Privacy Policy

Last updated 24 August 2026

This policy says what Foodexl knows about you, why we need it, who can see it, and what you can ask us to do with it. Plain words, no small print.

1 What we collect

When you sign up. Your name, mobile number, email, and the branch you belong to. You may also add a date of birth, gender, blood group, religion, marital status, education, nationality, residence card / NID number and a photo. Only the name, mobile, email and branch are needed — the rest is yours to give or skip.

When you use the service. The meals you book and for which dates, your delivery addresses and pickup points, wallet top-ups and balances, invoices and payments, coupons you apply, refunds you request, reviews you write, and messages or files you send in chat.

Automatically. Sign-in times, the IP address you connected from, and a record of actions taken in the system. If you use the mobile app and allow notifications, a device token so we can reach that device.

We do not collect your card or bank details on this site, and we never ask for your password by email, SMS or phone.

2 Why we need it

• To cook and deliver. Your booking tells the kitchen what to prepare and your rider where to go.
• To bill you correctly. Wallet balances, invoices, coupons and refunds all follow your account.
• To keep you informed. Booking confirmations, delivery updates and account notices.
• To keep accounts safe. Sign-in records help us spot someone else using your account.
• To improve the food. Ratings and booking numbers show which meals work and which do not.

We never sell your information, and we do not use it for advertising.

3 Who can see it

• Your branch. Its managers and kitchen staff see your name, contact details and your bookings — they are cooking your meal.
• Your rider. On a delivery day, the rider sees your name, phone number and address for that delivery only.
• Administrators. A small number of system administrators can see accounts in order to support them.
• Other customers. Nothing. Reviews show the meal and the rating, not your contact details.

4 Services we rely on

A few outside services handle parts of the job for us. They see only what that job needs:

• Email delivery — to send you booking and account emails.
• SMS gateway — to send text alerts, where your branch has them switched on.
• Push notifications — to reach the mobile app on your device.
• Live updates — to make chat and notifications appear without refreshing the page.

We may also disclose information if the law requires it, or to protect someone's safety.

5 How long we keep it

• While your account is open — your profile and saved addresses.
• Bookings, invoices and payments — kept as long as accounting and tax rules require, even after an account closes.
• Sign-in and activity records — kept for a limited period, then cleared.
• Chat messages and files — kept while the conversation is useful for support.

When you close your account we remove your profile and stop contacting you. Records we must keep for accounting are stripped back to what the law needs.

6 How we protect it

• The site runs over HTTPS, so traffic between you and us is encrypted.
• Passwords are stored as one-way hashes — nobody here can read yours.
• Staff see only what their role allows; a rider cannot browse customer lists.
• Sign-ins are logged, sessions expire, and repeated password-reset attempts are rate limited.
• The database is backed up regularly so your bookings survive a hardware failure.

No system is perfect. If a breach ever affects your data, we will tell you and say what to do.

7 Your choices

• See it. Your profile, bookings, invoices and wallet history are in your account.
• Correct it. Edit your profile any time; ask your branch to fix anything you cannot.
• Get a copy. Ask us and we will send you your data.
• Delete it. Ask us to close your account, subject to records we must keep.
• Turn off messages. Email and SMS notifications can be switched off in your profile. Notices about a booking you placed still reach you.

8 Cookies

We use one cookie to keep you signed in and to protect forms from misuse. It is not used to track you across other websites, and there is no advertising cookie here. Clearing it simply signs you out.

9 Children

Foodexl is meant for adults and for students booking through their own institution. If a child's account is created, a parent, guardian or the institution is responsible for it, and may ask us to close it at any time.

10 Changes to this policy

If we change something that matters, we will update this page and the date at the top. Continuing to use Foodexl after that means the new policy applies.

11 Contact us

Questions about your data — or want a copy or a deletion — write to us or through the contact page, and tell your branch as well if it concerns your meals.