At XchangeDeliveries ("we", "us", or "our"), your privacy is not just a policy—it is a priority. This document outlines how we collect, use, and protect your personal data across all five of our services — Food Delivery, Package & Parcel Delivery, Errand Services, Grocery Delivery, and Ride-Hailing — in compliance with the Nigerian Data Protection Regulation (NDPR) 2019 and other relevant Nigerian laws.
1. Information We Collect
To provide efficient delivery, errand, grocery, and ride services, we collect the following types of data:
- Personal Identity: Name, phone number, and email address for account creation.
- Geolocation Data: Real-time location data to facilitate accurate pickup and delivery addresses for food, packages, errands, and groceries — and live trip tracking for rides.
- Trip & Order History: Pickup/dropoff points, routes, distances, durations, fares, order contents, and ratings for completed orders and trips.
- Transaction Data: Order history and payment references (processed securely via Paystack). Note: We do not store your full credit card details on our servers.
- Device & Usage Data: Device type, operating system, IP address, app version, and general usage patterns, collected automatically via cookies and similar technologies.
- Communication: Records of your interactions with our support team, riders, drivers, or runners.
2. How We Use Your Data
We use your information strictly to:
- Process and fulfil your food orders, package deliveries, errands, grocery orders, and ride requests.
- Connect you with nearby Riders, Drivers, Errand Runners, Restaurants, and Grocery Merchants.
- Send real-time updates and push notifications regarding the status of your orders and trips (e.g., "Rider has arrived").
- Personalize your experience, such as suggesting nearby restaurants, frequently ordered items, or saved addresses.
- