Kitcha Cookie Policy

Kitcha Limited | RC9540250 | 11B Oko Awo Street, Victoria Island, Lagos, Nigeria

Last updated: 25 September 2026
Classification: Public

1. Scope

1.1 What this Policy covers

Kitcha may use cookies, SDKs, local storage and similar technologies to provide essential account/order functions, remember preferences, maintain security, understand performance and support lawful analytics or marketing.

1.2 Where it applies

This Policy applies to the Kitcha website, the Kitcha customer application, and any other Kitcha digital surface on which these technologies are used. It applies whether you hold an account or not, and whether you are signed in or not.

1.3 What it does not cover

  • Technologies used by a third-party website or application you reach by following a link from a Kitcha service. Those are governed by that organisation's own policy;
  • Information Kitcha processes for reasons unconnected with these technologies, which is governed by the Kitcha Privacy Policy;
  • Settings applied by your own device, browser or operating system, over which Kitcha has no control.

1.4 Status of this Policy

This Policy forms part of the Kitcha Privacy Policy and is incorporated into the Kitcha Terms of Use. Where this Policy and another Kitcha document address the same subject, this Policy controls cookies, SDKs, local storage and similar technologies, and the Privacy Policy controls the processing of the personal information they generate. Mandatory law prevails over both.

2. Technology Categories

2.1 The categories

  • Strictly necessary: authentication, sessions, checkout, ordering and security.
  • Preferences: interface, language and saved settings.
  • Analytics: performance, error and usage measurement.
  • Marketing: campaign measurement or personalisation where lawfully permitted.

2.2 Each category in full

No consent required

Strictly necessary

These technologies are required for the service to function. Without them you cannot sign in, stay signed in, hold an order together while you build it, complete a checkout, or be protected against common attacks on your account.

What they do:

  • Establish and maintain your signed-in session, so that every page does not ask you to sign in again;
  • Hold the contents of an order or plan in progress between one step and the next;
  • Carry the security tokens that prevent a third-party site from submitting a request in your name;
  • Apply rate limiting and abuse detection that protect accounts against automated attack;
  • Record that you have made a cookie choice, so you are not asked again on every visit.

Why no consent is required: these technologies are used solely to deliver a service you have asked for. Consent is not sought for them because the service cannot be provided without them, and offering a choice that cannot be honoured would be misleading.

If you block them: the service will not work. Sign-in will fail or will not persist, orders will not hold together, and checkout will not complete.

Optional

Preferences

These technologies remember choices you have made so that the service behaves the way you left it.

What they do:

  • Remember your interface choices, including any display or accessibility preference offered;
  • Remember your language selection where more than one is offered;
  • Remember settings you have saved, so they do not reset between visits.

If you decline them: the service works, but it forgets your choices. You will reapply them each time.

Optional

Analytics

These technologies measure how the service performs and how it is used, so that Kitcha can find faults and improve what is not working.

What they do:

  • Record which pages and screens were reached, and in what order, so that a journey that fails can be identified;
  • Record errors and crashes, with the technical context needed to diagnose them;
  • Measure performance, including how long pages and actions take;
  • Aggregate usage so that Kitcha can see which features are used and which are not.

What they are not used for: analytics information is not used to build a marketing profile of you, is not combined with your allergy or dietary information, and is not sold or disclosed to a third party for that party's own purposes.

If you decline them: the service works exactly as before. Kitcha loses the ability to see that something is broken for you, which means a fault affecting you may take longer to find.

Optional

Marketing

These technologies measure whether a campaign reached anyone, and support personalisation, where doing so is lawfully permitted.

What they do:

  • Measure whether a person who saw a Kitcha message went on to visit or order, in aggregate;
  • Support personalisation of what you are shown, based on your own activity with Kitcha.

Limits that apply whatever you consent to:

  • Kitcha does not use allergy, dietary or health-related information for marketing or personalisation, in any circumstances;
  • Kitcha does not sell personal information, and does not make it available to data brokers or information resellers;
  • Kitcha does not use these technologies to set different prices for the same product for different customers.

