Skip to content
We deliver within Lagos, Nigeria only.
Ofumam Kitchen

Legal

Privacy Policy

Last updated: 23 October 2026

In short

  • We collect only what we need to handle your order or message: your name, phone number, delivery area, what you order and anything you write to us.
  • We use it to prepare and deliver your order and to get back to you. We do not sell your data or send you marketing without your permission.
  • We do not use advertising or analytics cookies.
  • You can ask to see, correct or delete your data at any time by emailing [email protected].

1. Who we are

Ofumam Kitchen ("Ofumam Kitchen", "OK", "we", "us") prepares and delivers traditional African local cuisine within Lagos, Nigeria. This policy explains how we handle personal data when you visit ofumamkitchen.com, place an order, send us a message, or contact us on WhatsApp or by email.

We are the data controller for the personal data described here, and we handle it in line with the Nigeria Data Protection Act 2023 and related regulations.

2. What we collect

Information you give us

When you place an order or send a message through our contact form, we collect:

  • Your name and phone number, so we can reach you to confirm your order.
  • Your delivery area within Lagos (for orders).
  • Your order: the dishes, quantities and prices in your cart, and the order total.
  • Anything you write in the message or notes field.

If you contact us on WhatsApp, by phone or by email, we receive the information you share there, such as your phone number, WhatsApp profile name or email address and the content of your messages.

Information collected automatically

  • When you send the contact form, we record your IP address, your browser and device type, and the date and time. We use these to protect the form against spam and abuse.
  • Like most websites, our hosting provider keeps standard server logs (such as IP address, pages requested and time) to keep the website running and secure.
  • Our contact form uses Cloudflare Turnstile, a security check that tells people apart from automated bots. Cloudflare processes technical information from your browser to do this.

We do not use analytics or advertising trackers, and we do not build profiles of visitors.

3. How we use your data

  • To receive, prepare and deliver your order.
  • To contact you by phone or WhatsApp to confirm your order, delivery and payment details, and to answer your questions.
  • To keep records of orders and messages, including for accounting and legal purposes.
  • To protect our website and customers against spam, fraud and misuse.
  • To improve our food, service and website, for example by understanding which dishes are ordered most.

We will only send you marketing messages if you have agreed to receive them, and you can ask us to stop at any time. We never sell your personal data.

We process your personal data on the following grounds:

  • To take steps at your request and to fulfil our agreement with you: handling your order or message.
  • Our legitimate interests: keeping records, securing our website and preventing fraud, in ways that do not override your rights.
  • Legal obligations: keeping records required by law, or responding to lawful requests from authorities.
  • Your consent: where we ask for it, such as for marketing. You can withdraw consent at any time.

5. Who we share it with

We share personal data only where needed, with:

  • Delivery riders who bring your order to you: your name, phone number and delivery details.
  • Our service providers, who process data on our behalf: our website hosting provider, our email provider (order and message notifications are emailed to our business inbox), and Cloudflare (the Turnstile security check on our forms).
  • WhatsApp (Meta), when you choose to chat with us or send your order on WhatsApp. Your use of WhatsApp is also covered by WhatsApp's own privacy policy.
  • Professional advisers and authorities, such as accountants and lawyers, or regulators, courts and law enforcement where the law requires it.

6. Transfers outside Nigeria

Some of our service providers, such as Cloudflare and WhatsApp (Meta), may process data on servers outside Nigeria. Where this happens, we rely on the safeguards permitted under the Nigeria Data Protection Act 2023 to make sure your data remains protected.

7. Cookies and browser storage

Our website does not set advertising or analytics cookies.

  • Your cart is kept in your browser's session storage, on your own device, so it is remembered while you move between pages. It is not sent to us until you submit the contact form, and it is cleared when you close the browser tab.
  • Cloudflare Turnstile may use technical data or storage that is strictly necessary to run the security check on our forms.

8. How long we keep it

We keep order and message records for as long as we need them to fulfil your order, deal with any questions or complaints, and meet our legal, tax and accounting obligations. After that, we delete them or make them anonymous. Technical and security information (such as IP addresses on form submissions and server logs) is kept for a shorter period, unless it is needed to investigate misuse.

9. Keeping it safe

We use reasonable technical and organisational measures to protect your personal data, including encrypted connections (HTTPS), restricted access to our order records, and keeping our systems' configuration and data files away from public access. No method of sending or storing data is completely secure, but we work to protect your information and will act promptly if a problem arises, including notifying you and the regulator where the law requires.

10. Your rights

Under the Nigeria Data Protection Act 2023, you have the right to:

  • be informed about how your personal data is used (this policy);
  • access the personal data we hold about you and get a copy of it;
  • have inaccurate or incomplete data corrected;
  • have your data deleted where there is no good reason for us to keep it;
  • restrict or object to how we use your data;
  • receive your data in a commonly used format and have it sent to another organisation (data portability);
  • withdraw your consent at any time, where we rely on consent.

To use any of these rights, email [email protected]. We may need to confirm your identity first, for example by checking the phone number you ordered with. We will respond within the time required by law.

If you are not happy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Nigeria Data Protection Commission (NDPC).

11. Children

Our website and ordering service are intended for adults. We do not knowingly collect personal data from children under 18. If you believe a child has sent us their personal data, please contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time, for example if we change how we take orders. The "Last updated" date at the top shows when it last changed. Please check this page from time to time.

13. Contact us

For any question about this policy or your personal data, contact Ofumam Kitchen at [email protected] or through our contact page.

See also our Terms and Conditions.