Privacy & Data Protection Policy

Welcome to Chopbaze.

Chopbaze ("Chopbaze", "we", "us", or "our") is committed to protecting the privacy, security and personal data of our customers, vendors, delivery partners, website visitors and other individuals who interact with our services.

This Privacy & Data Protection Policy explains how we collect, use, store, disclose and protect personal data when you visit our website, use the Chopbaze platform, place an order, register as a customer or vendor, interact with our services, or otherwise communicate with us.

This Policy is intended to comply with applicable Nigerian data protection laws, including the Nigeria Data Protection Act, 2023 (NDPA) and applicable regulations, guidelines and directives issued by the Nigeria Data Protection Commission (NDPC).

By using Chopbaze, you acknowledge that you have read and understood this Policy.

Chopbaze is a food ordering and marketplace platform that connects customers with food vendors and facilitates food ordering, scheduled orders, group orders, deliveries and related services.

For purposes of applicable data protection laws, Chopbaze may act as a Data Controller when determining why and how personal data is processed, and may act as a Data Processor where we process personal data on behalf of another organisation.

Where applicable, Chopbaze may appoint a Data Protection Officer or designated privacy contact to oversee privacy and data protection matters.

Depending on how you interact with Chopbaze, we may collect the following categories of personal data.

3.1 Account Information

When you create an account, we may collect:

• Full name
• Email address
• Phone number
• Password or authentication information
• Account preferences
• Profile information

3.2 Order Information

When you place or receive an order, we may collect:

• Items ordered
• Order value
• Order history
• Order frequency
• Delivery or collection details
• Order instructions
• Preferred delivery times
• Group-order information
• Scheduled-order information
• Vendor information
• Order status

3.3 Delivery Information

To facilitate delivery, we may collect:

• Delivery address
• Delivery location
• Contact number
• Delivery instructions
• Approximate location information where required to facilitate delivery
• Delivery status and timestamps

We only use location information for legitimate purposes connected with providing or improving our services.

3.4 Payment Information

Payments may be processed through third-party payment providers. Depending on the payment method used, we may receive information such as:

• Payment status
• Transaction reference
• Amount paid
• Payment method
• Payment date and time
• Limited payment identifiers

Chopbaze does not intentionally store complete payment-card information such as full card numbers or CVV numbers where payment processing is handled by a third-party payment provider.

3.5 Vendor Information

If you register or operate as a vendor on Chopbaze, we may collect:

• Business name
• Business address
• Contact information
• Business registration information
• Bank/payment information
• Menu and product information
• Vendor account information
• Order and transaction information
• Customer ratings and reviews
• Communications with Chopbaze

3.6 Communications

When you contact us, we may collect information contained in:

• Emails
• Customer support conversations
• Feedback
• Complaints
• Surveys
• Phone or chat communications
• Other communications with Chopbaze

3.7 Technical and Usage Information

When you use our website or platform, we may automatically collect information such as:

• IP address
• Browser type
• Device type
• Operating system
• Device identifiers
• Pages visited
• Features used
• Date and time of visits
• Referring websites
• General usage and interaction information

We process personal data for legitimate and specified purposes, including:

Providing our services

We use personal data to:

• Create and manage accounts
• Process food orders
• Connect customers with vendors
• Facilitate deliveries and collections
• Process payments
• Provide customer support
• Manage scheduled and group orders
• Send order confirmations and updates

Improving Chopbaze

We may use information to:

• Understand customer preferences
• Analyse ordering patterns
• Improve our marketplace
• Improve delivery operations
• Improve product recommendations
• Develop new features
• Monitor platform performance
• Detect technical problems
• Conduct research and analytics

Where possible, analytics may be aggregated or otherwise de-identified.

Safety, security and fraud prevention

We may process information to:

• Protect accounts
• Detect fraudulent activity
• Prevent abuse of our platform
• Investigate suspicious transactions
• Protect customers, vendors and delivery partners
• Maintain platform security

Communications and marketing

Where permitted by applicable law, we may send:

• Service notifications
• Order updates
• Product announcements
• Promotional communications
• Offers and recommendations

You may opt out of non-essential marketing communications at any time.

Depending on the circumstances, Chopbaze may rely on one or more lawful bases for processing personal data, including:

• Performance of a contract — where processing is necessary to provide services you have requested.
• Consent — where you have voluntarily provided consent for a specific processing activity.
• Legal obligation — where processing is required by law or regulation.
• Legitimate interests — where processing is necessary for legitimate business interests and does not unfairly override your rights and interests.
• Vital interests or other lawful bases where recognised under applicable law.

Where we rely on consent, you may withdraw your consent where permitted by law.

We do not sell your personal data.

We may share relevant personal information with trusted third parties where necessary to provide our services or fulfil legitimate business, legal or operational purposes. These parties may include:

Food vendors

We may share information necessary for vendors to prepare and fulfil your order.

Delivery partners

We may share information necessary to enable delivery, including your name, contact information, delivery location and relevant order details.

Payment providers

Payment information may be processed through third-party payment service providers.

Technology and service providers

We may use third-party providers for services such as:

• Cloud hosting
• Database infrastructure
• Analytics
• Customer support
• Communications
• Security
• Authentication
• Software infrastructure

These providers may only process personal data in accordance with applicable agreements and instructions.

