Privacy policy

We only collect what we need to take your order and look after your account:

• Account details: your name, email address, phone number and a password (stored only as a one-way hash).
• Delivery addresses you save, and the address you give for an order.
• Orders and bookings: what you ordered, when, how you collected it, table reservations, and any reviews you write.
• ChopBack and referrals: your rewards balance and history, and referral codes you share or use.
• Payment status: whether a payment succeeded and its reference. Card and bank details are entered on our payment provider's page and are never seen or stored by us.
• Technical data: your IP address and basic request information, used to keep the service secure and prevent abuse.
• Notifications: the emails (and, in the mobile app, push notifications) we send you about your orders, bookings and account.

• To create your account, verify your email and sign you in.
• To prepare, deliver and take payment for your orders and bookings.
• To send order updates, receipts, verification codes and password-reset codes.
• To calculate and show your ChopBack rewards and referrals.
• To prevent fraud and abuse, and to fix problems.
• To meet our legal, tax and accounting obligations.

Under the Nigeria Data Protection Act 2023 (NDPA), we process your data to carry out the contract you make with us when you order or book, to meet legal obligations, for our legitimate interests in running a secure service, and, where we ask first, with your consent.

We do not sell your personal data. We share it only with:

• Our payment processor (Paystack or Flutterwave) to process your payment.
• Delivery and kitchen staff who need your name, phone number and address to complete your order.
• Service providers that host our systems and send our emails, under agreements that limit them to acting on our instructions.
• Authorities, when the law requires it.

We use two cookies, both strictly necessary, to keep you signed in. They are set by the site, can't be read by scripts, and are removed when you sign out. We do not use advertising or analytics cookies. Your browser may also keep a short-lived note, for the current tab only, so the “resend code” timer works.

We keep your account while it is open. Order, payment and ChopBack records are kept for as long as tax and accounting law require, even after an account is deleted, and are then removed. Anything we no longer need is deleted or made anonymous.

Connections are encrypted, passwords are hashed, sessions use protected cookies, and access to personal data is limited to people who need it. No system is perfectly secure, so if a breach affects you we will tell you and the regulator as the law requires.

You can ask us to:

• give you a copy of the personal data we hold about you;
• correct anything that is wrong (most of it you can edit in your account);
• delete your data (see how to delete your data);
• stop or limit how we use it, or object to a particular use;
• withdraw consent you gave us, at any time.

Email privacy@blaqplate.com. If you are unhappy with our answer you can complain to the Nigeria Data Protection Commission.

Blaqplate is not meant for children under 13, and we do not knowingly collect their data. If you think a child has given us theirs, tell us and we will delete it.

If we change this policy in a way that matters, we will update the date above and, for major changes, tell you by email or in the app.

Blaqplate is responsible for your data. Questions or requests: privacy@blaqplate.com.