confirmations, notifications, and support responses
  • Payment processing: To enable split payments between restaurants, riders, and Curia Foods
  • Customer support: To assist users with queries and resolve complaints
  • Operational performance: To monitor app usage, delivery metrics, and rider activity
  • Vendor onboarding and management: To verify and manage restaurant partners
  • Legal compliance: To fulfill obligations under tax, consumer protection, and data protection laws
  • Security: To detect and prevent fraud, abuse, or service misuse

5. Lawful Basis for Processing

Curia Foods processes data based on the following lawful grounds: - Consent: For optional communications or marketing - Contractual necessity: To deliver the service you signed up for - Legal obligation: To comply with statutory requirements - Legitimate interest: For service improvement, fraud prevention, or operational effectiveness

6. Data Sharing and Disclosure

We do not sell your personal data. However, we may share information under strict controls:

a. With Service Providers:

  • Payment processors (e.g., for split settlements)
  • Hosting and cloud storage providers
  • SMS/email notification tools
  • Customer support platforms

b. With Riders:

  • Customer contact details and address — strictly for order fulfillment

c. With Regulatory Bodies:

  • Tax authorities, law enforcement, or courts under lawful request

d. With Partners:

  • Restaurant and vendor information may be shared on our customer-facing platform

All third parties are bound by data processing agreements with confidentiality and security provisions.

7. International Data Transfers

Data collected may be stored or processed outside Ghana, particularly where we use third-party services with global infrastructure. In such cases, we ensure: - Adequate safeguards are in place (e.g., standard contractual clauses) - Data is only transferred to jurisdictions with appropriate data protection laws

8. Data Retention

We retain personal data only as long as necessary to fulfill the purposes stated: - Customer & Order Data: Retained for 6 years for auditing and compliance - Rider & Vendor Data: Retained for duration of partnership + 3 years - Inactive Accounts: Automatically deleted after 24 months of inactivity - Employment & Internal Logs: Retained per internal HR and IT policies

9. Your Data Rights

Under Ghana’s Data Protection Act, you have the following rights: - Right to access your personal data - Right to correction of inaccurate or outdated data - Right to object to certain types of processing - Right to request deletion (subject to legal obligations) - Right to withdraw consent where processing is based on consent - Right to complain to the Data Protection Commission

To exercise your rights, contact us at: privacy@curiafoods.com

10. Cookies and Tracking

Our website and apps use cookies and similar technologies: - Essential cookies: For platform functionality - Analytics cookies: For usage insights (Google Analytics, etc.) - Marketing cookies: Only with user consent

You may manage cookie preferences via your browser settings or platform banner.

11. Data Security Measures

We implement strong security controls, including: - Data encryption (in transit and at rest) - Two-factor authentication for admin access - Firewalls and DDoS protection - Role-based access controls (RBAC) - Regular vulnerability assessments - Staff confidentiality agreements and data protection training

In case of a data breach, we will notify affected individuals and the Data Protection Commission within 72 hours, as required by law.

12. Children’s Privacy

Our services are not directed at individuals under 18. We do not knowingly collect data from minors without verifiable parental or guardian consent.

13. Changes to This Policy

We may update this policy from time to time. Users will be notified through the app or email when significant changes occur. The latest version will always be available at curiafoods.com/privacy.

14. Contact Us

Data Protection Officer (DPO)Curia Foods📧 info@curiafoods.comCuria Foods is committed to building a responsible, secure, and transparent ecosystem where data protection is at the core of our operations.

LOOKING FOR A PARTNER FOR YOUR KITCHEN?

Partner as a restaurant

© 2025 Curia Foods. All rights reserved.

Partner as a restaurant

Privacy Policy

Effective Date: 15th September 2025

1. Introduction

Papaye Fast Foods is one of Ghana’s most iconic homegrown restaurant chains, founded in 1991 and known for serving quality yet affordable meals that blend local flavours with fast-food convenience. With branches across Accra and beyond, Papaye has built a strong reputation for its signature grilled chicken, fried rice, and generous portions.What makes Papaye stand out is its authentic Ghanaian identity, consistent food quality, and deep customer loyalty. Unlike foreign franchises, it offers a uniquely local taste experience while maintaining high standards of hygiene, service, and value for money, making it a beloved name in Ghana’s dining scene.

2. Scope of This Policy

Papaye Fast Foods is one of Ghana’s most iconic homegrown restaurant chains, founded in 1991 and known for serving quality yet affordable meals that blend local flavours with fast-food convenience. With branches across Accra and beyond, Papaye has built a strong reputation for its signature grilled chicken, fried rice, and generous portions.What makes Papaye stand out is its authentic Ghanaian identity, consistent food quality, and deep customer loyalty. Unlike foreign franchises, it offers a uniquely local taste experience while maintaining high standards of hygiene, service, and value for money, making it a beloved name in Ghana’s dining scene.

