Can I Buy You A Meal
Last updated: June 30, 2025
This Privacy Policy describes how Can I Buy You A Meal (“the Company,” “We,” “Us,” or “Our”) collects, uses, and discloses Your information when You use the Can I Buy You A Meal mobile application (the “Service”). It also informs You about Your privacy rights and how the law protects You.
We use Your Personal Data to provide, improve, and personalize the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.
Interpretation and Definitions
Interpretation
Words capitalized herein have meanings defined under these conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.
Definitions
- Account means a unique account created for You to access our Service.
- Application (referred to as “the App” or “Service”) refers to the Can I Buy You A Meal mobile application.
- Company (referred to as “the Company,” “We,” “Us,” or “Our” in this Agreement) refers to Can I Buy You A Meal Ltd., located at Lagos, Nigeria.
- For the purpose of the GDPR and NDPA, the Company is the Data Controller.
- Country refers to: Nigeria.
- Device means any device that can access the Service such as a mobile phone, tablet, or other electronic device.
- Personal Data is any information that relates to an identified or identifiable individual.
- For the purposes of GDPR and NDPA, Personal Data includes information such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that individual.
- Service Provider means any natural or legal person who processes data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, provide the Service on our behalf, perform services related to the Service, or assist us in analyzing how the Service is used.
- For the purpose of GDPR and NDPA, Service Providers are Data Processors.
- Usage Data refers to data collected automatically, either generated by Your use of the Service or from the Service infrastructure itself (e.g., app crash reports, feature usage).
- You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.
- For the purpose of GDPR and NDPA, You can be referred to as the Data Subject or the User.
What Personal Information Does Can I Buy You A Meal Collect?
We collect information that helps us identify you, either on its own or when combined with other details. The types of personal information we may collect or process include:
- Contact Information: Your name, email address, phone number, and delivery addresses (home, work, or other designated locations).
- Account & Profile Details: Your username, password, privacy settings, notification preferences, profile pictures, and any other details you add to your profile.
- Order & Transaction Information: Details about the orders you place, including items purchased, payment method (though handled by providers, limited details may be stored), order history, delivery instructions, and promotional codes used.
- Communications with Us: Records of your interactions, including messages with delivery personnel or restaurants, chats, texts, calls, and emails related to our services. We record the date, time, method, and outcomes of these interactions.
- Content You Create: Your reviews, ratings, photos you upload, and any other public feedback or submissions you make on our platform.
- Payment Information: While our payment providers securely handle most payment processing, we may store limited details such as your bank’s name, masked account numbers (e.g., last 4 digits), and transaction IDs necessary for managing payment services, refunds, or identifying transactions. We do not directly store full credit/debit card details on our servers.
- Location Data: We collect precise and/or approximate location data from your device, which is essential for our services (e.g., matching you with nearby restaurants, facilitating deliveries, showing relevant offers). You can manage location settings through your device.
- Device & Usage Information: We automatically collect data about how you access and use our services. This includes your IP address, device identifiers (e.g., IMEI, MAC address), operating system, browser type, mobile network information, app version, language settings, access times, pages viewed, features used, and crash data.
- Cookies & Tracking Technologies: We use cookies, web beacons, pixels, and other similar tracking technologies (including SDKs in our mobile app) to collect information about your Browse activity, preferences, and interactions with our services. This helps us to improve your experience, analyze trends, and deliver targeted advertising.
- Inferred Data: We may derive certain insights about your preferences (e.g., preferred cuisine types, dietary habits) based on your order history and interactions with our platform to personalize your experience and recommendations.
How Does Can I Buy You A Meal Collect or Receive Personal Information?
We collect information through various means to provide and improve our services:
- Directly From You, Our Users: When you create an account, place an order, participate in surveys or promotions, post content, communicate with us, or sign up for programs (e.g., loyalty programs). If you provide us with information about others (e.g., for a gift or shared order), please ensure you have their consent to do so.
- Automatically Through Our Services: As you use our app and website, we automatically collect data related to your device, usage patterns, and location through cookies, SDKs, and other tracking technologies.
- From Our Service Providers: Companies that help us with various aspects of our operations, such as identity verification, payment processing, communication services (email/SMS platforms), analytics, mapping, and market research.
- From Our Partners: Businesses like restaurants (Merchants/Vendors) or third-party loyalty programs integrated with our services may share relevant information to facilitate orders, provide discounts, or enhance your benefits.
- From Employers: If your employer utilizes specific programs with us (e.g., corporate meal programs, rider management systems), they might provide certain details necessary for your participation.
- From Legal Requests: In response to a legal claim, dispute, official request, or as required by law, we may collect information from law enforcement, government agencies, or other involved parties.
How Does Can I Buy You A Meal Use Personal Information?
We use your personal information based on specific legal grounds to:
- Provide and Personalize Our Services (Performance of a Contract / Legitimate Interest):
- Enable you to order and pay for food, track deliveries, and manage your account.
- Recommend restaurants, dishes, and promotions tailored to your preferences and location.
- Facilitate special deals, rewards, and meal card purchases.
- Display your public reviews, ratings, and photos.
- Customize your experience on our platform.
- Match you with available delivery personnel and restaurants.
- Offer Customer Support (Performance of a Contract / Legitimate Interest):
- Communicate with you regarding your orders, account, or inquiries.
- Investigate and resolve issues (e.g., delivery problems, payment disputes).
- Improve the quality and efficiency of our support services.
