Privacy Policy — MenuMaestro

1. Who We Are

MenuMaestro is a restaurant technology platform operated by CTech Media Limited, a company registered in Nigeria. When this policy refers to “MenuMaestro”, “we”, “us”, or “our”, it means CTech Media Limited.

We are committed to protecting your personal data in accordance with the Nigeria Data Protection Regulation (NDPR) 2019 and the Nigeria Data Protection Act (NDPA) 2023.

2. Data We Collect

We collect the following categories of information:

Account data: Name, email address, phone number, and password when you register.
Restaurant data: Restaurant name, type, location, logo, menu items, and hours.
Usage data: Pages visited, features used, QR code scan events, and time spent on the platform.
Payment data: Billing information processed securely through Paystack. We do not store card numbers.
Communications: Emails and messages you send to our support team.

3. How We Use Your Data

To provide, operate, and improve the MenuMaestro platform
To process payments and manage your subscription
To send transactional emails (account verification, receipts, support responses)
To send product updates and newsletters (you may unsubscribe at any time)
To analyse platform usage and improve our features
To comply with our legal obligations

4. Data Sharing

We do not sell your personal data. We share it only with:

Service providers: Cloud hosting (Cloudflare), payment processing (Paystack), email delivery (transactional only), and analytics tools — all under strict data processing agreements.
Legal authorities: When required by applicable law, court order, or to protect rights and safety.

5. Data Retention

We retain your account data for as long as your account is active. If you cancel, we retain data for 90 days to allow reactivation, then delete it. Certain data (financial records) may be retained for up to 7 years as required by Nigerian law.

6. Your Rights

Under the NDPR and NDPA, you have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data (subject to legal obligations)
Object to certain processing activities
Request a portable copy of your data

To exercise these rights, email privacy@menumaestro.ng. We will respond within 30 days.

7. Security

We use industry-standard security measures including encryption in transit (TLS), encrypted storage, access controls, and regular security audits. No system is 100% secure, but we take every reasonable measure to protect your data.

8. Cookies

Our platform uses essential cookies for session management and authentication. We do not use third-party advertising or tracking cookies. You can disable cookies in your browser settings, though this may affect platform functionality.

9. Changes to This Policy

We may update this policy from time to time. We will notify registered users by email of material changes at least 14 days before they take effect. Continued use of MenuMaestro after changes take effect constitutes acceptance.

10. Contact

For privacy-related questions or to exercise your rights, contact our Data Protection Officer at privacy@menumaestro.ng.