Privacy Policy
Last Updated: June 2026
Your privacy matters to us. This policy explains how Bukadash collects, uses, and protects your personal information.
1. Introduction
Bukadash ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and what rights you have over your data. By creating an account and using the Bukadash platform, you consent to the practices described in this policy.
2. Data We Collect
We collect the following categories of personal data: your full name and email address when you register an account; your phone number and WhatsApp number for order notifications and vendor communication; your delivery address or hall of residence for order fulfillment; your complete order history and payment transaction records; and technical metadata such as your IP address, browser type, and device information collected automatically for security, analytics, and fraud prevention purposes.
3. How We Use Your Data
We use your personal data to process and fulfill your food orders; send you real-time order status updates via WhatsApp and email; personalise and improve your experience on the Bukadash platform; analyse usage patterns to improve our services and fix issues; comply with legal and regulatory obligations; resolve disputes and enforce our Terms of Service; and — where you have opted in — send you promotional messages about new vendors, offers, and platform features.
4. Data Sharing
We share your personal data only where necessary to provide our services. Your name, phone number, and delivery address are shared with vendors to fulfill your orders. Payment details are processed by Paystack, our secure payment partner, and are never stored on Bukadash servers. We may disclose your data to Nigerian legal authorities if required by law or court order. We do not sell, rent, lease, or trade your personal data to any third parties for marketing or commercial purposes.
5. Data Retention
We retain your personal account data for as long as your account remains active and as required to provide our services. Order and transaction records are retained for 90 days after the order is completed. If you choose to delete your account, we will remove your personal data from our active systems within 30 days, subject to any legal retention obligations. Anonymised and aggregated usage data may be retained indefinitely for analytics purposes.
6. Your Rights
You have the following rights regarding your personal data: the right to access a copy of the data we hold about you; the right to request correction of any inaccurate or incomplete data; the right to request deletion of your personal data ("right to be forgotten"); the right to withdraw consent for data processing at any time; and the right to object to the processing of your data for direct marketing. To exercise any of these rights, email us at privacy@bukadash.com. We will respond within 10 business days.
7. Security
We take data security seriously and implement industry-standard safeguards to protect your personal information. These include TLS encryption for all data transmitted between your device and our servers, encrypted storage of sensitive data, infrastructure hosted on Railway with restricted access controls, and regular security reviews. While we take every reasonable precaution, no method of internet transmission or electronic storage is 100% secure. We encourage you to use a strong, unique password for your Bukadash account and to keep it confidential.
8. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please contact our data privacy team at privacy@bukadash.com. For general support enquiries, you can reach us at support@bukadash.com. We are committed to resolving all privacy concerns promptly and fairly.