How ChopNow handles your data.

ChopNow is a food ordering and delivery platform, and a product of Megatek Digital Solutions Ltd ("ChopNow", "we", "us", "our"). This policy explains how we handle personal information when you use our services. We are the data controller responsible for that information, and we are based in Nigeria.

Customer accounts, ordering and checkout are available only in the ChopNow mobile app. Our website is informational and lets you join a waitlist; it does not offer web sign-up, login or checkout. Riders apply and sign in only in the ChopNow Rider app. Vendors, not ChopNow, prepare the food and are responsible for its quality, safety and accuracy; ChopNow provides the technology and coordinates delivery.

We process personal data in line with the Nigeria Data Protection Act and the rules of the Nigeria Data Protection Commission (NDPC). If you have any questions about this policy, you can reach us at [email protected].

Depending on how you use ChopNow, we may collect the following categories of information:

• Account details: your name, phone number, email address, delivery addresses and, if you choose to add it, your birthday, which we use to send you a birthday reward.
• Order and payment information: the items you order, order history, applied discounts, fees and payment references. Card and bank payments are processed by our payment providers, and ChopNow does not store your full card numbers.
• Location and delivery details: your delivery address, contact details needed for delivery, and delivery confirmation activity such as the delivery confirmation code.
• Device and app information: device and browser context, app version and operational logs from your use of the service.
• Loyalty activity: your ChopCoins and loyalty activity, including earned rewards and redemptions.
• Rider verification documents: if you apply as a rider, we collect verification information such as your date of birth, gender, a government ID, driver's licence, passport photo, proof of vehicle ownership, plate number and next-of-kin details.
• Vendor details: if you register as a vendor, we collect your business and verification details.
• Payout details: if you are a vendor or rider, the bank name and account number you give us so we can pay your earnings.
• Support communications: the messages, tickets and requests you send us, and our responses.
• Ratings, reviews and photos: the ratings and reviews you leave, and the photos you upload, such as a profile picture, menu photos or support attachments.
• Cookies and usage: cookies and similar usage data, as described in our Cookies Policy.

We use the information we collect to:

• Operate the service: place and fulfil orders, coordinate delivery, process payments, and maintain your Wallet and loyalty balances.
• Keep the platform safe: verify accounts, prevent fraud and abuse, and protect users and the service.
• Provide support: respond to your questions, handle disputes and manage refund reviews.
• Send notifications: account, verification, security and order-related messages, including push notifications where you have them enabled.
• Meet legal obligations: comply with applicable laws, regulations and lawful requests.
• Improve the service: understand how ChopNow is used so we can make it more reliable and easier to use.

We process personal data on the lawful bases recognised under the Nigeria Data Protection Act, including performing the contract to provide the service you request, meeting our legal obligations, our legitimate interests in running and protecting the platform, and, where required, your consent.

Where we rely on consent, including your cookie consent, we record it in line with the guidance of the NDPC, and you may withdraw it at any time. Withdrawing consent does not affect processing that already took place while the consent was in force.

We do not sell your personal data. We share information only where it is needed to run the service, including:

• With vendors and riders: the order details, contact information and delivery details reasonably needed to prepare and deliver your order.
• With payment and infrastructure providers: the service providers who process payments, deliver messages and notifications, and host the platform on our behalf.
• Where required by law: when disclosure is required by law, regulation, court order or a lawful request from an authority.

You can delete your account from within the ChopNow app. If you delete it yourself there is no recovery window — it takes effect immediately and cannot be undone. If instead you ask our support team to close your account for you, it is locked straight away but can still be restored for a short period (currently 7 days) in case the request was a mistake; after that it is finalised in the same way.

When a deletion is finalised we remove your personal details — your name, email address, phone number, saved addresses, photographs and any identity documents you uploaded — and keep only the records we are legally required to keep, such as order and payment history. Those records are no longer linked to your name. We hold personal data for no longer than is reasonably necessary for the purposes described in this policy.

We also keep a one-way fingerprint of the email address and phone number that were verified on the closed account. We cannot read an address back from it; it exists so a closed account’s details cannot be used to open a new one. This means the email address and phone number you used cannot be reused — if you want to use ChopNow again, please sign up with a different email address or phone number.

Under the Nigeria Data Protection Act, you have rights over your personal data. Subject to the conditions in the law, these include:

• Access: ask for a copy of the personal data we hold about you.
• Correction: ask us to correct information that is inaccurate or incomplete.
• Deletion: ask us to delete your data where we are not required to keep it.
• Objection: object to certain processing of your data.
• Complaint: lodge a complaint with the Nigeria Data Protection Commission.

To exercise any of these rights, contact us at [email protected]. We may need to verify your identity before acting on a request.

We use reasonable technical and organisational measures to protect personal data, including access controls, authentication steps such as email OTP for sensitive actions, and activity logs. No system is completely secure, however, and the service is provided on a reasonable-effort basis. To the extent permitted by law, ChopNow is not liable for loss or damage arising from unauthorised access or events beyond our reasonable control. Please keep your account credentials confidential and let us know promptly if you suspect any unauthorised use of your account.

ChopNow is not intended for people under the age of 18, and we do not knowingly collect personal data from under-18s. If you believe a child has provided us with personal information, please contact us at [email protected] so we can take appropriate action.

Effective date: 25 September 2026.

We may update this policy from time to time. The current version always governs your use of ChopNow, and your continued use of the service after an update means you accept the revised policy. Where the changes are material, we will notify you in-app or by email.

For privacy questions, data requests, support and legal notices, contact ChopNow, a product of Megatek Digital Solutions Ltd, at [email protected]. You can also reach us through the contact channels on our website.