3. Personal Data We Collect

We collect various categories of personal data, including:

a. Customers

  • Full name
  • Contact number
  • Delivery address
  • Email address (optional)
  • Payment information (processed through third-party providers)
  • Location data (for real-time delivery tracking)
  • Order history and preferences
  • Device information and usage logs

b. Restaurant Partners

  • Business name and registration number
  • Business address and GPS location
  • Representative’s full name and contact details
  • Bank account and payment settlement information
  • Menu data, pricing, operational hours

c. Riders and Logistics Providers

  • Full name
  • Government-issued ID and verification documents
  • Driver’s license and/or rider permit
  • Contact details
  • Bank account details
  • Live GPS location during delivery operations
  • Attendance, delivery logs, and performance metrics

d. Staff and Contractors

  • Employment details
  • Background check results
  • Access credentials
  • System activity and audit logs

e. General Users and Visitors

  • IP address
  • Browser type
  • Device identifiers
  • Usage patterns (e.g., pages visited, time spent)
  • Cookie data (subject to user consent)

4. Purpose of Data Collection

We only process personal data for specific, explicit, and legitimate purposes:

  • Order fulfillment: To process food orders and coordinate delivery
  • Communication: To send confirmations, notifications, and support responses
  • Payment processing: To enable split payments between restaurants, riders, and Curia Foods
  • Customer support: To assist users with queries and resolve complaints
  • Operational performance: To monitor app usage, delivery metrics, and rider activity
  • Vendor onboarding and management: To verify and manage restaurant partners
  • Legal compliance: To fulfill obligations under tax, consumer protection, and data protection laws
  • Security: To detect and prevent fraud, abuse, or service misuse

5. Lawful Basis for Processing

Curia Foods processes data based on the following lawful grounds: - Consent: For optional communications or marketing - Contractual necessity: To deliver the service you signed up for - Legal obligation: To comply with statutory requirements - Legitimate interest: For service improvement, fraud prevention, or operational effectiveness

6. Data Sharing and Disclosure

We do not sell your personal data. However, we may share information under strict controls:

a. With Service Providers:

  • Payment processors (e.g., for split settlements)
  • Hosting and cloud storage providers
  • SMS/email notification tools
  • Customer support platforms

b. With Riders:

  • Customer contact details and address — strictly for order fulfillment

c. With Regulatory Bodies:

  • Tax authorities, law enforcement, or courts under lawful request

d. With Partners:

  • Restaurant and vendor information may be shared on our customer-facing platform

All third parties are bound by data processing agreements with confidentiality and security provisions.

7. International Data Transfers

Data collected may be stored or processed outside Ghana, particularly where we use third-party services with global infrastructure. In such cases, we ensure: - Adequate safeguards are in place (e.g., standard contractual clauses) - Data is only transferred to jurisdictions with appropriate data protection laws

8. Data Retention

We retain personal data only as long as necessary to fulfill the purposes stated: - Customer & Order Data: Retained for 6 years for auditing and compliance - Rider & Vendor Data: Retained for duration of partnership + 3 years - Inactive Accounts: Automatically deleted after 24 months of inactivity - Employment & Internal Logs: Retained per internal HR and IT policies

9. Your Data Rights

Under Ghana’s Data Protection Act, you have the following rights: - Right to access your personal data - Right to correction of inaccurate or outdated data - Right to object to certain types of processing - Right to request deletion (subject to legal obligations) - Right to withdraw consent where processing is based on consent - Right to complain to the Data Protection Commission

To exercise your rights, contact us at: privacy@curiafoods.com

10. Cookies and Tracking

Our website and apps use cookies and similar technologies: - Essential cookies: For platform functionality - Analytics cookies: For usage insights (Google Analytics, etc.) - Marketing cookies: Only with user consent

You may manage cookie preferences via your browser settings or platform banner.

11. Data Security Measures

We implement strong security controls, including: - Data encryption (in transit and at rest) - Two-factor authentication for admin access - Firewalls and DDoS protection - Role-based access controls (RBAC) - Regular vulnerability assessments - Staff confidentiality agreements and data protection training

In case of a data breach, we will notify affected individuals and the Data Protection Commission within 72 hours, as required by law.

12. Children’s Privacy

Our services are not directed at individuals under 18. We do not knowingly collect data from minors without verifiable parental or guardian consent.

13. Changes to This Policy

We may update this policy from time to time. Users will be notified through the app or email when significant changes occur. The latest version will always be available at curiafoods.com/privacy.

14. Contact Us

Data Protection Officer (DPO)Curia Foods📧 info@curiafoods.comCuria Foods is committed to building a responsible, secure, and transparent ecosystem where data protection is at the core of our operations.

LOOKING FOR A PARTNER FOR YOUR KITCHEN?

Partner as a restaurant

© 2025 Curia Foods. All rights reserved.

Partner as a restaurant

Privacy Policy

Effective Date: 15th September 2025

1. Introduction

Curia Foods (“we”, “our”, or “us”) respects your privacy and is committed to protecting the personal data of our users, partners, and stakeholders. This Privacy Policy outlines how we collect, process, store, share, and safeguard your personal information when you use our platforms, including mobile applications, websites, and any services connected to Curia Foods. This policy is issued in compliance with the Data Protection Act, 2012 (Act 843) of the Republic of Ghana.

By accessing or using Curia Foods’ services, you consent to the terms described in this Privacy Policy.

2. Scope of This Policy

This policy applies to all individuals and entities interacting with Curia Foods, including but not limited to: - Customers placing orders - Restaurants using our vendor platform - Riders and logistics partners - Internal staff and contractors - Website visitors

3. Personal Data We Collect

We collect various categories of personal data, including:

a. Customers

  • Full name
  • Contact number
  • Delivery address
  • Email address (optional)
  • Payment information (processed through third-party providers)
  • Location data (for real-time delivery tracking)
  • Order history and preferences
  • Device information and usage logs

b. Restaurant Partners

  • Business name and registration number
  • Business address and GPS location
  • Representative’s full name and contact details
  • Bank account and payment settlement information
  • Menu data, pricing, operational hours

c. Riders and Logistics Providers

  • Full name
  • Government-issued ID and verification documents
  • Driver’s license and/or rider permit
  • Contact details
  • Bank account details
  • Live GPS location during delivery operations
  • Attendance, delivery logs, and performance metrics

d. Staff and Contractors

  • Employment details
  • Background check results
  • Access credentials
  • System activity and audit logs

e. General Users and Visitors

  • IP address
  • Browser type
  • Device identifiers
  • Usage patterns (e.g., pages visited, time spent)
  • Cookie data (subject to user consent)

4. Purpose of Data Collection

We only process personal data for specific, explicit, and legitimate purposes:

  • Order fulfillment: To process food orders and coordinate delivery
  • Communication: To send confirmations, notifications, and support responses
  • Payment processing: To enable split payments between restaurants, riders, and Curia Foods
  • Customer support: To assist users with queries and resolve complaints
  • Operational performance: To monitor app usage, delivery metrics, and rider activity
  • Vendor onboarding and management: To verify and manage restaurant partners
  • Legal compliance: To fulfill obligations under tax, consumer protection, and data protection laws
  • Security: To detect and prevent fraud, abuse, or service misuse

5. Lawful Basis for Processing

Curia Foods processes data based on the following lawful grounds: - Consent: For optional communications or marketing - Contractual necessity: To deliver the service you signed up for - Legal obligation: To comply with statutory requirements - Legitimate interest: For service improvement, fraud prevention, or operational effectiveness

6. Data Sharing and Disclosure

We do not sell your personal data. However, we may share information under strict controls:

a. With Service Providers:

  • Payment processors (e.g., for split settlements)
  • Hosting and cloud storage providers
  • SMS/email notification tools
  • Customer support platforms

b. With Riders:

  • Customer contact details and address — strictly for order fulfillment

c. With Regulatory Bodies:

  • Tax authorities, law enforcement, or courts under lawful request

d. With Partners:

  • Restaurant and vendor information may be shared on our customer-facing platform

All third parties are bound by data processing agreements with confidentiality and security provisions.

7. International Data Transfers

Data collected may be stored or processed outside Ghana, particularly where we use third-party services with global infrastructure. In such cases, we ensure: - Adequate safeguards are in place (e.g., standard contractual clauses) - Data is only transferred to jurisdictions with appropriate data protection laws

8. Data Retention

We retain personal data only as long as necessary to fulfill the purposes stated: - Customer & Order Data: Retained for 6 years for auditing and compliance - Rider & Vendor Data: Retained for duration of partnership + 3 years - Inactive Accounts: Automatically deleted after 24 months of inactivity - Employment & Internal Logs: Retained per internal HR and IT policies

9. Your Data Rights

Under Ghana’s Data Protection Act, you have the following rights: - Right to access your personal data - Right to correction of inaccurate or outdated data - Right to object to certain types of processing - Right to request deletion (subject to legal obligations) - Right to withdraw consent where processing is based on consent - Right to complain to the Data Protection Commission

To exercise your rights, contact us at: privacy@curiafoods.com

10. Cookies and Tracking

Our website and apps use cookies and similar technologies: - Essential cookies: For platform functionality - Analytics cookies: For usage insights (Google Analytics, etc.) - Marketing cookies: Only with user consent

You may manage cookie preferences via your browser settings or platform banner.

11. Data Security Measures

We implement strong security controls, including: - Data encryption (in transit and at rest) - Two-factor authentication for admin access - Firewalls and DDoS protection - Role-based access controls (RBAC) - Regular vulnerability assessments - Staff confidentiality agreements and data protection training

In case of a data breach, we will notify affected individuals and the Data Protection Commission within 72 hours, as required by law.

12. Children’s Privacy

Our services are not directed at individuals under 18. We do not knowingly collect data from minors without verifiable parental or guardian consent.

13. Changes to This Policy

We may update this policy from time to time. Users will be notified through the app or email when significant changes occur. The latest version will always be available at curiafoods.com/privacy.

14. Contact Us

Data Protection Officer (DPO)Curia Foods📧 info@curiafoods.comCuria Foods is committed to building a responsible, secure, and transparent ecosystem where data protection is at the core of our operations.

LOOKING FOR A PARTNER FOR YOUR KITCHEN?

Partner as a restaurant

© 2025 Curia Foods. All rights reserved.