1. Who we are
Bake ʼn Chill (“we”, “us”, “our”) is a premium patisserie and arcade based in Abuja, Nigeria. We operate this website and the Bake ʼn Chill mobile applications, and act as the data controller for the personal information described below.
If you have a question about this policy or how your data is handled, contact us at privacy@bakenchill.com.
2. What we collect
We only collect what we need to serve you well:
- Account details — your full name, phone number, email (optional), date of birth, and a securely hashed password.
- Order & payment information — items ordered, delivery or pickup address, order totals, and Paystack payment references. We never store full card numbers on our servers.
- Loyalty & rewards — points earned, wallet balance, referral history, and birthday vouchers.
- Communications — SMS and email engagement, push notification tokens, and customer-service correspondence.
- Device & usage data — IP address, device type, browser fingerprint, and anonymous analytics events used to improve the experience.
3. How we use your information
- To process and deliver your orders.
- To verify your identity via phone OTP and protect your account.
- To credit loyalty points, wallet refunds, and referral rewards.
- To send transactional updates (order confirmations, delivery alerts).
- To send marketing communications — only with your explicit opt-in.
- To comply with Nigerian tax, anti-money-laundering, and consumer- protection law.
4. Who we share with
We share the minimum necessary information with carefully vetted partners:
- Paystack — to process card and bank transfer payments.
- Termii / Africaʼs Talking — to send phone-OTP and SMS order updates.
- Firebase Cloud Messaging — to deliver push notifications.
- Hosting providers — to operate our servers and back up your data securely.
- Regulators — only when legally required.
We never sell your personal information.
5. How long we keep it
We retain your account and order history for as long as your account is active, plus up to seven (7) years afterwards to satisfy Nigerian accounting and tax obligations. You can request deletion at any time — see Section 7.
6. How we protect your data
- All traffic is encrypted in transit using TLS 1.2+.
- Passwords are hashed using bcrypt; we never see your plaintext password.
- Access to production systems is restricted to staff under a need-to-know rule and audited.
- Backups are encrypted at rest and stored in a separate region.
7. Your rights
Under the Nigerian Data Protection Act (NDPA 2023), you can request:
- Access to the personal data we hold on you.
- Correction of inaccurate or out-of-date information.
- Deletion of your account and personal data (subject to legal retention obligations).
- Withdrawal of marketing consent at any time.
- A copy of your data in a portable, machine-readable format.
Send any of the above to privacy@bakenchill.com and weʼll respond within 30 days.
8. Cookies
We use a small number of first-party cookies to keep you signed in and to remember your theme preference. We donʼt use third-party advertising cookies. You can clear them at any time from your browser settings.
9. Changes to this policy
When we make material changes weʼll post a notice in the app and on the website at least 14 days before they take effect. The “Last updated” date at the top of this page tells you when this version went live.
10. Contact
Bake ʼn Chill · 19, 6th Avenue, Gwarinpa, Abuja, Nigeria.
Email: privacy@bakenchill.com
Phone: +234 (0) 901 036 4792