If you decline them: the service works exactly as before, and you may still receive Kitcha communications you have separately consented to, because consent to marketing messages and consent to marketing technologies are two different things, managed separately.

2.3 Which category a technology falls into

A technology is categorised by what it actually does, not by who supplies it or by what it is called. A technology supplied by a third party but used solely to keep you signed in is strictly necessary. A technology Kitcha built itself but used to measure a campaign is marketing. Kitcha maintains an inventory of the technologies it deploys and the category each falls into, and reviews it when a technology is added, removed or changed.

3. Preference Controls

3.1 The rule

Where consent is required, Kitcha does not activate the relevant optional technology until the required consent is obtained and provides a mechanism to accept, reject or manage optional technologies. Browser/device settings may also provide controls. Disabling necessary technologies may impair essential functions.

3.2 What that means in practice

Optional technologies are off until you turn them on. Kitcha does not set an optional cookie, load an optional SDK, or begin optional measurement while it is waiting for your answer, and does not treat silence, scrolling or continued use as consent.

3.3 The three choices

  1. Accept the optional categories;
  2. Reject the optional categories, in which case only strictly necessary technologies are used;
  3. Manage, which lets you accept some categories and refuse others.

Rejecting is presented as plainly and is as easy to operate as accepting. There is no additional step, no additional screen and no delay imposed on refusing.

3.4 Where the control lives

The control appears when you first arrive, before optional technologies are used. It remains available afterwards through the Cookie preferences link published in the footer of every Kitcha page, so you can change your mind at any time without hunting for it.

3.5 Granularity

Consent is recorded per category, not as a single yes or no. You may accept preferences and refuse analytics, or accept analytics and refuse marketing, in any combination. Strictly necessary technologies are shown in the control so that you can see what they are, and are not presented as a choice, because they are not one.

4. Third-Party Technologies

4.1 Use of third-party technologies

Kitcha may use third-party technologies for payment, maps, communications, security, analytics and support. Kitcha assesses the purpose and privacy treatment of deployed technologies and provides applicable customer controls where required.

4.2 What each is for

Payment
To fund the Kitcha wallet and to confirm, settle, reconcile and refund payments. Kitcha does not receive or store your full card number, card verification value, PIN or one-time password.
Maps
To resolve an address, plan a route and estimate arrival time.
Communications
To deliver email, text messages and push notifications to you, and to report whether delivery succeeded.
Security
To detect and prevent fraud, account takeover and automated abuse.
Analytics
To measure performance, errors and usage, subject to your consent as set out in section 3.
Support
To operate or support a customer support channel.

4.3 Assessment before deployment

Before a third-party technology is deployed on a Kitcha surface, Kitcha assesses what it does, what information it can reach, the category it falls into under section 2, and whether consent is required before it may run. A technology that requires consent is not loaded until consent is given.

4.4 Responsibility is not transferred

Using a third-party technology does not transfer to that provider any obligation that applicable law places on Kitcha. Where Kitcha engages a provider to process personal information on its behalf, the controls set out in the Privacy Policy apply to that engagement, including the requirement that the provider act only on Kitcha's documented instructions.

5. Changes

5.1 When this Policy changes

Kitcha updates this Policy when deployed technologies or material legal requirements change.

5.2 Changes that require asking you again

Where a change introduces a new optional category, or materially changes the purpose of an existing one, Kitcha asks for consent again rather than relying on consent given for something else. Consent you gave for analytics is not treated as consent for marketing.

5.3 Versioning

This Policy carries the date on which it was last updated, shown at the head of the document. Kitcha retains superseded versions so that the statement in force at a past date can be established. This Policy applies to Kitcha's current use of these technologies and is not limited to use commencing after any particular date; the absence of a commencement date does not create a period in which no policy applied.

6. What These Technologies Are

This section explains the terms used above, so that the categories in section 2 can be understood without prior technical knowledge.

