Privacy Policy

1. Introduction

At GrubFairy, we prioritize your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

2. Information We Collect

We may collect information about you in a variety of ways. The information we may collect includes:

• Personal Data: Personally identifiable information, such as your name, shipping address, email address, and telephone number, that you voluntarily give to us when you register directly or via a third-party login.
• Derivative Data: Information our servers automatically collect when you access the Site, such as your IP address, your browser type, your operating system, your access times, and the pages you have viewed directly before and after accessing the Site.
• Financial Data: Financial information, such as data related to your payment method (e.g., valid credit card number, card brand, expiration date) that we may collect when you purchase, order, return, exchange, or request information about our services.

3. How We Use Your Information

Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you to:

• Create and manage your account.
• Process your orders and deliver meals to you.
• Email you regarding your account or order status.
• Generate specific personal profile recommendations using our AI algorithms to tailor food choices to your taste.
• Improve our application and increase the efficiency of our AI and delivery systems.

4. Sharing Your Information

We may share information we have collected about you in certain situations. Your information may be disclosed as follows:

• Third-Party Service Providers: We may share your information with third parties that perform services for us or on our behalf, including payment processing, data analysis, email delivery, hosting services, customer service, and marketing assistance.
• Restaurants and Drivers: We share necessary details (name, delivery address, order contents) with our restaurant partners and delivery drivers to fulfill your order.

5. Cookie Policy

We use cookies and similar tracking technologies to track the activity on our Service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

6. Data Security

We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.

7. Data Protection Rights (NDPR)

In accordance with the Nigeria Data Protection Regulation (NDPR) 2019 and the Nigeria Data Protection Act (NDPA) 2023, you have the following rights regarding your personal data:

• Right to access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to deletion: You may request deletion of your personal data, subject to legal or contractual obligations that require us to retain it.
• Right to restrict processing: You may request that we limit the processing of your personal data in certain circumstances.
• Right to data portability: You may request a copy of your data in a structured, commonly used, and machine-readable format.
• Right to object: You may object to the processing of your personal data for direct marketing purposes.

To exercise any of these rights, please contact our Data Protection Officer at compliance@grubfairy.com. We will respond to your request within 30 days. Payment data is tokenized and processed exclusively by PCI-DSS certified payment partners — GrubFairy does not store raw card numbers.