First Order policies
Privacy Notice
Last updated: 7 November 2026
This notice explains how First Order handles personal information when customers, restaurant partners, riders, and visitors use our website and services. We aim to collect only what is relevant to the service and to explain how it is used.
Information we collect
Depending on how you use First Order, this may include your name, email address, phone number, password hash, saved and delivery addresses, optional GPS coordinates, order and request details, payment status and transaction references, support correspondence, and account or security events. We do not store full payment card numbers in the First Order application.
How we use it
We use information to create and secure accounts; display restaurants and service coverage; calculate fees; receive, coordinate and fulfil food orders, package deliveries and errands; confirm handovers; process payments through Paystack; answer support requests; prevent abuse and fraud; improve reliability; and meet legal, accounting and dispute-resolution obligations.
Lawful basis and choice
We process information where it is needed to provide a service you request, to meet legal obligations, to protect the service and users through legitimate interests, or where you have given consent for a specific optional purpose. You can decline browser location permission; some location-based coverage and fee features may then need an address you enter yourself. You can choose not to provide optional profile details, though some services may require accurate contact and delivery information.
Who may receive information
We share only information needed for the relevant task: restaurant partners receive order details needed to prepare food; the assigned rider receives pickup, delivery, recipient and contact details needed to fulfil a job; Paystack processes checkout; and service providers that host, store, secure or operate the platform may process data on our behalf. Current infrastructure may involve Vercel, Neon, Pusher, Cloudinary and Google sign-in. Their role and applicable safeguards should be documented in our vendor arrangements.
International processing
Some infrastructure providers may process or store information outside Nigeria. Where this applies, First Order should use a lawful transfer mechanism and appropriate contractual and security safeguards under applicable data protection requirements.
How long we keep it
We keep information for as long as needed to operate your account and requests, provide support, maintain required business and payment records, prevent fraud, and resolve disputes. Some records may need to be retained for a legally required period. We then delete or de-identify them under a documented retention schedule.
Closing your account
Using Delete account disables sign-in and marks the account as closed. The profile and linked order or delivery history remain visible to authorised First Order administrators, and the email address and phone number remain reserved to prevent a duplicate account. Account closure is not the same as erasing every record. To request erasure or restriction of retained information, contact our privacy team; we will assess the request against applicable legal and record-keeping requirements.
Your privacy rights
Subject to applicable law, you may ask to access or correct personal information, request deletion or restriction, object to certain processing, withdraw consent where processing relies on consent, or request a portable copy. We may need to verify your identity and may retain specific records where the law requires it. You can also raise a concern with the Nigeria Data Protection Commission.
Nigeria Data Protection CommissionSecurity
We use access controls and technical safeguards designed to protect account and transaction information. No online service can guarantee absolute security. Keep your password private, do not share one-time passwords, and only provide a delivery PIN at the completed handover.
Children
First Order is intended for people able to enter into the relevant service arrangements under applicable law. Do not create an account or submit another person’s personal information without authority to do so.
Updates and contact
We may update this notice as the service or applicable requirements change. We will indicate the latest revision date and provide additional notice for material changes where required. For privacy questions or a data rights request, contact the privacy team at the address below.
Contact about privacy
Email support@firstorder.ng. Include enough detail for us to understand your request, but do not include your password, full card details, or one-time password.
This notice is written for First Order’s current product flows. Before broad public launch, the operator should confirm the registered entity and address, retention schedule, processor contracts, data transfer safeguards, and applicable NDPA compliance with Nigerian privacy counsel.
Read our Cookie Policy