VAYA — Privacy Policy

ControllerGo Platform Ltd t/a VAYA · Reg. England & Wales No. 16740451

Contacthello@vaya.app

Applicable lawUK GDPR · Data Protection Act 2018 · POPIA (SA visitors)

1. Who We Are

Go Platform Ltd trading as VAYA is the data controller for all personal data collected through va-ya.co.uk. Registered in England and Wales, Company No. 16740451. Contact: hello@vaya.app. We are registered with the Information Commissioner's Office (ICO).

2. What We Collect and Why

Contact form submissions

When you submit a form on our website we collect your name, email address, phone number (if provided), and message. Legal basis: legitimate interests and consent. Retained for 24 months.

Website analytics

We collect anonymous usage data about how visitors use our website. This data cannot identify individual visitors. We do not use Google Analytics or any service that shares your data with advertising networks.

Technical data

Your browser sends us your IP address, browser type, and pages visited. Logged by our hosting provider (AWS) for security. Retained for 90 days then deleted.

3. How We Use Your Data

To respond to your enquiry
To send you information you have requested
To improve our website
To comply with legal obligations

We do not sell your data. We do not share it with advertisers. We do not use it for automated decision-making or profiling.

4. Third Parties

Amazon Web ServicesWebsite hosting. EU West (Ireland) region. ISO 27001 certified.

Email serviceTo deliver our responses to your enquiries.

Contact form processorData transmitted securely, not retained beyond delivery.

5. Your Rights

Under UK GDPR you have the right to access, correct, delete, restrict, or port your data, and to object to processing. Email hello@vaya.app — subject: Data Rights Request. We respond within 30 days.

South African visitors: under POPIA you also have the right to object to processing on reasonable grounds. Contact hello@vaya.app.

6. How to Complain

UK: Information Commissioner's Office — ico.org.uk · 0303 123 1113
South Africa: Information Regulator — inforegulator.org.za · 010 023 5207

EffectiveUpon app launch · Q4 2026

Applicable lawUK GDPR · DPA 2018 · POPIA 4 of 2013 · ECTA 25 of 2002

1. Data We Collect

Customer app

Name, email, phone number (account registration)
Delivery addresses and location photos you upload
Order history and payment information (processed by PayFast/Stripe — we do not store card numbers)
Precise location — only when placing or tracking an order, not stored after delivery
Ratings and feedback submitted

Rider app

Full name, date of birth, contact details, National Insurance number (UK)
Identity document — processed by Smile Identity (SA) or GOV.UK One Login (UK). We store verification status only, not raw document scans.
Profile photograph, vehicle information and documents
GPS location — during active shifts only. Not tracked when offline.
Earnings data, bank account details (encrypted), performance and conduct records

Restaurant app

Restaurant and owner details, bank account details (encrypted)
Menu data, order history, performance data
Digital signature — stored permanently as a legally binding record

2. Location Data

VAYA does not sell location data. VAYA does not share location data with advertisers. Riders are not tracked when offline. Customers are not tracked between orders.

3. Third-Party Processors

AWSHosting — EU West (Ireland) + Africa (Cape Town)

PayFastSA payment processing — SARB regulated

StripeUK payment processing — FCA authorised

Smile IdentitySA rider identity verification

GOV.UK One LoginUK rider identity verification

MapboxMapping — anonymised location data only

Firebase (Google)Push notifications and real-time tracking

OpenAI Vision APIAI menu import — no personal data in photographs processed

DBS Umbrella Body (UK)Enhanced DBS checks for UK riders

4. Your Rights

Access, correct, delete, restrict, or port your data through the app (Account settings) or by emailing hello@vaya.app. We respond within 30 days.

5. Children

VAYA apps are not for under-18s. We do not knowingly collect data from anyone under 18. Accounts found to belong to under-18s will be closed and data deleted.

6. Security

All data in transit: TLS 1.2+ encryption
All data at rest: AES-256 encryption
Payment data: PCI-DSS compliant processors only — we never store card numbers
Data breach notification: within 72 hours (UK GDPR) / as soon as reasonably practicable (POPIA)

7. Contact

Data queries: hello@vaya.app — subject: Privacy Query
UK regulator: ico.org.uk · 0303 123 1113
SA regulator: inforegulator.org.za · 010 023 5207

Applicable lawUK PECR (Privacy and Electronic Communications Regulations 2003)

What Cookies We Use

Strictly necessary cookies only

These are essential for the website to function and do not require your consent.

Session cookieKeeps you active during your visit. Deleted when you close your browser.

CSRF protectionPrevents attacks on our contact forms. Security essential.

Load balancerRoutes requests to the correct server. Deleted when you close your browser.

VAYA does not use advertising cookies. No Google Analytics. No Facebook Pixel. No third-party marketing or tracking cookies. We do not share cookie data with advertisers or data brokers.

How to Control Cookies

Chrome: Settings > Privacy and security > Cookies
Safari: Preferences > Privacy > Manage Website Data
Firefox: Options > Privacy & Security > Cookies
Edge: Settings > Cookies and site permissions

Questions?

Email hello@vaya.app or write to Go Platform Ltd t/a VAYA, Registered in England and Wales No. 16740451.

Privacy & Cookie Policy