At Hupchop, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our premium meal retainer service. By using our services, you consent to the data practices described in this policy.
Information We Collect
Personal Information: When you sign up for Hupchop, we collect your full name, email address, phone number, company name, job title, and delivery address including building-specific details such as floor number and reception contact information.
Dietary & Preference Data: To personalize your meal experience, we collect dietary restrictions, cuisine preferences, spice level preferences, and any allergy information you provide.
Payment Information: Billing details including payment method and transaction history. Payment card data is processed by our PCI-compliant payment partners and is never stored on our servers.
Usage Data: IP address, browser type, device information, pages visited, interaction patterns, and referral sources. We also capture UTM parameters for marketing attribution.
Delivery Data: Delivery timestamps, feedback ratings, skip requests, and communication with your pod team.
How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our premium meal delivery service
- Personalize your meal selections based on dietary preferences and feedback
- Process payments and manage your subscription billing
- Communicate about deliveries, account changes, and service updates
- Optimize delivery routes and timing within your zone
- Monitor service quality and vendor performance
- Detect fraud, prevent abuse, and comply with legal obligations
Legal Basis for Processing
In accordance with the Nigeria Data Protection Regulation (NDPR) and applicable data protection laws, we process your personal data based on the following legal grounds:
Contractual Necessity: Processing required to fulfill your subscription agreement and deliver our services.
Consent: Where you have given explicit consent, such as for marketing communications or optional data collection.
Legitimate Interest: For purposes like fraud prevention, service improvement, and business analytics, balanced against your rights.
Data Sharing & Disclosure
We do not sell, rent, or trade your personal data. We share information only in the following circumstances:
Vendor Partners: We share only your dietary requirements and allergy information with food preparation vendors. They do not receive your contact details or address.
Delivery Personnel: Riders receive only the minimum information needed for delivery: your name, building address, and any access instructions.
Payment Processors: Transaction data is shared with PCI-compliant payment partners to process your subscription payments.
Legal Requirements: We may disclose information when required by law, court order, or to protect the rights, safety, or property of Hupchop, our users, or others.
Data Security
We implement robust security measures to protect your personal information:
256-bit SSL/TLS encryption for all data in transit. Sensitive fields encrypted at rest.
Role-based access controls. Staff access limited to job function requirements.
All administrative data access is logged and monitored for unauthorized activity.
Periodic security reviews and vulnerability assessments of our systems.
Data Retention
We retain your personal data for as long as your subscription is active and for a reasonable period thereafter to fulfill legal obligations, resolve disputes, and enforce agreements.
Active Accounts: Data retained throughout the subscription period and for 12 months after cancellation.
Financial Records: Transaction and billing data retained for 7 years in compliance with Nigerian tax regulations.
Anonymized Data: We may retain anonymized, aggregated data indefinitely for analytics and service improvement purposes.
Your Rights
Under the Nigeria Data Protection Regulation (NDPR), you have the right to:
- Access - Request a copy of the personal data we hold about you
- Rectification - Request correction of inaccurate or incomplete data
- Erasure - Request deletion of your personal data, subject to legal retention requirements
- Restriction - Request that we limit processing of your data in certain circumstances
- Portability - Request your data in a structured, machine-readable format
- Objection - Object to processing based on legitimate interests
To exercise any of these rights, contact us at privacy@hupchop.com. We will respond within 30 days.
Children's Privacy
Hupchop is a service designed for adults in a professional capacity. We do not knowingly collect personal information from anyone under the age of 18. If we discover that a child's data has been inadvertently collected, we will promptly delete it.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or through a prominent notice on our platform at least 14 days before the changes take effect. Continued use of our service after the effective date constitutes acceptance of the revised policy.
Contact Us
For questions, concerns, or requests related to this Privacy Policy or your personal data, please contact our Data Protection team: