Privacy & Data Protection Policy

We collect only the minimum information necessary to process your orders and provide you with the best experience:

• 👤 Full name
• ✉️ Email address
• 📱 Phone number
• 📍 Delivery address
• 🛒 Order history
• 💳 Payment reference (not card details)

We do not collect or store your credit/debit card numbers. All payment processing is handled securely by our payment partner, Paystack.

Your account security is paramount. Here's how we handle your password:

Even our team members cannot see your password. If you forget your password, you will need to create a new one through our secure password reset process.

Your personal information is used strictly for:

• 📦 Order Processing — To prepare, dispatch, and deliver your orders accurately
• 📲 Communication — To send order updates, delivery notifications, and respond to your inquiries
• 🏷️ Member Benefits — To apply your 5% member discount and track loyalty points
• ⚡ Faster Checkout — To save your delivery details so returning customers can check out faster

FreshSpoonGh will never sell, rent, or trade your personal information to third parties for marketing or any other purposes.

The only third parties with limited access to your data are:

• 💳 Paystack — Our payment processor, who handles transactions securely under PCI-DSS compliance
• 🚚 Delivery Partners — Only receive your name, phone, and delivery address to fulfill orders

We retain your account data for as long as your account is active. If you choose to delete your account, all personal data will be permanently removed from our systems within 30 days.

Order records may be retained for up to 12 months for accounting and legal purposes, after which they are anonymized.

To protect your account from unauthorized access:

• 🔄 Auto-Logout — Your session will automatically end after 7 minutes of inactivity
• ⚠️ Warning — You'll receive a 60-second warning before being logged out, with the option to stay signed in
• 🔑 Secure Tokens — Authentication uses encrypted JWT tokens that expire regularly

You have the right to:

• 👁️ Access — Request a copy of all personal data we hold about you
• ✏️ Correct — Update or correct any inaccurate personal information
• 🗑️ Delete — Request permanent deletion of your account and all associated data
• 📤 Export — Receive your data in a portable format
• 🚫 Opt-Out — Unsubscribe from promotional communications at any time

To exercise any of these rights, please contact us using the information below.