Privacy policy

We collect the minimum data needed to provide the service:

• Account data: your name, the mobile number we verify with a code sent by text message, and your email if you add one.
• Delivery addresses: the written address and the point you set on the map.
• Order data: the store, items, amounts, payment method and order status.
• Ratings and comments you write after an order.
• Device data needed to send notifications, such as the notification token and operating system.

We don't store payment card details. Electronic payments are handled by a licensed payment provider, which processes the card data.

The Lamlam app doesn't track your location or show the rider's location on a map. We use your location only when you set a new address, and the app never asks for background location access. When you set an address, we send the pin's coordinates to our maps provider to look up the street name.

The Lamlam Captain app asks for precise location. The rider's phone records its precise location only twice per order: when the rider picks up the order and when they deliver it. We delete these two points after 90 days.

• Fulfilling your order: sending it to the store, assigning a rider and delivering it to your address.
• Contacting you about your order by notification, text message or call.
• Customer support, resolving problems and refunds.
• Preventing fraud and abuse, such as fake orders.
• Accounting and legal and tax obligations.

We only send marketing offers if you agree to them separately, and you can withdraw that consent at any time in the app settings.

• The store: sees your order details and what it needs to prepare them.
• The rider: sees your name, number and address only during the order, and your number is hidden from their history after delivery.
• Service providers we rely on: notifications, text messages, electronic payments, maps and address lookup, hosting and error monitoring. Each gets only what it needs to do its job.
• Authorities, when required by law.

We don't sell your data or share it for advertising.

• Account data and addresses: for as long as your account exists.
• Order and financial records: for the period required by law, with your personal data separated from them after account deletion.
• Location points and notification content: 90 days.
• Verification codes: 24 hours.

• Access your data and get a copy of it.
• Correct or update your data in the app.
• Delete your account in the app under My account → Delete my account. The request stays pending for 30 days, during which you can cancel it; then we delete your personal data. You can also request deletion without the app at lamlam.app/delete-account.
• Withdraw consent to marketing messages.
• File a complaint with the Personal Data Protection Center.

To exercise any of these rights, email us at hello@lamlam.app.

We protect your data with encryption and limited staff access, and every access to sensitive documents is logged. If a breach affects your data, we follow defined containment and notification procedures in line with the law.

When you apply as a rider we ask for copies of your ID, licences, criminal record certificate, proof of address and guarantor details. We store these documents encrypted, only a small number of managers can access them, and we keep them for the length of the contract and any period required by law. We never keep original documents. Store data is used for contracting, running orders and settling accounts.

• Rider financial records: the cash a rider collects from customers and their settlements with us, kept for the period required by law.
• Store phone technical data: the Lamlam Stores app sends the battery level, app version and device ID so we can make sure new-order alerts reach the store.

We may update this policy from time to time. We'll notify you in the app before any material change, and we record the version of the policy you agreed to.