Privacy Policy

Innovative Menu Solutions Limited (“7Krave”, “we”), of Lilford Avenue, Kingston 10, St. Andrew, Jamaica, is the data controller for personal information on www.7krave.com, the 7Krave mobile application, and related services (the Service). The Service includes food delivery, groceries on 7Kravemart, Marketplace, and Courier.

This notice explains what we collect, why, who we share it with, how long we keep it, and how you can exercise your rights under the Data Protection Act, 2020. Using the Service means you have been given this notice. Optional uses (device location, profile photo, marketing, saving a card) need your agreement, which you can withdraw as set out below.

1. Information we collect

Depending on how you use 7Krave, we may collect:

• Account: name, email, password or social-login identifiers (Google, Facebook, or Apple), date of birth if you give it, and profile photo if you upload one.
• Contact: telephone number when you add one — typically at checkout, on a delivery address, in your profile, or for courier. We do not collect a telephone number at registration. We may also store alternate numbers on an address. Verifying a new number may send a one-time SMS through Google Firebase Authentication. That is not how you sign in to 7Krave.
• Orders: cart contents, restaurant / store / seller, delivery or pickup address, landmarks, scheduled time, payment method, Wallet amounts, coupons, and tips.
• Location: the delivery pin you set, and — when you allow it — device location used to show nearby restaurants, track a rider, or complete a courier trip.
• Device and notifications: app version, device type, push tokens (including voice-call tokens on supported phones), and approximate network information needed to deliver the Service. Order, marketing, and voice-call pushes on the phone are delivered through Google Firebase Cloud Messaging. Account sign-in is through 7Krave (email or Google / Facebook / Apple), not Firebase.
• Website: pages you visit on 7krave.com and cookies or similar tools needed for the site to work. Login buttons may also set cookies from Google, Facebook, or Apple. Those companies have their own privacy policies.
• Support: Live Chat messages, emails, tickets, and images you upload. Chat images are kept for the inquiry and are not automatically deleted if you close the account. Ask support if you want a specific image removed.
• Calls: we may place or receive voice calls about an order or support issue, including over internet voice. Calls may be recorded for quality, training, and dispute handling. Where the law requires a notice at the start of a recorded call, we will give one.
• Payments: see below. We never ask you to send a full card number over chat or email.

Uploading a profile photo is optional. Photos may be shown to delivery partners or support to help complete an order. We do not sell personal images.

2. Cards, Lynk, and the Wallet

Card payments use 3-D Secure 2.0 where required and are processed by First Atlantic Commerce (FAC) / PowerTranz over SSL. Lynk payments are processed by Lynk. We do not store the full card number, CVV, or the full expiry in a form we can charge by hand.

When you save a card, FAC stores a token. We store the token reference, card brand, first six and last four digits, and billing details you entered. That token is used to charge amounts you owe — including a current order, a Wallet remainder, a negative Wallet balance, and other amounts properly due — as described in the Terms. Saving a card is optional. You can remove a saved card in the app. We may keep the token while an amount is still due.

Wallet balances, GiftMe and gift-card redemptions, and Wallet transaction history are stored so we can apply credit, refund you, and collect amounts that are due.

3. Why we use information (lawful grounds)

We use personal information to:

• Create and secure your account, and prevent fraud or unpaid use of the Service.
• Take, prepare, dispatch, and deliver orders; call or message you about a live order.
• Process payments and Wallet movements, including later collection of amounts already due.
• Identify related accounts while an amount is due, using contact details (such as a telephone number) and delivery details on the account or order, and to limit use of the Service until it is paid. We do not publish the internal checks we use.
• Provide Live Chat, email, and phone support.
• Send transactional email, SMS, and push (order status, receipts). Marketing messages are optional. You can turn them off in the app or by emailing us. Transactional messages about an order or an amount due will still be sent.
• Operate coupons, rewards, and shared carts.
• Improve the Service and produce aggregated analysis that does not identify you.

We process that information because:

• it is needed to provide the Service you asked for (account, order, delivery, payment, support);
• the law requires it (tax, accounting, and lawful requests);
• it is necessary to run a paid service safely — including fraud prevention, collecting amounts already due, and quality and training; or
• you have agreed, where we ask for something optional (device location, profile photo, marketing, saving a card).

You can withdraw consent for optional processing without losing the core Service. We may still process what we need to finish an order, meet a legal duty, or collect an amount due.

Some checks that prevent unpaid use or fraud run automatically and may limit an order. You can ask us to review a decision that was made solely by automated means.

4. Who we share with

We share what is needed to complete the Service, not your full payment card number:

• Restaurants, 7Kravemart, Marketplace sellers, and delivery riders — name may be masked in rider-facing tools; they receive what they need to prepare and deliver.
• Payment processors (FAC / PowerTranz, Lynk) and gift-card partners (including GiftMe).
• Social-login providers (Google, Facebook, Apple) when you sign in with those services. Google Firebase when we send a phone-verification SMS or a push notification to the app.
• Voice and messaging providers that carry support or delivery calls.
• Cloud hosting and storage providers that run the Service, including Amazon Web Services and other providers outside Jamaica (see below).
• Affiliates or service providers who help us operate 7Krave, under an obligation to protect the data.
• Authorities when the law requires it, or when we must protect the Service, a user, a rider, or the public.

We do not sell your personal information. We may share aggregated analysis with partners.

5. Overseas processing

The Service is hosted on cloud infrastructure that may be located outside Jamaica, including in the United States (for example Amazon Web Services). Your information may be stored or processed in those countries in order to operate the Service. Those countries may not have data-protection law equivalent to Jamaica’s. We use provider contracts, access controls, and encryption in transit (SSL/TLS) to protect it.

6. Security and breaches

We limit staff access to what is needed for the job, keep payment card numbers with FAC rather than in a form we can charge by hand, and transmit payment and account data over SSL/TLS. No method of storage or transmission is completely secure.

If a security breach is likely to affect your rights, we will notify the Information Commissioner of Jamaica as the Act requires and, where the Act requires it, we will also notify you.

7. How long we keep information

We do not keep personal information longer than we need for the purpose we collected it, except where the law or an unpaid amount requires a longer record. In practice:

• Account profile — while the account is open, and for a period after you close it if we still need it for disputes, unpaid amounts, or legal duties.
• Orders, payments, and Wallet history — usually up to seven years after the year of the order or payment, to meet tax and accounting duties.
• Saved-card tokens — until you remove the card or close the account, or longer if an amount is still due.
• Push tokens — while the device is registered for notifications.
• Support chat, email, and tickets — for the inquiry and a period after, so we can handle follow-up and disputes.
• Chat images — not automatically deleted when you close the account. Ask us to remove a specific image.
• Call recordings — for quality, training, and disputes, then removed or archived under our retention practice.

We may keep a record longer if an amount is still due, a dispute is open, or the law requires it.

8. Your rights

Under the Data Protection Act, 2020 you may ask us to:

• tell you what personal information we hold and give you access to it;
• correct information that is wrong or incomplete;
• delete information, or close your account, where the Act allows;
• restrict or prevent some processing, including objecting to direct marketing;
• withdraw consent for optional processing; and
• review a decision that was made solely by automated means.

These rights are not absolute. We may refuse or limit a request where the Act allows — for example where we must keep a tax or payment record, or where an amount is still due.

Send privacy requests to support@7krave.com with the subject line Privacy, or use Contact Us. We will treat that as a data-subject request. You may also complain to the Information Commissioner of Jamaica (oic.gov.jm).

9. Children

The Service is for persons 13 years or older. We do not knowingly collect personal information from anyone under 13. If you believe we have, email support@7krave.com and we will delete it where the Act allows.

10. Changes

We may update this policy. The version on this page, with its effective date, is the current one. For a material change we will update this page and, where practicable, notify you in the app or by email.