Privacy Policy
Last updated: January 2026 · NDPR Compliant
1. Who we are
LumeX Fud is a campus food delivery platform operated by Lumex, serving students at Abia State University (ABSU), Nigeria. We are committed to protecting your personal data in accordance with the Nigeria Data Protection Regulation (NDPR) 2019.
2. Data we collect
- Phone number (used for account identification and OTP authentication)
- Name and delivery address (hostel, room number)
- Order history and food preferences
- Payment information (processed securely by Paystack — we never store card details)
- Device information and IP address (for security and fraud prevention)
- Messages sent through the platform
3. How we use your data
- To process and deliver your food orders
- To communicate order status via WhatsApp/SMS
- To improve our service quality and vendor performance
- To prevent fraud and ensure platform security
- To comply with legal obligations
4. Your rights (NDPR)
- Access: Request a copy of your data via Profile → Export my data
- Correction: Update your name, address in your Profile
- Deletion: Delete your account via Profile → Delete account
- Portability: Export your data in machine-readable format
- Objection: Opt out of leaderboard via Profile settings
5. Data retention
Order history is retained for 5 years for legal/tax purposes. Account data is deleted within 30 days of account deletion. Messages tied to disputed orders are retained until dispute resolution is complete.
6. Third parties
We share data only with:
- Paystack — payment processing
- Termii — SMS/WhatsApp notifications
- Supabase — database hosting
- Vercel — application hosting
All third parties are contractually bound to protect your data and may not use it for their own purposes.
7. Contact us
For privacy-related requests or complaints, contact our Data Protection Officer at: privacy@lumexfud.com.ng