Privacy Policy

Nana Delifest (Noura Suits, Ground Floor, Diani Beach Road, Diani, Kenya) operates this food ordering and delivery service. For any privacy question, contact support@nanadelifest.store or call +254 793 700146.

Account details. Your name, email address, phone number and password (stored only as a secure hash by our authentication provider). Staff and riders receive a one-time code by email when signing in.

Delivery details. Your delivery address, landmark description, contact phone number, and — if you choose to share it — the GPS coordinates of your delivery point so riders can find you.

Order details. Items ordered, prices, delivery fees, order status history, and any notes you add.

Payment details. M-Pesa payments are processed by Safaricom. We receive the paying phone number, amount and M-Pesa confirmation code. We never see or store your M-Pesa PIN, and we do not store card numbers.

Rider location. When a rider is on duty in the rider app, we collect their device location continuously so we can dispatch orders and show customers live tracking. Location is only collected while the rider is signed in and marked online, and it stops when they go offline or sign out.

Technical data. Basic log data such as device/browser type and timestamps, used to keep the service secure and working.

• Take, prepare, dispatch and deliver your order
• Show you live order status and rider tracking
• Process M-Pesa payments and issue receipts
• Contact you about your order by phone, SMS or email
• Send sign-in and verification codes
• Prevent fraud, abuse and payment disputes
• Understand sales and delivery performance in aggregate

We do not sell your personal information, and we do not use your data for third-party advertising.

The apps may ask for permission to use your device location (to set your delivery point, and for rider tracking) and to show notifications (order updates for customers, new-job alerts for riders). You can refuse or withdraw these permissions in your device or browser settings at any time; refusing location means you will need to type your delivery address manually.

We share only what is needed, with:

• Our riders and kitchen staff — your name, phone number and delivery point for the order they are handling
• Safaricom (M-Pesa Daraja) — to request and confirm payments
• Google Maps Platform — to display maps, geocode addresses and calculate routes
• Our hosting, database and email providers — to run the service and deliver transactional emails
• Authorities — only where we are legally required to do so

Order, payment and delivery records are kept for our business and tax records. Rider location traces are kept only as long as needed for delivery operations, dispatch review and dispute resolution. Account data is kept while your account is active.

You can ask us to view, correct or delete your account and personal information, or to stop contacting you. Email support@nanadelifest.store from your registered address and we will respond. Some records must be retained where the law requires it (for example payment records).

Access to customer and order data is restricted by role — customers see only their own orders, and staff access is limited to the portal their role allows. Data is transmitted over encrypted connections. Report any security concern to support@nanadelifest.store.

Our service is intended for people aged 18 and over. We do not knowingly collect information from children.

We may update this policy as the service changes. The revision date at the top of this page always reflects the current version.