Last updated: April 2026

Privacy Policy

This Privacy Policy describes how Bunz ("we", "us", or "our") collects, uses, and protects information provided by users of the Bunz mobile application ("the App"). We are committed to protecting your privacy in accordance with Rwanda's Law N°058/2021 on the Protection of Personal Data and Privacy (RPDPL).

1. Information We Collect

We collect only the information necessary to process your order:

• Name — used to identify your order at the counter.
• Phone number — used to contact you about your order if needed.
• Order history — the items you have ordered, stored to support order tracking and, in future, order history features.
• Store preference — which Bunz location you have selected. Stored locally on your device and not transmitted to our servers.

We do not collect your location, device identifiers, or payment card details. Payment is processed securely by our third-party payment provider and is never transmitted to or stored by Bunz.

2. How We Use Your Information

Your information is used solely for:

• Processing and fulfilling your food order.
• Displaying your order status within the App.
• Contacting you in the event of an issue with your order.

We do not use your information for marketing, profiling, or any purpose unrelated to order fulfilment.

3. Third-Party Services

Payment processing is handled by a third-party payment provider. When you make a payment, you are subject to that provider's privacy policy and terms of service. Bunz does not receive or store your payment details.

We use Cloudflare to serve images and host this website. Cloudflare may process standard server log data (IP address, request metadata) as part of its service.

4. Data Retention

Order data (name, phone number, items ordered) is retained for as long as necessary to support operational queries, typically no longer than 12 months from the date of the order. You may request earlier deletion at any time (see Section 6).

5. Data Security

All data transmitted between the App and our servers is encrypted in transit using HTTPS/TLS. Access to order data is restricted to authorised Bunz staff only.

6. Your Rights

Under the RPDPL, you have the right to access, correct, and request deletion of your personal data. To exercise any of these rights, contact us at the address below. We will respond within 30 days.

7. Children's Privacy

The App is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the App after changes are posted constitutes acceptance of the updated policy.