Cookie
A small text file that a website asks your browser to store and to send back on later visits. It allows a site to recognise the same browser from one request to the next.
Session cookie
A cookie that lasts only until you close your browser. Used to hold a signed-in session together.
Persistent cookie
A cookie that survives closing your browser, until it expires or you clear it. Used to remember a preference or a cookie choice.
First-party
Set by the Kitcha site or application you are using.
Third-party
Set by another organisation whose technology is running on a Kitcha surface, as described in section 4.
SDK
A software development kit: code supplied by another organisation and built into the Kitcha application to perform a function, such as payment, mapping, messaging or error reporting.
Local storage
A store on your own device in which an application can keep information between uses, without sending it anywhere.
Pixel or tag
A small element loaded within a page or message whose retrieval tells the sender that it was opened or reached.
Device identifier
An identifier associated with a device or an application installation, used to recognise the same installation over time.

8. If You Refuse or Withdraw

8.1 The service still works

Refusing every optional category does not restrict your use of Kitcha. You can still create an account, build a plan, place orders, pay, receive deliveries, contact support and exercise every right you have. Kitcha does not degrade the service, withhold a feature, or charge a different price because you refused.

8.2 What actually changes

Refuse preferences
The service forgets interface and language choices between visits, and you reapply them.
Refuse analytics
Nothing changes for you. Kitcha loses visibility of faults affecting you, so a problem you hit may take longer to find and fix.
Refuse marketing
Nothing changes for you. Kitcha cannot measure whether a campaign reached anyone, and does not personalise what you are shown.
Block strictly necessary
This cannot be done through the Kitcha control, only through your own browser or device. If you do it there, the service will not work: sign-in will fail or will not persist, and checkout will not complete.

8.3 Withdrawal takes effect going forward

When you withdraw consent, Kitcha stops using the relevant technologies. Information already collected while consent was in force is handled under the Privacy Policy, including your right under that Policy to ask for it to be erased.

9. Browser and Device Controls

9.1 Controls outside Kitcha

Browser/device settings may also provide controls. Most browsers allow you to see what is stored, to delete it, to block cookies from particular sites, to block third-party cookies, and to clear everything when you close the browser. Mobile operating systems provide comparable controls over application storage and advertising identifiers.

9.2 These controls are broader than Kitcha's

A browser or device setting applies to every site or application you use, not only to Kitcha. Kitcha cannot see, set or override those settings, and cannot restore something you have blocked there.

9.3 Blocking necessary technologies

Disabling necessary technologies may impair essential functions. If you block cookies entirely at browser level, Kitcha cannot keep you signed in, cannot hold an order together, and cannot complete a checkout. That is a consequence of how the web works and not a restriction Kitcha has chosen to impose.

9.4 Clearing storage

Clearing your browser storage removes the record of your cookie choice along with everything else. You will be asked again on your next visit, and optional technologies remain off until you answer.

10. Relationship to the Privacy Policy

These technologies are one of the ways in which Kitcha collects information. What Kitcha then does with that information, the lawful basis for it, who it is shared with, how long it is kept, and the rights you have in respect of it, are governed by the Kitcha Privacy Policy.

In particular, the Privacy Policy sets out your rights of access, rectification, erasure, restriction, objection, portability and withdrawal of consent, how to exercise them, and your right to complain to the Nigeria Data Protection Commission.

11. Contact

Customer support and complaints: support@kitcha.ng. Privacy, escalation and legal notices: admin@kitcha.ng.

Kitcha Limited | RC9540250 | 11B Oko Awo Street, Victoria Island, Lagos, Nigeria

12. Applicable Law and Statutory Rights

This document operates under Nigerian law and other laws applicable to the particular Kitcha service or activity. Nothing in this document is intended to exclude, waive, restrict or transfer a right, remedy, liability or obligation that applicable law does not permit Kitcha or a customer to exclude, waive, restrict or transfer. Mandatory law prevails.