- 0789401725
- info@gilanta.com
- Mon - Fri: 9:00 - 18:30
Gilanta Super App — One App. One Africa. Endless Possibilities.
Welcome to Gilanta Super App (“Gilanta,” “we,” “us,” or “our”).
Gilanta Super App is a digital platform designed to bring a range of everyday services together in one convenient ecosystem. Depending on your location and the services available, the platform may enable users to order food, shop for products, book transportation, arrange parcel deliveries, rent vehicles, reserve restaurant tables, book professional services, and access other supported services.
The Gilanta ecosystem includes a website and different applications designed for customers, store owners, drivers, service providers, and workers.
Gilanta Super App is owned and operated by Gilanta LTD, based in Kigali, Rwanda.
At Gilanta, we recognise that your privacy matters. We understand that using a digital platform may involve sharing personal information, including contact details, delivery addresses, location information, booking details, and payment-related information. We are committed to handling personal information responsibly and explaining how it may be collected, used, stored, shared, and protected.
This Privacy Policy explains our privacy practices when you visit the Gilanta website, use the Gilanta Super App, register an account, interact with our services, or communicate with us.
By using Gilanta, you acknowledge that you have had an opportunity to read this Privacy Policy. Where applicable law requires consent for a particular type of processing, we will seek that consent separately. Using our services does not automatically constitute consent to every type of data processing described in this policy.
Please read this Privacy Policy carefully.
The company responsible for the Gilanta Super App platform is:
Gilanta LTD
For privacy-related questions, requests to access or correct your information, account deletion requests, or concerns about how your personal information is handled, please contact us using the details above.
Where applicable, Gilanta LTD will act as the data controller for processing activities for which it determines the purposes and means of processing. In other circumstances, Gilanta LTD may process information on behalf of a merchant, service provider, business partner, or another organisation under an appropriate arrangement.
The role Gilanta performs depends on the particular processing activity.
This Privacy Policy applies to personal information processed in connection with the Gilanta ecosystem, including:
This policy applies to customers, prospective customers, merchants, store owners, drivers, service providers, workers, and other individuals who interact with Gilanta.
Some services may have additional privacy notices or terms that explain particular processing activities. If a separate notice applies, it should be read together with this Privacy Policy.
This policy does not replace any separate employment, contractor, merchant, or service-provider agreement that may govern your relationship with Gilanta or another participating business.
The information we collect depends on how you use Gilanta, which application you use, the services you request, and the permissions you grant.
We aim to collect information that is relevant to the purposes described in this policy.
When you create an account, place an order, book a service, register a business, or contact us, you may provide information such as:
You should ensure that the information you provide is accurate and that you are authorised to provide any information relating to another person.
We may process information required to create, verify, maintain, and secure your account.
This may include your account ID, login records, verification status, password-reset information, authentication events, and related security records.
Where supported, we may use one-time verification codes or other verification methods to confirm account ownership.
We do not ask you to disclose your password to customer support. You should never share passwords or one-time verification codes with unauthorised persons.
When you place an order through Gilanta, we may process information necessary to receive, manage, fulfil, and record the transaction.
Depending on the service, this may include:
This information helps us coordinate orders between customers, participating merchants, delivery personnel, payment providers, and other relevant parties.
If you book transportation, parcel delivery, car rental, restaurant reservations, professional services, or another supported service, we may collect information needed to manage the booking.
The precise information depends on the service requested.
Certain Gilanta services may require location information to operate properly.
Depending on the application, device permissions, and service being used, location information may include:
For example, a customer may provide a pickup location when booking a ride, while a driver may need location services to navigate to a customer.
Location access is feature-dependent. If a feature requires device location, the app may request permission. You can manage location permissions through your device settings, although disabling location access may limit features that depend on it.
Where background location access is used, its purpose, timing, and permission requirements should be explained in the relevant app or permission notice. Gilanta should not access location beyond the purposes and permissions applicable to the feature.
When you pay for a service or receive a payment through Gilanta, we may process information needed to facilitate and record the transaction.
Payments may be processed through third-party payment providers, financial institutions, mobile money operators, or other payment partners.
Where a third party processes card or other payment credentials, the information collected directly by that provider will also be subject to its applicable privacy policy.
Gilanta’s collection and storage of complete payment credentials will depend on the payment integration used. We do not claim that all payment details are stored by Gilanta, nor that payment details are never stored. The applicable payment flow determines how this information is handled.
If you register or operate a store through the Gilanta Store App, we may collect information needed to establish and manage your business account.
