Privacy policy

Who is responsible for your information

Michofat Konsult Limited operates Korey Foods and is responsible for the personal information described in this policy. Korey Foods currently provides food-ordering and delivery-coordination services within Lagos State, Nigeria.

Information we collect

Depending on how you use Korey Foods, we may collect:

• Account and contact information, including your name, email address, telephone number, password in protected hashed form, account role and account status.
• Order information, including selected food items, quantities, prices, order history, requested delivery date and time, and order status.
• Delivery information, including your address, area, state, landmark and any delivery or customer instructions you provide.
• Payment-confirmation information, including a receipt image or PDF, its filename, file type and file size. Payments are made by bank transfer; Korey Foods does not collect card numbers in the app.
• Communications, including order-chat messages, delivery-fee discussions, support requests, reviews and feedback.
• Technical and usage information, including security logs, request timestamps, error information, app platform and version, and a one-way hashed anonymous installation identifier used to understand unique app visits.

We do not request access to your contacts, microphone or precise device location. When you choose a receipt or food cover, the app may request access to your camera, photos or files solely to let you select or create that upload.

How we collect information

• Directly from you when you register, place an order, upload a receipt, provide delivery details, chat with us or contact support.
• Automatically from the app and our servers when you open or use Korey Foods.
• From administrators and support staff when they update an order, confirm payment, propose a delivery fee or respond to your message.

Why we use information

We use personal information where necessary to provide our service, comply with law, protect legitimate business and security interests, or where you have given permission. Uses include:

• Creating and securing your account.
• Processing, confirming, preparing and delivering orders.
• Reviewing transfer receipts and discussing delivery charges.
• Providing order chat, notifications and customer support.
• Preventing abuse, investigating errors and maintaining service security.
• Producing operational reports and improving app reliability, food listings and customer experience.
• Maintaining financial, order and audit records required for accountability and legal compliance.

When information is shared

We share only what is reasonably necessary with:

• File-storage providers, including Fivage, when you upload a receipt or other supported file.
• Hosting, database, security and communications providers that help operate Korey Foods.
• Delivery personnel or fulfilment partners who need relevant order and delivery details.
• WhatsApp when you choose to contact support through WhatsApp. Your use of WhatsApp is also governed by WhatsApp’s own privacy terms.
• Professional advisers, regulators, law-enforcement authorities or other parties when disclosure is required by law or necessary to protect rights, safety and the service.

Service providers are expected to handle information only for authorised purposes and with appropriate protection. We do not sell or rent personal information and do not use it for third-party targeted advertising.

International processing

Some technology providers may process or store information outside Nigeria. Where this occurs, we take reasonable steps to use providers and safeguards appropriate to the nature of the information and applicable data-protection requirements.

How long we retain information

We retain information only for as long as reasonably needed for the purposes in this policy. Account information is generally kept while the account remains active. Orders, receipts, payment decisions, chats and audit records may be retained after an order is completed where needed for customer support, dispute handling, fraud prevention, accounting, tax and other legal obligations. Technical and anonymous visit records are periodically reviewed and deleted or aggregated when no longer needed for security and service analysis.

When information is no longer required, we delete it, anonymise it, or securely isolate it until deletion is possible. A valid deletion request may not cover records we must retain by law, for an active dispute, or to establish or defend legal claims.

Security

We use administrative and technical measures designed to protect personal information, including encrypted network connections, access controls, password hashing, restricted administrative access, audit records and secure token storage. No electronic service can guarantee absolute security, but we review our safeguards as the service develops.

Your privacy rights and choices

Subject to applicable law, including the Nigeria Data Protection Act 2023, you may ask to be informed about or access your personal information, correct inaccurate information, object to or restrict certain processing, request portability, withdraw consent where processing relies on consent, or request deletion of eligible information. You may also complain to the Nigeria Data Protection Commission.

To make a privacy or account-deletion request, contact us using the details below. We may need to verify that the request relates to you before acting on it.

Children’s privacy

Korey Foods is intended for adults who can enter into an order and payment arrangement. We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us so we can review and take appropriate action.

Changes to this policy

We may update this policy when our services, providers or legal obligations change. The updated version will be posted on this page with a revised effective date. We will provide additional notice where a material change requires it.

Contact us