Privacy Policy

Cotton Food Courts ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what we collect, how we use it, and the rights you have. It is designed to comply with the Nigeria Data Protection Regulation (NDPR).

1. Information we collect

• Account details: name, email address, phone number, and password.
• Delivery information: delivery address and location (with your permission) for accurate delivery and live tracking.
• Order history: the items you order, restaurants you visit, ratings, and reviews.
• Payment information: processed by Paystack; we receive only confirmation and a transaction reference, not your full card details.
• Device and usage data: device type, browser, IP address, and basic analytics about how you use the Platform.

2. How we use your information

• To create and secure your account.
• To process, prepare, and deliver your orders.
• To send order updates and important service notifications.
• To improve the Platform, including menu recommendations and performance.
• To prevent fraud and protect the safety of users, Vendors, and Riders.
• To comply with our legal obligations.

3. Sharing your information

We only share your data when needed to deliver the service:

• Vendors: receive your order details and first name to prepare your food.
• Riders: receive your delivery address, phone number, and first name to complete delivery.
• Paystack: processes your payment securely.
• Service providers: who help us run the Platform (e.g. hosting, email, analytics) under strict confidentiality.
• Authorities: where required by law.

We do not sell your personal data.

4. Data retention

We keep your personal data only as long as needed to provide the service, comply with our legal and tax obligations, and resolve disputes. When data is no longer required, we delete or anonymise it.

5. Your rights

Under the NDPR, you have the right to:

• Access the personal data we hold about you.
• Correct information that is inaccurate or incomplete.
• Request deletion of your account and associated data, subject to legal retention requirements.
• Object to or restrict certain processing of your data.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, email privacy@cottonfoodcourt.com.

6. Cookies

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Platform is used. See our Cookie Policy for details.

7. Security

We use industry-standard safeguards, including encryption in transit, secure authentication, and strict access controls, to protect your information. No system is perfectly secure, but we work continuously to reduce risk.

8. Contact

For any privacy concerns or to exercise your rights, contact us at privacy@cottonfoodcourt.com or by post at 54 Awolowo Avenue, Bodija, Ibadan, Nigeria.

9. Governing law

This Privacy Policy is governed by the laws of the Federal Republic of Nigeria and the Nigeria Data Protection Regulation (NDPR).