What we keep, and why
Mealz+ cooks and delivers weekly meals in Nairobi. To get your food to your plate we need a few details about you. This page says what they are, what we do with them, and how to ask us to change or delete them.
Who is responsible
- Data controller
- Mealz+ (Mealz Chefs), Nairobi, Kenya
- Contact
- 0724 919 530 · WhatsApp
- Regulator
- Office of the Data Protection Commissioner, Kenya (odpc.go.ke)
What we collect
- Phone number — to confirm your order and payment, and to call the rider through if needed.
- Delivery location — the address or map pin you choose, with any gate or floor notes you add.
- Your order — the dishes, quantities, delivery day and the M-Pesa confirmation code you send us.
- Ratings and notes — only if you choose to rate a delivery.
We do not collect your M-Pesa PIN, your ID number, or payment card details. We do not use advertising trackers or analytics cookies. Your browser keeps a local copy of your plate and saved locations on your own device so the page remembers you; that copy never leaves your phone unless you place an order.
Why we use it
- To prepare, confirm and deliver the order you placed (performance of a contract).
- To match your M-Pesa payment to your order.
- To contact you about that order if something changes, for example a delivery delay.
We do not send marketing messages unless you ask for them, and we never sell or rent your details.
Who else sees it
- Netlify hosts our order database. Only kitchen staff can view orders.
- Cloudflare serves this website.
- WhatsApp (Meta) and your mobile network carry the messages and calls you exchange with us.
- OpenStreetMap / Photon receive the place name you type when searching for a delivery address, so they can suggest matches. No order details are sent to them.
- Safaricom M-Pesa processes your payment under its own terms.
How long we keep it
Order records are kept for 12 months after delivery for accounting and to resolve disputes, then deleted or anonymised. Saved locations on your own device stay until you remove them in the shop or clear your browser data.
Your rights
You can ask us at any time to see the data we hold about you, correct it, delete it, or stop using it. Call or WhatsApp 0724 919 530 and we will respond within 14 days. If you are unhappy with our answer you may complain to the Office of the Data Protection Commissioner.
Security
The site is served over HTTPS only. Orders are stored in a database that only kitchen staff can read. We review access when staff join or leave.
Changes
If we change how we use your data we will update this page and the date at the top.