Privacy Policy

eazyChops Technologies Ltd ("eazyChops", "we", "us") operates a food delivery marketplace connecting customers, restaurants, and delivery riders across Nigeria. This policy explains what personal data we collect, why we collect it, and the rights you have over it under the Nigeria Data Protection Act 2023 (NDPA).

Depending on how you use eazyChops, we collect:

• Account data — name, email, phone number, password (stored as a one-way hash, never in plain text).
• Order data — delivery address, order contents, order history.
• Vendor data — business name, address, registration numbers (CAC/TIN/NAFDAC where applicable), bank details for payouts.
• Payment data — we never see or store your card number, CVV, or expiry date. Card payments are handled entirely by Paystack on their own hosted checkout page; we only retain a payment reference, status, and amount.
• Device/usage data — basic technical logs (IP address, browser type) for security and fraud prevention.

• Contractual necessity — to create your account, process orders, arrange delivery, and pay vendors.
• Legitimate interest — fraud prevention, platform security, service improvement.
• Legal obligation — tax and financial record-keeping requirements.
• Consent — marketing communications, which you can withdraw at any time.

• Paystack — payment processing (PCI DSS compliant; card data never passes through eazyChops servers).
• Delivery partners (Glovo, Kwik) — pickup/dropoff address and contact details, solely to complete your delivery.
• Restaurants/vendors — order contents and delivery address needed to fulfill your order.
• We do not sell personal data to third parties.

We retain account and order data for as long as your account is active. When you request account deletion, we anonymize your personal identifiers (name, email, phone) immediately — your order and payment records are kept, but only in anonymized form, for the 6-year period Nigerian tax and accounting law requires us to retain financial records (Companies Income Tax Act, s.63). Once that 6-year window has passed, those anonymized records are automatically and permanently deleted — we do not keep personal data for longer than the law requires us to.

Under the NDPA, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data via your profile settings.
• Erase your account and personal identifiers, subject to legal retention requirements described above.
• Object to processing for marketing purposes.

You can exercise access and erasure rights directly from your account settings page, or by contacting us at the email below.

We use strictly necessary cookies to keep you signed in and remember your cart. We do not use third-party advertising or tracking cookies. Disabling cookies in your browser may prevent you from staying logged in or completing checkout.

We use industry-standard measures including encrypted connections (HTTPS) on every request, encryption at rest on our database infrastructure, password hashing, and role-based access control limiting who within eazyChops can view what data. No system is 100% secure, but we actively maintain and audit these controls.

Questions about this policy or your data: privacy@eazychop.com