Professional advisers

We may disclose information to lawyers, accountants, auditors, consultants and other professional advisers where reasonably necessary.

Government and regulatory authorities

We may disclose information where required by law, court order, regulatory requirement or lawful governmental request.

Some of our technology, cloud infrastructure or service providers may operate outside Nigeria.

Where personal data is transferred outside Nigeria, Chopbaze will take reasonable and appropriate steps to ensure that such transfers comply with applicable Nigerian data protection requirements and that appropriate safeguards are in place.

We take reasonable technical and organisational measures to protect personal data against:

• Unauthorised access
• Unauthorised disclosure
• Loss
• Misuse
• Alteration
• Destruction
• Accidental disclosure
• Other unlawful processing

Security measures may include access controls, authentication mechanisms, encryption where appropriate, monitoring, secure infrastructure and internal security procedures.

However, no internet-based system can be guaranteed to be completely secure.

You are responsible for keeping your account credentials confidential and should notify us if you believe your account has been compromised.

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including:

• Providing our services
• Maintaining business records
• Resolving disputes
• Preventing fraud
• Complying with legal and regulatory obligations
• Enforcing agreements
• Protecting our legitimate interests

When personal data is no longer required, we will take reasonable steps to delete, anonymise or securely dispose of it, subject to applicable legal and regulatory requirements.

Subject to applicable law and any lawful limitations, you may have rights including:

• The right to be informed about how your personal data is processed.
• The right to request access to personal data we hold about you.
• The right to request correction of inaccurate or incomplete information.
• The right to object to certain processing.
• The right to request restriction of processing in appropriate circumstances.
• The right to request deletion or erasure of personal data where applicable.
• The right to data portability where applicable.
• The right to withdraw consent where processing is based on consent.
• The right to object to direct marketing.
• Rights relating to certain automated decision-making and profiling.
• The right to lodge a complaint with the Nigeria Data Protection Commission.

The NDPC identifies these rights, including access, rectification, objection, restriction, portability, deletion and rights relating to automated decision-making.

To exercise your privacy rights or make a data protection request, contact us at info@chopbaze.com.

Your request should, where reasonably possible, include:

• Your name
• Contact details associated with your Chopbaze account
• The nature of your request
• Any information necessary for us to understand and process your request

We may take reasonable steps to verify your identity before responding to requests involving personal data. We will handle requests within the timeframe required by applicable law.

Chopbaze may use cookies and similar technologies to:

• Keep users signed in
• Remember preferences
• Understand website usage
• Improve platform performance
• Measure marketing effectiveness
• Improve user experience
• Detect security threats

Cookies may be classified as:

Essential Cookies

These are necessary for the website or platform to function properly.

Functional Cookies

These help remember preferences and improve functionality.

Analytics Cookies

These help us understand how visitors interact with our website.

Marketing Cookies

Where used, these may help us measure or personalise marketing activities.

Where required, we will provide appropriate cookie controls and allow users to manage their preferences.

The NDPC's guidance specifically contemplates privacy and cookie notices on websites and the ability for users to accept or decline cookies.

You may receive marketing communications from Chopbaze where permitted by applicable law.

You can unsubscribe from promotional emails or messages by following the unsubscribe instructions provided or contacting us directly.

Please note that opting out of marketing communications will not necessarily stop essential service communications, such as order confirmations, delivery updates, security notifications or account-related messages.

Chopbaze is not intended to knowingly collect personal data from children in circumstances where such collection is prohibited by applicable law.

Where consent or additional protections are legally required for processing a child's personal data, we will take appropriate measures to comply with applicable requirements.

If you believe that a child has provided personal data to us improperly, please contact us so that we can investigate and take appropriate action.

Our website or platform may contain links to third-party websites, applications or services.

We are not responsible for the privacy practices, security or content of third-party platforms.

We encourage users to review the privacy policies of third-party services before providing personal information to them.

If Chopbaze becomes aware of a personal data breach, we will assess the incident and take appropriate steps in accordance with applicable law.

Where legally required, we will notify relevant regulatory authorities and affected individuals within the applicable timeframe.

We will also take reasonable steps to contain, investigate and remediate the breach.

Chopbaze is committed to implementing privacy and data protection principles throughout the development and operation of its services. This may include:

• Access controls
• Data minimisation
• Privacy by design
• Staff confidentiality obligations
• Vendor due diligence
• Security assessments
• Data processing agreements
• Data retention procedures
• Incident response procedures
• Privacy training
• Periodic review of data processing activities

We may update this Privacy & Data Protection Policy from time to time to reflect:

• Changes to our services
• Changes in technology
• Changes in applicable laws
• Changes in regulatory requirements
• Changes in our data processing practices

When material changes are made, we will provide an appropriate notice where required.

The updated version will be published on our website with the revised "Last Updated" date.

If you have questions, concerns or requests regarding this Privacy & Data Protection Policy or the way Chopbaze handles personal data, please contact:

You may also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).

By using the Chopbaze website or services, you acknowledge that you have had the opportunity to review this Privacy & Data Protection Policy.

Where a particular processing activity requires consent under applicable law, Chopbaze will obtain such consent through an appropriate mechanism.