Some business information may be displayed to customers to help them identify your business and purchase your products.
If you register or work as a driver through the Gilanta Driver App, we may process information necessary to verify your eligibility, manage trips or deliveries, and support platform operations.
Sensitive documents will be handled according to applicable legal requirements and access controls. We aim to restrict access to authorised personnel and service providers who need the information for legitimate purposes.
If you register through the Gilanta Provider App, we may collect information necessary to create and manage your provider profile and service offerings.
This information may be used to present your services to relevant customers, administer bookings, and verify compliance with applicable platform requirements.
If you use the Gilanta Worker App, we may process information necessary to manage your worker account and assigned tasks.
Where workers are managed by an independent service provider or employer, that organisation may also have responsibilities for processing worker information.
When you access our website or applications, certain technical information may be collected automatically, subject to applicable law and the technologies in use.
We may use this information to maintain service functionality, diagnose technical problems, improve performance, secure accounts, and understand how our services are used.
Our website or online services may use cookies, software development tools, local storage, or similar technologies where applicable.
These technologies may support:
The technologies used may vary between the website and mobile applications.
Where consent is required for non-essential cookies or similar technologies, we will seek consent through an appropriate mechanism. You may also be able to manage cookies through your browser settings.
Disabling certain cookies may affect the functionality of parts of the website.
We may receive relevant information from other parties where permitted and necessary to provide our services.
For example, a merchant may provide order status information, or a payment provider may return a transaction confirmation.
Where required, we will provide information about the source and purpose of personal information obtained from another party.
We use personal information for legitimate and specified purposes related to operating, maintaining, securing, and improving Gilanta.
We use relevant information to:
We use information to process orders and bookings and connect relevant participants.
Information is shared for these purposes only to the extent reasonably necessary for the relevant service and subject to applicable law.
We may use transaction information to:
We may contact you to:
Service-related communications may be necessary to provide the service you requested.
We may process relevant information to:
Where appropriate, we may restrict accounts or transactions that present a credible security, fraud, or safety risk, subject to applicable law and any relevant review process.
We may use technical information, usage information, and appropriately aggregated or de-identified data to:
Where possible, analytics and product development activities will use aggregated or de-identified information when individual identification is not needed.
We may use relevant information to investigate and resolve:
We may retain relevant records when necessary to resolve a dispute, protect legal rights, or comply with applicable law.
Where permitted by law, we may use contact information and communication preferences to send information about Gilanta services, offers, promotions, and updates.
Where consent is required, we will obtain it before sending marketing communications.
You may opt out of marketing emails using the unsubscribe mechanism provided, where available, or by contacting info@gilanta.com.
Opting out of marketing does not prevent us from sending essential service communications, security notices, transaction updates, or other messages necessary for your account or requested services.
We may process or retain information when necessary to:
We will assess requests for information in accordance with applicable law.
Gilanta will process personal information on an appropriate legal basis, depending on the nature of the information and the purpose of the processing.
Performance of a contract. Processing necessary to register your account, fulfil your order, manage a booking, provide a requested service, or take steps you request before entering into an agreement.
Consent. Processing based on your freely given, specific, informed, and unambiguous consent, such as certain optional marketing activities or permissions where consent is legally required.
Legal obligations. Processing necessary to comply with applicable laws, regulatory requirements, or lawful orders.
Legitimate interests. Processing necessary for legitimate interests such as protecting platform security, preventing fraud, improving service reliability, or resolving disputes, provided those interests do not override applicable rights and protections.
Vital interests or public interest. Processing where necessary and permitted by applicable law to protect vital interests or perform a legally recognised public-interest function.
The applicable legal basis depends on the particular processing activity. We will not treat consent as the basis for processing where another legal basis applies and is more appropriate.
Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing lawfully carried out before the withdrawal, and some services may no longer function if the withdrawn permission is essential to their operation.
Gilanta does not need unrestricted access to every user’s information for every purpose. We share information according to the relevant service, operational requirements, contractual arrangements, and applicable law.
When you place an order, relevant information may be shared with the merchant or restaurant responsible for fulfilling it.
This may include your name, order details, delivery or collection instructions, and relevant contact information.
Merchants may use this information to prepare, confirm, fulfil, or resolve issues relating to your order, subject to applicable law and their own legal responsibilities.
Where a delivery or transportation service is involved, relevant information may be shared with the assigned driver or delivery personnel.
Location and contact information will be handled according to the requirements of the relevant service and applicable permissions.
