ChopsCity is committed to protecting your privacy. This policy explains how ChopsCity Express Ltd ("ChopsCity", "we", "us", or "our") collects, uses, shares, and safeguards your personal information when you use our platform, mobile app, and related services (collectively, the "Service"). Please read this carefully — by using ChopsCity you agree to the practices described here.
ChopsCity Express Ltd is incorporated in the Federal Republic of Nigeria under the Corporate Affairs Commission (CAC), with its registered office in Lagos State, Nigeria.
1. Information We Collect
1.1 Information You Give Us
When you create an account, place an order, or contact us, we may collect:
- Identity data — full name, username, and profile photo
- Contact data — email address, phone number, and delivery addresses
- Payment data — card type and last four digits; full card details are handled directly by our payment processor and are never stored on ChopsCity servers
- Order data — items ordered, special instructions, order history, and preferences
- Communications — messages you send to us or to vendors through the app
1.2 Information We Collect Automatically
When you use the Service we automatically receive:
- Device & technical data — device model, operating system, browser type, IP address, and unique device identifiers
- Usage data — pages visited, search queries, features used, click patterns, and session duration
- Location data — with your permission, we collect precise GPS location to show nearby vendors, calculate delivery routes, and track deliveries in real time. You can withdraw location permission via your device settings at any time (this will limit delivery features)
- Cookies & similar technologies — we use cookies, local storage, and mobile analytics SDKs to keep you signed in, remember preferences, and measure performance. You can manage cookie preferences in your browser settings
1.3 Information from Third Parties
We may receive data from:
- Payment processors (e.g., Paystack, Flutterwave) — transaction status and fraud signals
- Mapping providers (e.g., Google Maps/Places) — address validation and route data
- Analytics providers — aggregated usage insights to improve the Service
- Social login providers — if you sign in with Google or Apple, we receive your name, email, and profile picture from that provider
2. How We Use Your Information
We use your data only for legitimate purposes:
- Fulfil your orders — process payments, assign riders, and coordinate delivery with vendors
- Provide the Service — show relevant vendors and menus, enable search, and personalise your experience
- Communicate with you — send order confirmations, delivery status updates, receipts, and important account notices
- Customer support — investigate and resolve complaints, refund requests, and disputes
- Safety & security — detect, prevent, and investigate fraud, abuse, and unauthorised access
- Service improvement — analyse usage patterns, fix bugs, run A/B tests, and develop new features
- Marketing — send you promotions, offers, and news about ChopsCity (you can opt out at any time via the app settings or the unsubscribe link in any email)
- Legal compliance — meet our obligations under applicable Nigerian law and respond to lawful requests from authorities
3. Sharing & Disclosure
We share your information only with the following parties and only for the stated purpose:
- Vendors — receive your name, phone number, order details, and delivery address to prepare and hand over your order
- Riders — receive your name, phone number, and pickup/drop-off location to collect and deliver your order
- Payment processors — handle your payment credentials end-to-end encrypted to process transactions securely
- Cloud & infrastructure providers — host our data under strict data processing agreements
- Analytics providers — receive anonymised or aggregated usage data to help us understand and improve the Service
- Legal authorities — may receive data required by Nigerian law, regulation, or valid court order
- Business transfers — in the event of a merger, acquisition, or asset sale, your data may be transferred as part of that transaction
4. Data Retention
We keep your personal data for as long as your account is active or as needed to provide the Service:
- Account and order data — retained for the lifetime of your account, plus 2 years after closure for legal and audit purposes
- Payment records — retained for 7 years to satisfy tax and financial regulations
- Location history — anonymised after 90 days; raw GPS data deleted after 30 days
- Support communications — retained for 2 years after a case is closed
5. Your Rights
Under the Nigeria Data Protection Act (NDPA) and applicable law, you have the right to:
- Access — request a copy of the personal data we hold about you
- Correction — ask us to correct inaccurate or incomplete data
- Deletion — request that we delete your personal data (subject to legal retention obligations)
- Restriction — ask us to pause processing of your data in certain circumstances
- Portability — receive your data in a structured, machine-readable format
- Object — object to processing based on legitimate interests or for direct marketing
- Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing
6. Security
We apply industry-standard technical and organisational measures to protect your data:
- TLS encryption for all data in transit
- Encryption at rest for sensitive data fields
- Role-based access controls so only authorised staff can access personal data
- Regular security assessments and penetration testing
7. Children
ChopsCity is not intended for anyone under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have done so, contact privacy@chopscity.com and we will delete the data promptly.
8. International Transfers
Our services are currently operated within Nigeria. If your data is ever transferred to or processed outside Nigeria, we will ensure appropriate safeguards are in place to protect your rights in accordance with the Nigeria Data Protection Act.
9. Changes to This Policy
We may update this policy as the Service evolves or as required by law. When we make material changes, we will notify you via the app or by email before the change takes effect. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Service after the effective date constitutes acceptance of the updated policy.
10. Contact Us
ChopsCity Express Ltd
Registered office: Lagos State, Federal Republic of Nigeria
For privacy questions or to exercise your rights, email us at privacy@chopscity.com.