LEGAL

Privacy Policy

How NilisheGrub collects, uses, and protects your information when you use our website, app, and services.

Last updated: 9 September 2026

1. Who we are

NilisheGrub (“we”, “us”, “our”) operates a food ordering and delivery platform in Kenya that connects customers, restaurants, and riders. This Privacy Policy explains how we handle personal data when you visit nilishegrub.co.ke, use the NilisheGrub app or web order flow, partner as a restaurant, or ride with us.

By using our services, you agree to this Policy. If you do not agree, please do not use the platform.

2. Information we collect

We may collect:

  • Account details — name, email, phone number, and password or sign-in credentials.
  • Order & delivery data — order history, delivery addresses, location pins, special instructions, and contact preferences.
  • Location data — approximate or precise location when you choose to share it (for example, to estimate delivery fees or find nearby restaurants).
  • Payment-related data — payment method choice and transaction status. Card and M-Pesa processing is handled by our payment partners; we do not store full card numbers on our servers.
  • Device & usage data — IP address, browser type, device identifiers, pages viewed, and app interactions, including cookies or similar technologies on the website.
  • Partner & rider data — business details, menu information, KYC or onboarding documents where required, and performance or payout information for riders and restaurants.
  • Support messages — emails, calls, WhatsApp chats, and form submissions you send to our support team.

3. How we use information

We use personal data to:

  • Create and manage accounts, carts, orders, and deliveries.
  • Process payments, refunds, and payouts.
  • Calculate delivery fees, ETAs, and show relevant restaurants or menus.
  • Communicate about orders, account updates, security alerts, and (where allowed) promotions.
  • Improve our website, app, customer support, and fraud prevention.
  • Comply with Kenyan law and respond to lawful requests.

4. Sharing & disclosure

We may share information with:

  • Restaurants — so they can prepare and fulfil your order.
  • Riders — delivery address, contact details needed to complete the drop-off, and order references.
  • Service providers — hosting, analytics, customer support, SMS/email, mapping, and payment processors (such as Paystack), under appropriate safeguards.
  • Authorities — when required by law or to protect rights, safety, and security.

We do not sell your personal information.

5. Payments

Online payments may be processed by third-party providers. Their privacy notices apply to data they process as independent controllers or processors. NilisheGrub receives confirmation of payment status so we can update your order.

6. Retention & security

We keep personal data only as long as needed for the purposes above, including legal, accounting, and dispute-resolution requirements. We use reasonable technical and organisational measures to protect data, but no online system is completely secure.

7. Your rights

Subject to applicable Kenyan data protection law, you may request access to, correction of, or deletion of your personal data, or object to certain processing. You can update some details in your account profile, or contact us using the details below. You may also withdraw location permission in your device settings.

To request permanent deletion of your NilisheGrub account and associated personal data, use our Delete account page.

8. Children

Our services are not directed at children under 18. If you believe we have collected data from a minor without appropriate consent, please contact us so we can delete it.

9. Changes to this Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Continued use of NilisheGrub after updates means you accept the revised Policy.

10. Contact us

Questions about privacy or this Policy:

Also see our Terms & Conditions.