Privacy Policy

Chek Chek ("we", "our", "us") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform.

This policy complies with the Ghana Data Protection Act, 2012 (Act 843), the Ghana Consumer Protection Act, 2023 (Act 1061), and aligns with international best practices including GDPR where applicable. Chek Chek is registered as a Data Controller with the Data Protection Commission of Ghana (DPC).

By using the Platform, you consent to the practices described in this policy. You may withdraw consent at any time by contacting us, subject to legal and contractual obligations.

Information you provide directly:

• Full name and email address (account registration)
• Phone number (for delivery coordination, OTP verification, and MoMo payment matching)
• Delivery address and location data
• MoMo transaction IDs (for payment confirmation between customers, vendors, and riders — recorded in PaymentRecords)
• Order history, preferences, and dietary/allergy information
• Reviews and ratings you submit
• Family group information (member phone numbers, shared addresses, dietary notes) — for Family Ordering feature
• Corporate account information (company name, department, cost centre, employee monthly limits) — for Office Ordering feature
• Catering request details (event type, guest count, venue address, budget, food preferences) — for Smart Party Mode
• Event vendor registration details (business name, MoMo number, menu, zone assignments) — for Events & Festivals Mode
• DaaS business account details (business name, delivery address, subscription plan) — for Delivery-as-a-Service
• Chop Money remittance data (sender/beneficiary phone numbers, transaction amounts, FX rates) — for Chop Money feature
• Loyalty points balance, Food Passport stamps, and Spin Wheel voucher history — for loyalty and rewards features

Information collected automatically:

• Device type, browser, and operating system
• IP address and approximate location
• Pages visited, time spent, and interactions within the Platform
• Cookies and similar tracking technologies

We use your personal data to:

• Process and fulfill your food orders.
• Communicate order updates, delivery status, and support messages.
• Manage your loyalty points and promotional offers.
• Improve our Platform, features, and user experience through analytics.
• Detect and prevent fraud, abuse, or security incidents.
• Comply with legal obligations under Ghanaian law.
• Send marketing communications (only with your explicit consent, which you can withdraw at any time).

We do not sell or rent your personal data. We may share it only in the following circumstances:

• With Vendors: Your name, delivery address, and order details are shared with the restaurant fulfilling your order.
• With Delivery Riders: Your name, phone number, and delivery address are shared with the rider assigned to your order.
• With Payment Processors: Payment details are handled by Stripe and MTN/Vodafone/AirtelTigo Mobile Money. We comply with their respective data policies.
• With Service Providers: Third-party tools (e.g., SMS services, analytics) used strictly for Platform operations under confidentiality agreements.
• Legal Requirements: When required by law, court order, or governmental authority in Ghana.

We retain your personal data for as long as your account is active or as needed to provide our services. Specifically:

• Order data: retained for 3 years for accounting and legal compliance purposes.
• Payment records (PaymentRecords): retained for 7 years for financial audit, dispute resolution, and corporate statement reconciliation.
• Family group data: retained while the family group is active. Member phone numbers are removed when the group is archived.
• Corporate account data: retained for 7 years for financial reporting and regulatory compliance.
• Catering request and milestone data: retained for 7 years for payment audit and dispute resolution.
• Chop Money transaction data: retained for 7 years in accordance with Ghanaian financial record-keeping requirements.
• Loyalty and rewards data: retained while the account is active. Expired vouchers are purged after 90 days past expiry.
• Account data: retained until you request deletion (subject to legal retention requirements above).

You may request deletion of your account and associated data at any time by contacting us (subject to legal retention requirements).

We use cookies and similar technologies to:

• Keep you logged in and remember your preferences.
• Understand how users interact with the Platform (analytics).
• Improve performance and personalize your experience.

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Platform.

Chek Chek operates as a Progressive Web App (PWA) with offline-lite capabilities. The following explains how your data is handled by the PWA features in compliance with the Ghana Data Protection Act, 2012 (Act 843):