When you book a service, we may share relevant booking details with the service provider or authorised worker responsible for carrying it out.
This may include the service requested, appointment time, location, instructions, and information necessary to contact you about the booking.
We may share relevant transaction information with payment gateways, mobile money operators, banks, payment processors, and other financial service providers to process payments, confirm transactions, prevent fraud, or manage refunds.
Those organisations may process information under their own privacy notices and legal obligations.
We may use third-party companies to support platform operations. Depending on the systems actually deployed, these providers may include:
These providers may process information on our behalf under appropriate arrangements and should be given access only to information necessary for their authorised functions.
We may share relevant information with business partners where necessary to provide a service you request, administer a partnership, or fulfil an agreed business arrangement.
Where a partner independently determines how it processes your information, its own privacy policy may also apply.
We may disclose information to lawyers, auditors, accountants, insurers, or other professional advisers where reasonably necessary for legitimate business, compliance, insurance, or legal purposes.
We may disclose information to law enforcement agencies, courts, regulators, or other competent authorities when required or authorised by applicable law.
Where legally permitted, we will assess the scope and validity of the request before disclosing information.
If Gilanta LTD undergoes a merger, restructuring, financing, acquisition, sale of assets, or similar corporate transaction, relevant information may be transferred as part of that transaction, subject to appropriate safeguards and applicable law.
We may share information with another party when you specifically request or authorise the disclosure, where permitted by law.
Gilanta does not make personal information available to every merchant, driver, provider, or worker merely because that person participates in the platform. Access should be limited to information relevant to the person’s authorised role and the service being performed.
Gilanta is based in Rwanda, and its technology providers or business partners may operate in other countries.
Depending on the platform’s actual infrastructure and integrations, personal information may be stored or processed outside Rwanda.
When personal information is transferred internationally, Gilanta will take steps required by applicable law to ensure that the transfer has an appropriate legal basis and that suitable safeguards are in place.
Depending on the circumstances and applicable legal requirements, these safeguards may include:
We will not rely on a transfer mechanism merely because a service provider is located overseas. The relevant transfer must comply with the applicable legal requirements.
You may contact info@gilanta.com to request information about international transfers relevant to your personal information, subject to applicable legal restrictions.
Gilanta retains personal information only for as long as reasonably necessary for the purposes described in this policy, unless a longer retention period is required or permitted by law.
Retention periods depend on the type of information, the reason it was collected, the nature of the service, and any applicable legal obligations.
When personal information is no longer required, we will take appropriate steps to delete it, anonymise it, or otherwise dispose of it securely, subject to applicable law and legitimate retention requirements.
We do not promise a single fixed retention period for all information because different records serve different purposes and may be subject to different legal obligations.
You may request the deletion of your Gilanta account and personal information, subject to applicable legal requirements and legitimate retention needs.
To request deletion:
For assistance, you may also contact us at +250 789 401 725.
We may need to verify your identity before acting on a request to protect your account from unauthorised deletion.
Subject to applicable law, we will review the request and delete or anonymise personal information that is no longer required and that we are permitted to delete.
Some records may need to be retained for a limited period or longer where required by law or necessary for a permitted purpose, such as:
Where retention is required, the retained information will continue to be handled according to applicable privacy and security requirements.
Deleting your account may prevent you from accessing your account history, active bookings, saved addresses, or other account features. You should resolve outstanding transactions and retain any records you may need before submitting a deletion request.
Uninstalling the Gilanta app from your phone does not necessarily delete your account or personal information held by Gilanta.
If you want your account and associated information deleted, submit an account deletion request through the available in-app process or by contacting us.
Gilanta recognises the importance of protecting personal information against unauthorised access, loss, misuse, alteration, destruction, and disclosure.
We will implement appropriate technical and organisational safeguards in accordance with applicable law and the nature of the information being processed.
Depending on the systems and services deployed, safeguards may include:
No website, application, network, or storage system can be guaranteed to be completely secure. We therefore cannot promise absolute security, but we will take appropriate steps to reduce risks and respond to security incidents.
You can help protect your information by using strong passwords, keeping your device secure, avoiding suspicious links, and never sharing your authentication codes.
A personal data breach may involve the accidental or unlawful loss, alteration, destruction, disclosure of, or access to personal information.
If Gilanta becomes aware of a breach affecting personal information, we will assess the incident and take appropriate steps to contain it, investigate the cause, reduce potential harm, and meet applicable notification requirements.
Where required by law, we will notify the relevant supervisory authority and affected individuals within the applicable time limits and provide information required by law.
We will also take reasonable steps to prevent similar incidents from recurring.
Subject to applicable law and any relevant exceptions, you may have rights concerning the personal information Gilanta holds about you.
You may request information about how your personal data is collected, used, shared, stored, and otherwise processed.
You may request confirmation of whether we process your personal information and request a copy of the information we hold about you, subject to applicable legal restrictions.
You may request correction of inaccurate information or completion of incomplete information.
You can also update certain account details directly through the application, where supported.
You may request deletion of personal information where the applicable legal requirements for erasure are satisfied.
This right is not absolute. Certain records may need to be retained to comply with legal obligations or for other permitted purposes.
You may object to certain processing activities where applicable law provides this right, including processing that meets the legal conditions for objection.
You may also opt out of marketing communications as described in this policy.
You may request restriction of certain processing activities in circumstances provided by applicable law, such as while a dispute about the accuracy of information is being resolved.
Where applicable law provides this right and its conditions are met, you may request your personal information in a suitable format or request its transfer to another controller.
Where processing is based on consent, you may withdraw that consent at any time.
Withdrawal will not affect processing lawfully carried out before withdrawal. It may also affect the availability of features that depend on the relevant permission.
Where applicable law provides protection against decisions based solely on automated processing that produce legal or similarly significant effects, you may exercise the relevant rights.
If Gilanta uses such automated decision-making in a way that triggers these rights, we will provide the information and safeguards required by law.
If you believe that Gilanta has handled your personal information unlawfully or failed to respect your rights, you may contact us to seek a resolution.
You may also have the right to lodge a complaint or appeal with the competent data protection supervisory authority in accordance with applicable law.
These rights are subject to applicable conditions and exceptions. We will assess each request individually.
To submit a privacy request, contact:
Please describe your request clearly and identify the account or service concerned.
For your protection, we may request reasonable information to verify your identity or authority to act on behalf of another person.
We will respond within the timeframe required by applicable law. If a request cannot be fulfilled in full, we will explain the reasons where legally required and inform you of any applicable complaint or appeal options.
There is no charge for ordinary privacy requests unless applicable law permits a fee in specific circumstances.
Gilanta services are not intended to encourage children to provide personal information without appropriate safeguards.
Where the platform is used by or processes personal information belonging to a child, applicable age requirements, parental responsibility, and legal safeguards must be observed.
Under Rwanda’s data protection framework, special requirements apply to personal information relating to children, including requirements concerning parental or guardian consent in applicable circumstances.
If we become aware that personal information has been collected from a child in circumstances that violate applicable law, we will take appropriate steps to address the issue.
Parents or legal guardians who believe that a child has provided personal information improperly may contact info@gilanta.com.
We may need to verify the identity and authority of a person making a request on behalf of a child.
Certain categories of information may receive additional protection under applicable law. These may include health information, biometric information, religious or philosophical beliefs, genetic information, criminal records, and other legally defined sensitive personal data.
Gilanta does not seek to collect sensitive personal information unless it is necessary for a legitimate and lawful purpose associated with a particular service or legal requirement.
If a service requires sensitive information, we will apply the legal conditions and safeguards relevant to that processing, including any required consent, access restrictions, and additional security measures.
Users should avoid submitting sensitive personal information through general feedback forms or ordinary messages unless it is genuinely necessary and requested through an appropriate process.
The Gilanta website or applications may contain links to or integrations with third-party services.
These may include payment services, mapping services, external websites, communication tools, or other service integrations.
When you access a third-party service, that provider may collect and process information under its own privacy policy and terms.
Gilanta does not control the privacy practices of independent third parties merely because their services are accessible through our platform.
We encourage you to review the privacy notices of third-party services before providing them with personal information.
Where Gilanta engages a third party to process information on our behalf, we will seek appropriate arrangements and safeguards as required by applicable law.
Gilanta may communicate information about its services, new features, promotions, offers, and other relevant announcements.
Marketing communications may be delivered by email, in-app notifications, or other permitted channels, depending on the communication preferences and features available.
Where required, we will obtain consent before sending electronic direct marketing communications.
You can stop receiving optional marketing communications by using the unsubscribe option, where available, or by contacting info@gilanta.com.
Even if you opt out of marketing, we may continue to send essential communications relating to your account, transactions, bookings, security, or changes to the services you use.
If advertising or marketing technology is integrated into the platform, its data collection and use must comply with applicable law and the relevant consent requirements.
Gilanta may use technical information and usage statistics to understand how the website and applications perform.
