Privacy Policy
1Data we collect
Account information
When you create a Chopfast account, we collect your full name, email address, phone number, and password (stored as a one-way hash). If you sign up via Google or Apple, we receive only the profile information you have authorised those providers to share.
Order data
Every order you place generates a record including the items ordered, restaurant, delivery address, payment method used, order timestamp, and delivery status. This data is linked to your account and retained to provide order history and customer support.
Location data
With your permission, we collect your device's precise GPS location to show nearby restaurants, calculate delivery fees, and route riders to your address. Location data is only accessed while the app is in use, never in the background, unless you explicitly enable background location for live tracking.
Device and usage data
We collect technical information about your device including device model, operating system, app version, IP address, and crash reports. We also collect in-app behaviour data such as screens viewed, buttons tapped, and session duration to improve the user experience.
Payment information
We do not store your full card number on our servers. Payment processing is handled by our certified PCI-DSS compliant payment partners. We retain only a masked card reference (e.g. **** **** **** 4242) and the payment provider's transaction ID for reconciliation and refund purposes.
2How we use your data
Providing the service
Your data is primarily used to process orders, connect you with restaurants and riders, provide customer support, and send you order confirmations and delivery notifications.
Personalisation
We use your order history, location, and in-app behaviour to personalise your home feed — recommending restaurants and dishes most relevant to you. You can opt out of personalised recommendations in your account settings.
Platform improvement
Aggregated and anonymised usage data helps our product and engineering teams identify bugs, optimise performance, and prioritise new features. No personally identifiable information is included in these analyses.
Marketing communications
With your consent, we send promotional emails, push notifications, and SMS messages about offers, new restaurants, and platform updates. You can manage your communication preferences at any time from Settings → Notifications.
Fraud prevention and safety
We use account data, device fingerprints, and behavioural signals to detect and prevent fraudulent activity, protect the safety of riders and customers, and comply with legal obligations.
5Data retention
Active accounts
We retain your personal data for as long as your account remains active. Your order history, saved addresses, and profile information are stored to enable a seamless experience each time you use Chopfast.
Account deletion
If you delete your Chopfast account, we will erase your personal profile, saved addresses, and preferences within 30 days. Order history and transaction records are retained for up to 7 years to comply with Nigerian tax and financial regulations.
Anonymised data
Aggregated and anonymised analytics data — which cannot be used to identify you — may be retained indefinitely for business intelligence and research purposes.
6Your rights
Access and portability
You have the right to request a copy of all personal data we hold about you. You can download a machine-readable export of your Chopfast data at any time from Settings → Privacy → Download my data.
Correction
If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You can update most information directly from your account settings, or contact us at privacy@chopfast.com.
Deletion
You have the right to request deletion of your personal data. Certain data may need to be retained for legal or contractual reasons, but we will inform you of any such limitations at the time of your request.
Objection and restriction
You have the right to object to certain processing activities (such as direct marketing) and to request that we restrict processing of your data in certain circumstances. Contact us at privacy@chopfast.com to exercise these rights.
7Contact us
Data controller
The data controller responsible for your personal information is Chopfast Technologies Limited, incorporated in Nigeria (RC: 1847291), with registered offices at 14 Admiralty Way, Lekki Phase 1, Lagos State, Nigeria.
Privacy enquiries
For all questions, requests, or concerns relating to this Privacy Policy or our data practices, please contact our Data Protection Officer at privacy@chopfast.com. We aim to respond to all privacy requests within 30 days.
Complaints
If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.