Privacy Policy

Belefuu is operated by TechVirtuoso Digital Services, a company registered in Nigeria. When this policy says “we”, “us” or “Belefuu”, it means TechVirtuoso Digital Services.

We are the data controller for the personal data described here, and we process it in line with the Nigeria Data Protection Act 2023.

We only collect what the service actually needs to work:

• Account details — your name, email address and phone number.
• Delivery details — the addresses you save and any instructions you write for riders.
• Order history — what you ordered, from where, and when.
• Approximate location — used to show kitchens that can reach you, only when you allow it.
• Device and usage data — pages viewed and errors encountered, so we can fix what breaks.

We do not collect or store your card number, expiry date or CVV. Card payments are handled entirely by our licensed payment partner on their own systems.

Each purpose below has a lawful basis under the NDPA:

• To deliver your order — performance of our contract with you.
• To take payment and prevent fraud — legal obligation and legitimate interest.
• To personalise discovery and recommendations — your consent, withdrawable at any time in Settings.
• To send order updates by SMS or push — performance of our contract.
• To send marketing — your consent only, and every message has an unsubscribe link.

We share the minimum necessary with the people who make an order happen:

• The restaurant — your first name and the items ordered.
• Your rider — your first name, delivery address, instructions and a masked phone number.
• Our payment partner — the amount and a transaction reference.
• Infrastructure providers who host our systems under contract.

We never sell your personal data, and we never share it with advertisers for their own use.

Order and transaction records are kept for seven years to meet Nigerian tax and accounting obligations. Everything else is deleted within 90 days of you closing your account, except where we are required to retain it by law.

Under the NDPA you can ask us to:

• Give you a copy of the data we hold about you.
• Correct anything that is wrong.
• Delete your account and associated data.
• Stop processing your data for marketing or personalisation.
• Port your data to another service in a machine-readable format.

Request any of these from Settings → Privacy and data, or by writing to us. We respond within 30 days and never charge for it.

Data is encrypted in transit and at rest. Access to production systems is restricted, logged and reviewed. Your session is held in a secure, httpOnly cookie that scripts on the page cannot read.

If a breach ever affects your data, we will notify you and the Nigeria Data Protection Commission within 72 hours of becoming aware of it.

We use strictly necessary cookies to keep you signed in and to remember your cart. Analytics cookies are optional and off until you accept them. You can change your choice at any time in Settings.

Belefuu is not intended for anyone under 18. We do not knowingly collect data from children, and we delete any such account as soon as we learn of it.

If we make a material change we will tell you by email or in the app at least 14 days before it takes effect. The date at the top of this page always reflects the current version.