Privacy Policy
This policy explains how Easy Dispatch Ltd. ("EasyDispatch", "we", "us") collects, uses, shares and protects personal data when you use the EasyDispatch app, our web booking page at send.easydispatch.ng, public tracking pages and this website (together, the "Services"). We process personal data in line with the Nigeria Data Protection Act 2023 (NDPA) and the regulations of the Nigeria Data Protection Commission (NDPC).
1. Who we are
Easy Dispatch Ltd. is the data controller for the personal data described in this policy. Our address is 4 Ajayi Street, Off Allen Avenue, Ikeja, Lagos, Nigeria. You can reach us about privacy at hello@easydispatch.ng.
2. What we collect
Information you give us
- Account details: your name, email address, phone number, password (stored only as a secure hash) and, if you add one, a profile photo. If you sign in with Google or Apple, we receive your name and email address from them.
- Delivery details: pickup and drop-off addresses and landmarks, the sender's and receiver's names and phone numbers (and the receiver's email if you add it), what you're sending, notes for the rider, and any amount the rider should collect on delivery.
- Marketplace details: your cart, orders, delivery address, reviews, ratings, listing reports and dispute details, including any photos you upload as evidence.
- Seller details (only if you apply to sell): store name, description, logo, phone number and pickup address; your listings and photos; and your BVN or NIN, which we use to verify your identity.
- Wallet and payout details: the bank name, account number and account name of the bank account you add for cash-outs.
- Support conversations: what you tell us when you contact us by email, phone or WhatsApp.
Information collected when you use the Services
- Location: with your permission, your device's location while the app is open, to suggest your pickup address and show sellers near you. The customer app doesn't track your location in the background.
- Payments: payment amounts, methods, references and status. Card payments are made on Paystack's checkout; we receive a token, the card type and the last four digits so you can reuse a saved card, never your full card number or CVV.
- Transactions and history: your deliveries, orders, wallet transactions, cash-outs and ratings.
- Device and app information: app version, device type and operating system, a push notification token, IP address, and crash and error reports.
- Usage information: how screens and features are used (for example, that a booking was started or completed), collected through Firebase Analytics without your name or contact details.
Information from others
- If someone sends you a package or you're the receiver of an order, the sender gives us your name and phone number.
- Riders record delivery events, may take a photo as proof of delivery, and share their live location with us during a trip.
- Paystack tells us whether a payment or transfer succeeded, and confirms the account name for a bank account you add.
- Our identity verification provider confirms whether a seller's BVN or NIN matches their name.
3. How we use it
- To create and secure your account, sign you in and help you recover it.
- To price, book, dispatch and complete deliveries: matching you with a nearby rider, showing live tracking, and giving the rider the details needed to pick up and deliver.
- To run the marketplace: showing listings, processing orders, holding and releasing payments, handling disputes and moderating listings.
- To take payments, issue refunds, keep your wallet balance and send cash-outs to your bank account.
- To verify sellers and prevent fraud, abuse and prohibited items, including checking that cash-out accounts are in the account holder's name.
- To send you service messages by push notification and email, such as booking updates, receipts and security alerts.
- To provide customer support and resolve complaints.
- To fix crashes, measure performance and improve the Services.
- To meet legal, tax and accounting obligations and respond to lawful requests.
We don't sell your personal data, and we don't use it for automated decisions that have legal or similarly significant effects on you.
4. Lawful bases
| Purpose | Lawful basis under the NDPA |
|---|---|
| Accounts, deliveries, marketplace orders, payments, wallet and cash-outs, service messages | Performance of our contract with you |
| Seller identity verification, fraud prevention, security and abuse prevention | Legitimate interests, and legal obligation where it applies |
| Keeping financial and transaction records | Legal obligation |
| Device location | Consent, which you can withdraw in your device settings |
| Crash reports and usage analytics | Legitimate interests in keeping the app reliable and improving it |
5. Who we share it with
- Riders: the pickup and drop-off addresses, item details, notes, and the sender's and receiver's names and phone numbers for the trip they're doing. Riders see this only while the trip is active.
- Buyers and sellers: a seller sees the buyer's name, delivery area and the order details needed to fulfil it. Buyers see a store's name, area, rating and listings.
- People you share tracking with: a tracking link shows the delivery's status, the general areas of pickup and drop-off, the rider's first name and vehicle, and the rider's live position. It never shows street addresses or phone numbers.
- Service providers who process data for us under contract: Paystack (payments, refunds and bank transfers), our identity verification provider (BVN/NIN checks), Google (Maps and address search, Firebase Cloud Messaging and Firebase Analytics, Google sign-in), Apple (Sign in with Apple and notifications), Sentry (crash reporting), our email delivery provider, and our hosting and cloud storage providers.
- Authorities: when the law requires it, or to protect the safety of riders, customers or the public.
- A buyer of our business, if EasyDispatch is reorganised, merged or sold, under the same protections as this policy.
6. International transfers
Some of our service providers, such as Google, Apple and Sentry, process data outside Nigeria. When personal data leaves Nigeria, we rely on the transfer grounds in the NDPA, including adequate protections in our contracts with those providers.
7. How long we keep it
- Your account: for as long as it's open.
- When you delete your account: it's deactivated straight away, and your personal details are anonymised after 30 days.
- Financial and transaction records (payments, refunds, wallet entries, cash-outs, deliveries and orders): 6 years, as accounting and tax law requires. After deletion they're kept without your name or contact details where the law allows.
- Proof-of-delivery photos and dispute evidence: as long as needed to resolve the delivery or dispute, and in line with the records above.
- Crash reports: up to 90 days.
8. Your rights
Under the NDPA you have the right to:
- be told how your data is used (this policy);
- access the personal data we hold about you and get a copy;
- have inaccurate data corrected (you can edit your profile in the app);
- have your data erased (you can delete your account in the app, see Delete your account);
- restrict or object to processing based on our legitimate interests;
- receive your data in a portable format;
- withdraw consent at any time, for example by turning off location access;
- complain to the Nigeria Data Protection Commission (ndpc.gov.ng).
To use these rights, email hello@easydispatch.ng from the email address on your account. We'll reply within 30 days, and may ask you to confirm your identity first.
9. Security
Data is encrypted in transit. Passwords are stored as one-way hashes, and sign-in tokens are kept in your device's secure storage. Cash-outs need your device lock and only go to a bank account in your name, and changing that account needs a code sent to your verified email. Access to personal data inside EasyDispatch is limited by role and logged. If a breach puts your rights at risk, we'll tell you and the NDPC as the law requires.
10. Children
The Services are for people aged 18 and over. We don't knowingly collect data from children. If you think a child has given us personal data, contact us and we'll delete it.
11. This website and cookies
easydispatch.ng doesn't use analytics, advertising or tracking cookies. Our hosting provider keeps standard server logs (IP address, browser and pages requested) for security, for a limited time. The site loads its font from Google Fonts, which receives your IP address when the page loads.
12. Changes and contact
We'll update this policy when our Services or the law change, and update the date at the top. If a change is significant, we'll tell you in the app or by email before it takes effect.
Questions or requests: hello@easydispatch.ng, +234 816 281 8379, or by post to Easy Dispatch Ltd., 4 Ajayi Street, Off Allen Avenue, Ikeja, Lagos, Nigeria.