• Service Worker & Caching: The Platform installs a service worker on your device that caches the app shell (layout, navigation, fonts, styles), vendor lists, menus from your favourite and recently ordered vendors, order history, and profile data. This cached data is stored on your device only in browser storage (Cache Storage, IndexedDB, and localStorage). It is not transmitted to our servers or shared with third parties.
• Stale-While-Revalidate: Cached content is shown immediately when you open the app and refreshed silently in the background when a connection is available. This means your browsing data may be briefly out of date, but no personal data beyond what is already on your device is collected.
• Image Cache: Vendor and food images are cached on your device with a size cap (approximately 15 MB). The oldest images are evicted first. Images may be served in compressed formats based on your screen size and connection quality. No personal data is embedded in cached images.
• Offline Saved Orders: When you build a cart offline, the cart contents, vendor ID, item IDs, quantities, and your order notes are stored locally on your device. This data is not transmitted until you reconnect and explicitly confirm the order. Saved orders expire after 12 hours and are automatically deleted from your device. If you clear your browser data, saved orders are removed.
• Data-Saver Mode: When enabled, Data-Saver Mode loads images as low-resolution placeholders, disables animations, and reduces background refresh. No additional personal data is collected to enable this feature. Approximate data usage per session is calculated locally on your device and is not transmitted to our servers.
• Push Notifications: Where supported, the Platform may request permission to send web push notifications for order status updates and queued-order sync results. Push permission is requested only after your first order. Notifications respect your country timezone and quiet hours. Push notification subscription data (a device token) is stored securely and used solely to deliver notifications. You may revoke push permission at any time in your device or browser settings, and the subscription token will be deleted.
• What is Never Stored Locally: Payment screens, MoMo transaction details, payment credentials, live order tracking data, rider GPS location, and ChekBot conversation transcripts are never cached or stored on your device. These always require a live connection.
• Right to Clear Local Data: You may clear all locally cached data at any time by clearing your browser's site data, uninstalling the PWA from your home screen, or using the in-app "clear cache" function where available. Clearing local data does not delete your account or your server-side order history.
• Visit Counting: The Platform stores an anonymous visit count in localStorage to determine when to show the "Add to Home Screen" install prompt. This counter contains no personal data and is reset when you clear browser data.

Under the Ghana Data Protection Act, 2012 (Act 843) and the Consumer Protection Act, 2023 (Act 1061), you have the following rights which cannot be excluded by contract:

• Access – Request a copy of the personal data we hold about you.
• Correction – Request correction of inaccurate or incomplete data.
• Deletion – Request deletion of your personal data (subject to legal retention obligations).
• Objection – Object to specific uses of your data, including direct marketing — we will stop upon request.
• Portability – Request your data in a portable, machine-readable format.
• Withdraw Consent – Withdraw consent to processing at any time where our processing is based on consent, without affecting the lawfulness of prior processing.
• Consumer Redress (Act 1061) – You have the right to fair, transparent, and honest treatment as a consumer. Where we process your data in a manner that adversely affects your consumer rights under Act 1061, you have the right to complain to the Consumer Protection Agency of Ghana.
• Complain to the DPC – You have the right to lodge a complaint with the Data Protection Commission of Ghana (DPC) if you believe your data rights have been violated.

To exercise any of these rights, email us at eightfoldcr8ation@gmail.com. We will respond within 30 days of receiving your request, as required by Act 843. For urgent consumer protection complaints, you may contact the Consumer Protection Agency directly.

We implement appropriate technical and organizational measures to protect your data, including:

• SSL/TLS encryption for all data transmitted to and from the Platform.
• Secure, access-controlled databases hosted on industry-standard cloud infrastructure.
• Regular security reviews and vulnerability assessments.
• Strict internal access controls — only authorised personnel can access personal data.
• Pseudonymisation and data minimisation techniques where applicable.

Despite our efforts, no system is 100% secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the Data Protection Commission of Ghana within 72 hours of becoming aware of the breach, as required by law and international best practice. Where notification to you is required, we will do so without undue delay.

Our Platform is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from minors. If we discover we have collected such data, we will delete it immediately.

Our Platform may contain links to third-party websites or services. We are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.

Certain Platform features may involve automated processing of your data to personalise recommendations, detect fraud, or calculate loyalty tiers. You have the right to object to solely automated decisions that significantly affect you. To exercise this right, contact us at the address below.

We may update this Privacy Policy periodically. We will notify you of significant changes via email or a prominent notice on the Platform at least 14 days before changes take effect. Continued use of the Platform after the effective date of changes constitutes acceptance of the updated policy.

Chek Chek Digital Limited is the Data Controller registered with the Data Protection Commission of Ghana. For privacy-related inquiries, data subject access requests, or complaints:

• 📧 Email: eightfoldcr8ation@gmail.com
• 📞 Phone: 0245772016 / 0205460185
• 📍 Address: Accra, Ghana