Privacy Policy

1. Who We Are

Da Dabba is an online marketplace operated by Pomofoods ("we," "us," "our") that connects consumers with independent licensed vendors — kitchens preparing fresh meals and shops selling packaged goods, groceries, and produce — for ordering, delivery, and pickup.

Contact: hello@pomofoods.com

2. Information We Collect

Information you provide: Name, email address, phone number (where collected for delivery coordination), postal code, delivery addresses, order notes, role preference, and reviews you submit. Vendors additionally provide business name, business address, operating hours, menu or inventory details, food-safety and licensing documents (e.g., FOODSAFE, business licence, health permit), GST registration status, and payout account information.

Information collected automatically: Device type, browser information, IP address, push-notification tokens (if you grant permission), and platform usage data.

Information from third parties: When you sign in with Google, we receive your name and email address. We do not receive or store your Google password. When you make an in-platform payment, our payment processor provides us with transaction confirmations and partial card details (last four digits and card brand only).

3. How We Use Your Information

We use your information to operate your account, process orders, match you with vendors in your delivery area, send order and payment notifications, enable vendor follower communications you have opted into (including WhatsApp broadcasts), administer the prepaid wallet and loyalty points, verify vendor licensing, prevent fraud, and improve the platform.

We do not sell your personal information to third parties.

4. Payments, Pay-at-Shop, and Refunds

In-platform payments (wallet top-ups, Pay Now card checkouts, vendor payouts) are processed by Stripe, a PCI-DSS compliant third-party processor. We do not store your full credit card number, bank account details, or other sensitive financial information on our servers. Your use of our payment system is also subject to Stripe's privacy policy, available at stripe.com/privacy.

Pay-at-Shop: For pickup orders from participating shops, you may pay the shop directly on collection. Da Dabba does not process those payments, does not receive payment-card data for them, and does not refund them. Any payment-related personal information you provide directly to a shop is governed by that shop's own practices.

Refunds for in-platform payments are issued at the sole discretion of Da Dabba administration. Refund requests can be submitted by contacting hello@pomofoods.com. We reserve the right to deny requests we determine to be fraudulent or outside reasonable grounds.

5. Data Sharing

We share your information only when necessary:

• With vendors: Your name, phone number (for delivery coordination), delivery address, and order details are shared with the vendor preparing your order. Vendors do not receive your payment card details.
• With vendors you follow: If you follow a vendor, the vendor can see that you are a follower and can send you notifications and, where enabled, WhatsApp broadcasts. You can unfollow at any time.
• With service providers (data processors): We use third-party services to operate the platform. Categories include: authentication and user storage, payment processing and vendor payouts, transactional email delivery, application hosting and database, file and image storage, AI image and content generation, and follower messaging via third-party messaging platforms. These providers access your data only as needed to perform their services and are bound by their own privacy and security obligations.
• Across borders: Some of these processors are based in the United States. By using Da Dabba you acknowledge and consent to the transfer of your information to the United States for processing, subject to the protections described in this policy.
• As required by law: We may disclose information when required by Canadian federal or provincial law, or by valid legal process.

6. Data Storage and Security

Your data is stored on secure, cloud-based servers operated by our hosting and infrastructure providers, primarily in the United States and Canada. We use encrypted connections, authenticated access, and role-based permissions to protect your information. No system is completely secure, and we cannot guarantee absolute security. Notify us immediately at hello@pomofoods.com if you suspect unauthorized access to your account.

7. Cookies, Local Storage, and Notifications

We use essential cookies and browser local storage to maintain your login session, remember your delivery address and cart state, and support the progressive web app (PWA) install. We do not use advertising or third-party tracking cookies.

If you install Da Dabba as a PWA and grant permission, we store a push-notification token to deliver order updates and (where you have opted in) vendor broadcasts. You can revoke this permission in your browser or device settings at any time.

8. Your Rights

Under Canadian privacy law (PIPEDA) you have the right to access, correct, or request deletion of your personal information; to withdraw consent for the collection or use of your information (subject to legal or contractual restrictions); and to file a complaint with the Office of the Privacy Commissioner of Canada. To exercise these rights, contact hello@pomofoods.com. We will respond within 30 days. Any remaining wallet balance must be resolved before account deletion is processed (see Terms Section 5).

9. Vendors

By registering as a vendor (kitchen or shop), you consent to your business name, bio, cover image, menu or inventory, hours, operating area, and aggregate ratings being displayed publicly on the platform and indexed by search engines. Food-safety and licensing documents you upload are stored privately and shared only with Da Dabba administrators for verification. Your payout account is managed by our third-party payment processor and is subject to their terms and identity verification requirements.

Vendors who use the WhatsApp broadcast feature are responsible for the content of their messages and for compliance with Meta's WhatsApp Business policies and applicable anti-spam law (CASL in Canada).

10. Loyalty Points and Follower Lists

Loyalty points and follower relationships are recorded per-vendor: each vendor sees their own list of followers and loyalty balances and may use that list to send updates to their followers through the platform. Da Dabba does not aggregate or sell this information to other vendors or to third parties.

11. Changes

We may update this policy from time to time. Material changes will be communicated by email or notice on the platform. Continued use of Da Dabba after changes constitutes acceptance.

12. Contact

hello@pomofoods.com

pomofoods.com