Privacy policy

1. Who is responsible for your information

Drakon Base Limited (RC 9820838) is responsible for the personal information described in this policy. Choplan is a brand operated by Drakon Base Limited, so references to “Choplan,” “Drakon Base,” “we,” “us” or “our” refer to Drakon Base Limited.

2. Information we may collect

Depending on the service you use, we may collect:

• identity and contact details, such as your name, phone number and email address;
• account, order, restaurant, meal-plan and customer-support information;
• pickup or delivery locations and fulfilment instructions you provide;
• transaction references, payment status and limited billing information;
• device, browser, log and usage information needed to operate and protect the service; and
• communications, enquiries, feedback and records of consent.

3. Payments and card information

Payment transactions for Choplan will be processed by Flutterwave or another payment provider identified at checkout. Payment-card details are entered into the payment provider's secure payment flow. Drakon Base does not intend to store complete card numbers, card security codes or online-banking credentials on its systems.

The payment provider may handle information under its own privacy notice. We may receive a transaction reference, amount, payment method type, status and other information needed to reconcile an order, prevent fraud or issue a refund.

4. Why we use information

We may use information to:

• provide, administer and improve our websites, platforms and services;
• create accounts, process orders and coordinate restaurant, pickup or delivery fulfilment;
• communicate service updates and respond to support requests;
• process and reconcile payments, reversals, cancellations and refunds;
• protect users, vendors and our services from fraud, misuse and security threats; and
• meet legal, accounting, regulatory and record-keeping obligations.

5. When we share information

We may share only the information reasonably needed with participating restaurants, delivery providers, payment processors, cloud and communications providers, professional advisers, regulators or law-enforcement bodies. We do not sell personal information.

6. Retention and security

We retain personal information only for as long as reasonably needed for the purposes described here, including transaction records, dispute handling and legal obligations. We use organisational and technical safeguards appropriate to the information and service, but no online system can be guaranteed completely secure.

7. Your choices and rights

You may ask to access, correct or delete eligible personal information, object to or limit certain processing, or withdraw consent where processing depends on consent. Some records may need to be retained for legal, fraud-prevention, accounting or dispute purposes.

8. Children

Our services are not directed to children. A person who cannot legally enter a contract should use a service only with the involvement of a parent or legal guardian.

9. Changes and contact

We may update this policy as our services develop. The date above identifies the latest version. Privacy questions or requests can be sent to management@drakonbase.group.