Privacy Policy

This policy explains what Beasty Grills collects when you order from this website, why we collect it, and what we do with it. It is written to reflect how the site actually works.

Who we are

Beasty Grills is a restaurant based in Enugu, Nigeria. For any question about your data, contact us using the details in the footer of this site.

What we collect

• Order details: the items you order, sizes, dipping sauces and the total.
• Delivery information: the address or map location you provide and your phone number, so we can deliver and contact you about the order.
• Payment evidence: if you pay by bank transfer, the transaction reference, the surname on the account, the last three digits of the account number, and any receipt image you upload.
• Account details: if you create an account, your name and email address. If you sign in with Google, we receive your name and email from Google.

You can order as a guest without creating an account. We do not ask for your full bank account number, card details, or any government ID.

What we do with it

• Prepare and deliver your order.
• Confirm that a payment was received and matches your order.
• Contact you if there is a problem with the order.
• Keep records of sales as required for tax and accounting.
• Understand which items sell well, using totals rather than individual customer profiles.

We do not sell your personal information, and we do not share it for advertising.

How long we keep it

Receipt files are scheduled for deletion after 10 days. Processing can take longer if cleanup is delayed. The transaction details attached to the order (reference, surname, last three digits, amount and date) are kept for longer, because we need them for accounting and to resolve any dispute about whether a payment was made.

Order and account records are retained while your account is active and for as long as tax and accounting rules require afterwards.

Who else is involved

The site runs on Google Firebase, which stores our data and handles sign-in. Your data may be stored on Google servers outside Nigeria. We rely on Google’s security and data-protection commitments for that processing.

If you sign in with Google, Google handles that authentication. We never see your Google password.

Your rights

Under the Nigeria Data Protection Act, you can ask us to show you the personal data we hold about you, correct it if it is wrong, or delete it. Contact us using the details in the footer and we will respond.

Note that we may need to keep certain order and payment records even after an account is deleted, where the law requires it.

Security

Access to customer data is restricted to staff who need it. Our database rules prevent one customer from reading another customer’s orders. No system is perfectly secure, and we will tell affected customers if a breach puts their information at risk.

Children

This site is not intended for children under 13, and we do not knowingly collect their information.

Changes

If we change this policy we will update the date at the top of this page.