Privacy Policy
This policy explains what personal information Komdeme collects when you use komdeme.com, order food, sign up as a restaurant partner, or work as a delivery rider. It describes how we use that information, who we share it with, and the rights you have over it.
1. Who we are
Komdeme is a Ghana-focused food-delivery marketplace connecting customers, restaurants, and independent couriers. The data controller is the operating entity behind komdeme.com (full company details are in our Terms of Service).
2. What we collect
We only collect information that's necessary to run a food order safely. The amount and type depends on who you are.
If you're a customer
| Data | Why we need it |
|---|---|
| Phone number (mandatory) | Order updates, OTP login, courier contact |
| Name | So vendors and couriers know who to deliver to |
| Email (optional) | Receipts, password reset (if you set one) |
| WhatsApp number (optional) | Alternative order updates |
| Delivery address(es) | For the courier to find you |
| Order history | To show you past orders and to handle disputes |
| Marketing-consent flag | To know whether you've opted in to promotional messages |
We do not store your card or mobile-money credentials. All payment data is processed directly by Paystack — Komdeme only receives a transaction reference and an outcome (paid / failed).
If you're a restaurant (vendor)
- Business name, address, GPS coordinates, opening hours, menu items, photos
- Owner's full name, phone, email, Ghana Card number + front/back images
- Payout method (mobile money / bank) and payout number
- A passwordless or password-based portal account
Vendor accounts are non-transferable: the Ghana Card we verify at signup is permanently bound to the vendor record. Changing the registered phone number requires re-verification of the same Ghana Card.
If you're a rider
- Full name, phone, email, vehicle type and registration number
- Ghana Card number + front/back images, DVLA licence number, licence expiry, licence image
- Payout method (mobile money / bank) and payout number
- Live location (lat/lng) while you're signed into the rider app, used to surface only orders within your delivery zone
3. How we use your data
- Run your order. Match it to a restaurant, dispatch a courier, send SMS updates, settle payment.
- Identify and verify you. Phone OTP at signup, Ghana Card check for vendors and riders, anti-fraud monitoring.
- Support and disputes. If something goes wrong with an order we look at the trail to fix it.
- Improve the service. Aggregated, anonymous metrics on order volumes, delivery times, popular dishes.
- Marketing (only if you opt in). Promotional SMS, email, WhatsApp. You can opt out at any time from your account screen or by replying STOP to an SMS.
4. Who we share data with
| Partner | What they receive |
|---|---|
| Restaurants | Your name, phone, delivery address, order items (so they can prepare and hand over the order) |
| Couriers / Komdeme riders | Your name, phone, drop-off address, order number (for the duration of the delivery only) |
| Paystack | The amount, currency, your email and a Komdeme transaction reference. Paystack handles all card / mobile-money data directly under its own privacy policy. |
| Hubtel | Your phone number + message body for transactional SMS (OTPs, order updates). |
| AhaSend | Your email + message body for transactional email (receipts, password resets). |
| External courier networks (Uber, Bolt, Yango) | If you choose an external courier at checkout, the courier receives your name, phone, pickup and drop-off addresses to fulfil the delivery. They operate under their own privacy terms. |
| Lawful requests | We may share data with law enforcement only when legally compelled to do so. |
We never sell your personal data to anyone.
5. Where data is stored
Komdeme runs on infrastructure hosted by DigitalOcean. Database backups are encrypted at rest. Sensitive fields like API keys, payment secrets and password hashes use AES-256-GCM encryption inside our own database. We will only transfer data outside Ghana if a service provider requires it (e.g. Paystack, which operates regionally).
6. How long we keep data
- Active accounts: for the lifetime of the account.
- Order records: 7 years (Ghana Revenue Authority retention requirement for financial transactions).
- Marketing-consent flags: until you withdraw consent.
- Logs and security audit data: 12 months.
- Closed accounts: personally identifiable fields are pseudonymised after the 7-year financial retention period; the underlying order shells remain for accounting purposes.
7. Your rights
Under the Data Protection Act you can:
- Ask what data we hold about you (right of access)
- Correct anything that's wrong (right of rectification)
- Ask us to delete your data, subject to legal retention requirements
- Withdraw marketing consent at any time
- Lodge a complaint with the Data Protection Commission of Ghana
Email privacy@komdeme.com to exercise any of these rights. We aim to respond within 30 days.
8. Children
Komdeme is not intended for use by anyone under 18. If you believe a minor has signed up, please contact us and we will remove the account.
9. Cookies and similar technologies
komdeme.com uses local browser storage (localStorage, sessionStorage) to remember your session, your delivery address and your cart. We do not use third-party advertising cookies. We may use anonymous analytics in future; if so, this policy will be updated.
10. Changes to this policy
We may update this policy from time to time. Material changes will be announced on komdeme.com and to active users by email. The "Last updated" date at the top of this page shows when it last changed.
11. Contact
Privacy questions: privacy@komdeme.com
General support: hello@komdeme.com