Who we are
Bolzgrillz Restaurant Ilorin runs this website at bolzgrillz.com. We decide how and why your personal data is used, so under the Nigeria Data Protection Act 2023 (NDPA) we are the data controller.
Our address is Shop 34, Palms Mall (Shoprite), Ilorin, Kwara.
For anything about your data, contact [email protected] or 09017047156.
Who hosts this website
This website and our ordering and booking system are provided and hosted by IkokoHub (Ikoko Hub). IkokoHub processes personal data only on our behalf and on our instructions, as our data processor. It does not use your data for its own marketing. IkokoHub's own privacy policy is at https://ikokohub.com/privacy.
What we collect and why
We only ask for what we need for the thing you ask us to do. Depending on what you use on this website:
- When you call, WhatsApp or email us: your name, number or email address and what you tell us, so we can answer you.
- WhatsApp orders: the items you choose, pick-up or delivery, and the name, phone number, address and note you type. This website writes the order into a WhatsApp message that you send from your own WhatsApp; the website itself does not store a WhatsApp order.
- Delivery and pick-up orders: your name, phone number, delivery area, address, landmark, pick-up time and note, so we can prepare the order and get it to you. A 4-digit delivery PIN is created for each delivery and shown only on your own tracking page.
- Table bookings: your name, phone number, party size, date and time and occasion (optional), and a deposit payment where one is asked.
- WhatsApp greetings and offers (only if you tick the box): your name, WhatsApp number, the date and place you agreed, and your birthday day and month if you give them.
- Loyalty points and coupons: your points balance and history and the coupons you use, linked to your phone number.
- Ratings: the stars and comment you leave after an order.
- Data requests: your name, phone number or email address and what you ask us to do, so we can act on it and keep a record that we did.
- Technical data: your IP address, browser type and the time of each request, kept briefly by our hosting to keep the website secure and working.
We do not ask for sensitive data such as health, religion or ethnicity. If you tell us about a food allergy, we use it only to prepare your food safely.
Our legal basis (NDPA section 25)
We use your data only where the law allows it:
- Contract: to take, prepare, deliver and get paid for your orders, bookings and events, and to answer you.
- Consent: for greetings, offers and other marketing messages, and for any optional details you choose to give. You can withdraw consent at any time.
- Legal obligation: to keep sales, payment and tax records and to answer lawful requests from the authorities.
- Legitimate interest: to keep the website and payments secure, stop fake orders and fake payment alerts, and improve our service. You can object to this (see "Your rights").
Marketing messages
We send greetings and offers on WhatsApp only if you agree, for example by ticking the box on an order, booking or quote form (it is never ticked for you) or by sending us JOIN. You get at most one greeting or offer a day.
Reply STOP (or UNSUBSCRIBE, CANCEL, END or QUIT), or tap "Stop messages", and we stop at once. After STOP we also stop sending you order and booking updates on WhatsApp.
Data sent outside Nigeria
Some of these providers (for example Meta, Cloudflare, Google and the systems behind payment companies) may store or process data outside Nigeria. Where that happens we rely on the grounds in sections 41 to 43 of the NDPA, such as adequate protection in the receiving country or contract terms, or the transfer being needed for the service you asked for.
How long we keep it
- Your customer details (name, phone number, email, address, birthday): while you keep dealing with us and for up to 24 months after your last order, booking or message, unless you ask us to delete them sooner.
- Sales, payment, invoice and refund records: six years, because Nigerian tax law requires us to keep them. If you ask us to delete your data, we remove your name and contact details from these records instead of deleting the records.
- Your marketing consent or STOP: as long as needed to prove we respected your choice.
- Data requests: as long as needed to show that we answered them.
- Technical logs: kept for a short time for security.
How we protect it
This website uses HTTPS. Only staff who need your details can see them, each with their own login and permissions. Card payments happen on the payment company's secure page. Tracking, booking and payment links are signed so they cannot be guessed, and our forms are protected against bots. If a breach puts your rights at risk, we will tell the Nigeria Data Protection Commission within 72 hours and tell you without delay, as section 40 of the NDPA requires.
Your rights
Under sections 34 to 38 of the NDPA you can ask us, free of charge, to:
- tell you what data we hold about you and give you a copy;
- correct data that is wrong or incomplete;
- delete your data, or remove your name and contact details from records we must keep;
- stop using your data for a while, for example while we check a complaint;
- withdraw your consent at any time (this does not undo what we did before);
- stop using your data for marketing, or object to other use based on our legitimate interest;
- give you your data in a common format that you can take elsewhere.
We do not make decisions about you by automated means alone.
To use any of these rights, use our "Delete my data" page at https://bolzgrillz.com/delete-my-data, or contact [email protected] or 09017047156. We may ask you to confirm it is you, for example by messaging us from the same phone number. We reply within 30 days.
Complaints
If you are not happy with how we handled your data, please tell us first so we can fix it. You also have the right to complain to the Nigeria Data Protection Commission (NDPC): https://ndpc.gov.ng
Children
This website is not meant for children. If you are under 18, please ask a parent or guardian to order or book for you; we need their consent to use a child's personal data (NDPA section 31). If we learn we have a child's data without that consent, we delete it.
Changes to this page
We may update this page when our services or the law change. The date at the top shows when it last changed. The version on this website is the one that applies.
Contact us
- Phone: 09017047156
- WhatsApp: +2349017047156
- Email: [email protected]
- Address: Shop 34, Palms Mall (Shoprite), Ilorin, Kwara
- Website: https://bolzgrillz.com