Privacy policy

What we collect

• Account details: your name, phone number and email address. If you sign in with Google, we receive your name, email address and profile picture from Google.
• Delivery details: the addresses you save, the map location you pin, and any delivery notes.
• Orders: what you buy, prices, substitutions you approve or decline, delivery times and order history.
• Payments: payments are handled by Paystack. We receive the payment reference and status; we never see or store your full card details.

How we use it

• To create and secure your account, including sign-in codes sent by text message.
• To price, buy, pack and deliver your order, and to contact you about it.
• To send receipts and order updates by email.
• To handle cancellations, refunds and customer support.
• To keep the service safe and meet our legal and accounting duties.

We do not sell your personal information or use it for third-party advertising.

Who we share it with

Only the service providers we need to run Basiket, each for their part of the job:

• Supabase (secure database and sign-in)
• Paystack (payments)
• Resend (order emails) and our text-message provider (sign-in codes)
• Google (if you choose “Continue with Google”)
• OpenStreetMap (maps and address search when you pin a location)
• Vercel (website hosting)

Our staff and riders see only what they need to fulfil your order, such as your name, phone number and delivery address. We may also share information if the law requires it.

How long we keep it

We keep your account while it is open. Order and payment records are kept for as long as accounting and tax law require, usually six years. Everything else is deleted or anonymised when it is no longer needed.

Your rights

You can view and update your details on your Account page. You can also ask us to give you a copy of your data, correct it, delete your account, or stop using it for a purpose. To do any of this, email hello@basiket.com. If you are not happy with our answer, you can complain to the Nigeria Data Protection Commission.

Security

Your data is sent over encrypted connections and stored with access controls, so customers can only see their own orders and staff only what their role allows.

Changes and contact

If we change this policy we will update the date above, and tell you about important changes. Questions? Email hello@basiket.com.