- Improve & Develop Our Services (Legitimate Interest):
- Fix bugs, troubleshoot technical issues, and optimize app/website performance.
- Understand how you use our platform (via analytics) to enhance user experience.
- Develop new features, services, and offerings (e.g., improving recommendation algorithms, optimizing delivery routes).
- Conduct research and analysis.
- Advertise and Promote Can I Buy You A Meal (Legitimate Interest / Consent):
- Show you relevant advertisements and promotions for our services and partner restaurants, both on our platform and across third-party websites and apps.
- Measure the effectiveness of our marketing campaigns. You can opt-out of personalized advertising on third-party platforms.
- Ensure Security and Safety (Legitimate Interest / Legal Obligation):
- Verify your identity and maintain the security of your account and payments.
- Detect and prevent fraud, unauthorized access, illegal activity, and violations of our terms of service.
- Ensure your safety and the safety of our delivery personnel and restaurant partners.
- Comply with Legal Requirements (Legal Obligation):
- Meet our legal obligations, including tax, accounting, and consumer protection laws.
- Respond to valid legal requests from law enforcement agencies, courts, or other government bodies.
- Handle legal proceedings, enforce our terms and conditions, and investigate potential illegal activities.
- Help you exercise your privacy rights.
Can I Buy You A Meal Disclosure of Personal Information
We may share your personal information with the following categories of recipients:
- Service Providers: Companies that perform services on our behalf, such as identity verification, payment processing, fraud prevention, promotion management, market research, communications (email/SMS platforms), analytics, mapping, hosting, and customer support.
- Delivery Personnel: To facilitate your orders, we share necessary details such as your first name and last initial, delivery address, approximate location, phone number, order details, and any special delivery instructions. We may ask for confirmation to verify delivery.
- Merchants/Vendors (Restaurants): We share information with restaurants to help them prepare, fulfill, and facilitate your orders, including order details, your first name, and last initial.
- The Public: Any content you choose to share publicly on our platform, such as reviews, ratings, or photos, will be visible to other users and the general public.
- Marketing & Advertising Partners: We may share information with third-party marketing and advertising partners to deliver and measure the effectiveness of ads for Can I Buy You A Meal and our restaurant partners, including personalized advertisements.
- Analytics Providers: We share data with analytics providers (e.g., Google Analytics, Firebase) to understand user behavior and improve our services.
- Legal & Regulatory Bodies: We may disclose information to law enforcement, government agencies, courts, or other third parties when legally required, in response to valid legal processes, or to protect our rights, property, or safety, or that of others.
- Business Transfers: In the event of a merger, acquisition, sale of assets, or bankruptcy, your personal information may be transferred to a third party involved in such a transaction.
- Affiliates/Group Companies: We may share information with companies that are part of the Can I Buy You A Meal corporate group for business and operational purposes.
Your Privacy Rights and Choices
We are committed to empowering you with control over your personal data. Depending on your jurisdiction and the nature of our data processing, you may have the following rights regarding your personal information:
- Right to Access: You can request a copy of the personal information we hold about you.
- Right to Rectification/Correction: You can request that we correct any inaccurate or incomplete personal information we hold about you.
- Right to Erasure (Right to be Forgotten): You can request the deletion of your personal information under certain circumstances (e.g., if it’s no longer necessary for the purposes for which it was collected).
- Right to Restrict Processing: You can request that we limit the way we use your personal information under certain conditions.
- Right to Data Portability: You can request to receive your personal information in a structured, commonly used, and machine-readable format, and have the right to transmit that data to another controller.
- Right to Object: You can object to the processing of your personal information for direct marketing purposes or when processing is based on our legitimate interests (unless we demonstrate compelling legitimate grounds for the processing).
- Right to Withdraw Consent: Where we rely on your consent to process your personal information, you have the right to withdraw that consent at any time.
- Rights Related to Automated Decision-Making and Profiling: You have the right not to be subject to a decision based solely on automated processing (including profiling) which produces legal effects concerning you or similarly significantly affects you.
To exercise any of these rights, please contact us using the details in the “How To Contact Us” section below. We may need to verify your identity before processing your request.
- Right to Lodge a Complaint: You also have the right to lodge a complaint with your local data protection authority (in Nigeria, this is the Nigeria Data Protection Commission – NDPC) if you believe your privacy rights have been violated.
Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. This includes retaining data for providing our services, resolving disputes, enforcing our agreements, and for legal and tax compliance. When your data is no longer needed, we will securely delete or anonymize it.
International Data Transfers
As we may use service providers or operate globally, your personal information may be transferred to, stored in, and processed in countries outside of Nigeria, where data protection laws may differ from those in your jurisdiction. We will take appropriate safeguards (e.g., standard contractual clauses, binding corporate rules) to ensure your data remains protected in accordance with this Privacy Policy and applicable laws.
Children’s Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children without appropriate parental consent. If we become aware that we have collected personal information from a child without verifiable parental consent, we will take steps to delete that information.
Security Measures
We implement reasonable technical and organizational measures designed to protect your personal information from unauthorized access, use, alteration, and disclosure. These measures include data encryption, firewalls, secure server facilities, and access controls. However, no internet transmission or electronic storage is entirely secure, so we cannot guarantee absolute security.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any significant changes by posting the new Privacy Policy on our website and app, and updating the “Last Updated” date. We encourage you to review this Privacy Policy periodically.
How To Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at admin@canibuyyouameal.com.
