Your information
Privacy Policy
This notice explains, in plain language, what CampusCravings collects when you preorder, exactly how we use it, who may receive it, how long we keep it, and the choices you have.
Effective 23 September 2026
1. Who is responsible
CampusCravings decides why customer information is collected and how it is used for this ordering service. Ancherem Innovation Ltd provides and supports the technology used to run the service and handles information only as needed to maintain it.
2. What information we collect
- Contact details: your name, email address, and WhatsApp or telephone number.
- Order details: the sandwiches and quantities you order, your notes, delivery date, and collection details.
- Payment record: the amount, transaction reference, payment status, and the time payment was confirmed.
- Support information: messages or information you submit when you ask for help or make a privacy request.
- Basic technical information: limited information produced when the service is accessed, such as request and security logs needed to operate and protect the app.
CampusCravings does not receive or store your complete card number, PIN, CVV, or online-banking password. Paystack collects and processes payment details on its own secure service.
3. How we use your data
| Data | How we use it | Why it is needed |
|---|---|---|
| Name and contact details | Identify your order, send confirmation, and contact you about preparation, collection, delays, changes, or refunds. | To take the steps you request and fulfil your preorder. |
| Order and collection details | Prepare the correct products and quantities, organise the delivery list, and hand the order to the correct customer. | To provide the food and collection service you ordered. |
| Payment reference, amount, and status | Confirm payment, prevent duplicate or false orders, reconcile sales, and handle payment questions or refunds. | To complete the transaction, prevent fraud, and maintain required business records. |
| Support and privacy requests | Investigate your question, verify the request belongs to you, respond, and keep a record of the outcome. | To support you and meet privacy responsibilities. |
| Technical and security records | Keep the app working, diagnose errors, and detect misuse or security incidents. | To operate and protect the service and its users. |
4. Our reasons for processing
Depending on the activity, we process information because it is necessary to fulfil your order or take steps you request, because we must comply with a legal obligation, because it is reasonably necessary to operate and secure the service, or because you have given consent for a specific optional purpose. If consent is used, you may withdraw it for future processing. Withdrawing consent does not affect processing that was already lawful or information we must keep for another valid reason.
5. Who receives your data
- Authorised CampusCravings personnel who prepare orders, manage collection, reconcile payments, or provide support.
- Ancherem Innovation Ltd, which maintains and supports the ordering application.
- Paystack, which processes the payment and returns a transaction result to CampusCravings.
- Hosting and infrastructure providers needed to store and run the application securely.
- Regulators, courts, law-enforcement bodies, or professional advisers when disclosure is required or permitted by law.
Each recipient should receive only the information needed for its role. Paystack processes payment information under its own privacy policy.
6. How long we keep it
- Unpaid or abandoned orders: may be deleted after seven days.
- Paid orders: identifying details are normally anonymised after 24 months, unless they are needed longer for law, tax, accounting, fraud prevention, or a dispute.
- Privacy and support requests: kept only as long as reasonably needed to complete the request and show how it was handled.
- Technical and security records: kept for the shortest period reasonably needed to operate and protect the service or investigate an incident.
When data is anonymised, details that identify the customer are removed while non-identifying sales information may remain for reporting and accounting.
7. What we do not do
- We do not sell or rent customer information.
- We do not use order details for third-party advertising.
- We do not add customers to marketing lists without a clear, separate reason and appropriate permission.
- We do not make decisions about customers using solely automated profiling.
- We do not ask for card PINs, CVVs, complete card numbers, passwords, or identity documents through the privacy-request form.
8. Your choices and rights
Subject to applicable law, you may ask to be informed about processing, access your information, correct inaccurate data, request deletion or restriction where applicable, object to certain processing, request portability, withdraw consent, and complain to the Nigeria Data Protection Commission. We may need to verify that a request relates to you before acting on it. Some requests may be limited where information must be kept by law or is needed to establish or defend a legal claim.
9. Security
We use restricted administrative access, payment verification, limited staff access, data minimisation, and reasonable technical safeguards. Staff should not copy customer lists into personal notes or unrelated systems. No internet service can guarantee absolute security, but suspected incidents are investigated and affected people or authorities are notified where required.
10. Contact and requests
To exercise a data right, use the privacy request form. For another privacy enquiry, email info.anchereminnovationltd@gmail.com with “CampusCravings Privacy” in the subject line. You may also learn about your rights from the Nigeria Data Protection Commission.
11. Changes to this notice
We may update this notice when the ordering process, service providers, collected information, or applicable requirements change. The effective date at the top shows when this version began to apply.