Depending on the tools enabled, this may include information about application errors, feature usage, loading times, session activity, or general patterns of service use.
We may use aggregated or de-identified information to assess performance, plan improvements, and understand demand.
Where analytics technologies collect personal information or use device storage in a way that requires consent, we will apply the appropriate consent mechanism.
We will not describe analytics tools as anonymous or non-identifying unless their actual configuration and data handling support that description.
Some platform functions may use automated systems to support operational tasks, such as matching customers with available services, displaying relevant options, detecting suspicious activity, or organising bookings.
Where such systems process personal information, they should be used for legitimate and specified purposes.
If Gilanta introduces automated profiling or decisions that have legal or similarly significant effects on individuals, it will provide information and safeguards required by applicable law, including relevant information about the processing and available rights.
We will not claim that a particular automated decision-making system is in use unless it has actually been implemented.
The Gilanta ecosystem includes different types of users who may receive personal information while carrying out their roles.
Merchants, drivers, service providers, workers, and other authorised participants must handle personal information they receive through the platform responsibly and in accordance with applicable law and their contractual obligations.
They should:
For example, a driver may need a customer’s pickup or destination details to complete a trip, but should not use that information for unrelated purposes after the service.
A merchant may need order information to prepare and deliver an order, but should not disclose customer information to unrelated parties.
Some Gilanta accounts may be managed by businesses, merchants, or authorised administrators.
Where an organisation controls an account or creates accounts for its personnel, it may have access to certain account information necessary to manage its operations.
For example, an authorised provider may need to view a worker’s assigned jobs or completion status.
In these situations, the organisation may have its own privacy responsibilities. The rights and responsibilities of Gilanta and the organisation depend on the actual processing arrangements and applicable law.
Users who access Gilanta through a business or service provider should direct employment-related or internal account-management questions to the relevant organisation where appropriate.
We aim to keep personal information accurate and relevant to the purposes for which it is used.
You can help by keeping your profile, contact details, addresses, business information, and other account information up to date.
If you identify an error that cannot be corrected through the app, contact info@gilanta.com.
We will assess requests to correct inaccurate or incomplete information in accordance with applicable law.
Some browsers and devices offer privacy settings or signals intended to limit tracking.
The effect of these settings may depend on the technology, browser, and services involved. There is no guarantee that every third-party technology used by a website will respond to every available signal.
You can manage certain permissions, including location access, notifications, camera access, and other device permissions, through your device settings.
Disabling a permission may limit the features that rely on it, but it does not necessarily delete information already collected.
Gilanta may update this Privacy Policy from time to time to reflect changes in our services, technology, business operations, legal obligations, or privacy practices.
When changes are made, we will update the Last Updated date shown at the beginning of the policy.
Where a change is material or applicable law requires additional notice or consent, we will take appropriate steps to notify affected users or obtain the necessary consent.
We encourage you to review this policy periodically to understand how your information is handled.
The updated policy will apply from its stated effective date, subject to any additional requirements imposed by applicable law.
If you have a question, complaint, concern, or request relating to this Privacy Policy or the handling of your personal information, please contact us.
Gilanta LTD — Gilanta Super App
Please include enough information for us to understand your request, but do not send passwords, one-time verification codes, or unnecessary sensitive information.
We will review your enquiry and respond in accordance with applicable law and our internal procedures.
This Privacy Policy is intended to support Gilanta’s privacy responsibilities under applicable laws, including Rwanda’s Law No. 058/2021 of 13 October 2021 relating to the Protection of Personal Data and Privacy, where applicable.
Other laws may apply depending on where users are located, where services are provided, and the nature of the processing activity.
Nothing in this Privacy Policy is intended to exclude or limit any privacy rights that cannot lawfully be excluded or limited.
If any provision of this policy conflicts with a mandatory requirement of applicable law, the relevant legal requirement will prevail to the extent of the conflict.
At Gilanta, we believe that trust is an important part of delivering useful digital services. Protecting personal information is part of our responsibility to customers, merchants, drivers, service providers, workers, and everyone who uses the platform.
We aim to collect information for legitimate purposes, use it responsibly, limit access to authorised parties, apply appropriate safeguards, and respect users’ privacy rights.
By using Gilanta, you can help protect your information by keeping your account details accurate, using strong passwords, managing device permissions carefully, and contacting us if you have privacy concerns.
Gilanta Super App — One App. One Africa. Endless Possibilities.
Privacy enquiries: info@gilanta.com
Gilanta LTD — Kigali, Rwanda