Privacy Policy - Munchies and Shakes

1. Who We Are

Munchies & Shakes is a café and restaurant based in Calabar, Cross River State, Nigeria. We operate this website to allow customers to browse our menu, place food orders, make table reservations, and get in touch with us.

By using our website or services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We only collect information you provide directly to us. This includes:

📦

Food Orders

When you place an order, we collect your full name, phone number, email address (optional for cash orders), delivery address (Calabar, Cross River State only), order details, and payment method.

🗓️

Table Reservations

When you make a reservation, we collect your name, phone number, email address, preferred date, time, number of guests, occasion, and any special requests.

💬

Contact Messages

When you send us a message via the contact form, we collect your name, email address, phone number, subject, and message content.

📝

Job Applications

When you apply for a position, we collect your name, phone number, email address, preferred role, experience level, personal statement, and optionally a resume file.

We do not collect payment card details directly. Online payments are processed securely by Paystack (see Section 5).

3. How We Use Your Information

To process and fulfil your food orders and notify you of their status
To confirm and manage your table reservation
To respond to your contact messages and enquiries
To review and follow up on job applications
To improve our menu, service, and customer experience
To contact you if there is an issue with your order or booking

We do not use your information for unsolicited marketing or sell it to any third party.

4. How We Store Your Data

Your information is stored in two places:

Your Browser (localStorage)

Order history, reservation details, and cart data are saved locally in your browser so you can track your order and booking status. This data stays on your device and is not shared unless you explicitly submit a form.

Google Sheets (Cloud)

When you submit an order, reservation, message, or application, that data is sent securely to a private Google Spreadsheet managed by our team via Google Apps Script. Access is restricted to authorised Munchies & Shakes staff only.

We do not use tracking cookies, advertising pixels, or analytics tools on this website.

5. Third-Party Services

We use the following third-party services to operate our website:

Paystack

Processes online payments securely. When you pay online, you are redirected to Paystack's secure payment page. We receive only a payment reference — your card details are never shared with us. Paystack's privacy policy applies to payment data.

Google (Apps Script & Sheets)

We use Google Apps Script to save form submissions to a private Google Sheet. Data sent is limited to what you provide in the relevant form. Google's privacy policy applies to data processed through their infrastructure.

Google Fonts

We load fonts from Google Fonts for visual styling. This involves your browser making a request to Google's servers. No personal data from our forms is shared with Google Fonts.

6. How Long We Keep Your Data

Order records — retained for up to 12 months for fulfilment, customer support, and sales reporting purposes.
Reservation records — retained for up to 6 months after the reservation date.
Contact messages — retained for up to 3 months or until the matter is resolved.
Job applications — retained for up to 6 months. Unsuccessful applications are then securely deleted.
Browser localStorage — stored on your device indefinitely until you clear your browser data.

7. Your Rights (NDPR)

Under the Nigeria Data Protection Regulation (NDPR), you have the right to:

Know what personal data we hold about you
Request a copy of your personal data
Request correction of inaccurate data
Request deletion of your personal data (subject to legal or operational requirements)
Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us using the details in Section 8 below. We will respond within 14 business days.

8. Children's Privacy

Our website and services are not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has submitted personal data to us, please contact us and we will promptly delete it.

9. Contact Us About Privacy

If you have any questions about this privacy policy, wish to exercise your rights, or have a privacy concern, please contact us:

📍 Munchies & Shakes, Calabar, Cross River State, Nigeria

📞 +234 800 000 0000

✉️ privacy@munchiesandshakes.com

10. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically.

Continued use of our website after changes are posted constitutes your acceptance of the updated policy.