Privacy Policy

1. Who We Are

FOODSbyme Technologies operates the FOODSbyme platform — including our mobile apps, website, and APIs. Our registered address is 42, Oba Yekini Elegushi Rd, Lagos, Nigeria. We process personal data as a data controller under the Nigeria Data Protection Act 2023 (NDPA). For privacy-related queries, contact privacy@foodsbyme.com.

2. Data We Collect

We collect the following categories of personal data:

• Account data — name, email address, phone number, profile photo, and password hash.
• Usage data — pages visited, features used, device identifiers, browser type, and IP address.
• Location data — delivery pickup and drop-off locations provided when placing or fulfilling orders.
• Payment data — we do not store full card numbers. Payments are tokenised and handled by our certified payment partners.
• Creator data — kitchen name and description, menu items, pricing, food images, and bank account details for settlement.
• Fleet partner data — vehicle type, operating area, rider records, and earnings history.
• Communications — messages sent to our support team and any correspondence with FOODSbyme.

3. How We Use Your Data

We use your personal data to:

• Operate the platform — matching orders, processing payments, and coordinating deliveries.
• Communicate with you — order updates, account notifications, support responses, and (where consented) marketing.
• Improve our service — internal analytics, feature testing, and fraud and abuse prevention.
• Settle payments — calculating and disbursing earnings to creators and fleet partners.
• Comply with legal obligations — tax reporting, regulatory requirements, and responding to lawful requests from authorities.

4. Legal Basis for Processing

We rely on the following legal grounds under the NDPA:

• Contract — processing necessary to provide the services you signed up for.
• Legitimate interests — platform safety, fraud prevention, and service improvement, where our interests are not overridden by your rights.
• Legal obligation — compliance with Nigerian tax law, the NDPA, and other applicable regulations.
• Consent — where we ask for explicit permission, such as for optional marketing communications. You may withdraw consent at any time.

5. Who We Share Data With

We share your data only with:

• Payment processors — to authorise and settle transactions.
• Cloud and infrastructure providers — to host and operate the platform securely.
• Delivery fleet partners — limited order details (pickup address, delivery address, order summary) necessary to fulfil your order.
• Analytics providers — aggregated and anonymised data only; no individual user data is sold.
• Legal and regulatory authorities — where required by applicable Nigerian law or lawful court order.

We do not sell, rent, or trade your personal data to third parties for their own commercial purposes.

6. Data Retention

We retain personal data for as long as your account is active and for seven (7) years after account closure, to meet our tax and regulatory obligations. Order history and transaction records are similarly retained for seven years. Data that is not subject to a legal retention requirement will be deleted within 30 days of a verified deletion request.

7. Your Rights

Under the NDPA 2023, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — request that inaccurate or incomplete data be corrected.
• Deletion — request erasure of data we are not legally required to retain.
• Objection — object to processing based on legitimate interests.
• Portability — receive your data in a structured, machine-readable format.
• Complaint — lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.

To exercise any of these rights, email privacy@foodsbyme.com. We will respond within 30 days.

8. Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest for sensitive fields, access controls, and regular security audits. No system is perfectly secure; if you have reason to believe your account has been compromised, contact support@foodsbyme.com immediately.

9. Children

FOODSbyme is for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account or provided us with personal data, email privacy@foodsbyme.com and we will delete the data promptly.

10. Changes to This Policy

We will notify registered users of material changes to this policy by email at least 14 days before they take effect. The "Last updated" date at the top of this page always reflects the most recent version. Continued use of FOODSbyme after a change takes effect constitutes acceptance of the revised policy.

11. Contact

For any privacy-related queries or requests: privacy@foodsbyme.com FOODSbyme Technologies 42, Oba Yekini Elegushi Rd, Lagos, Nigeria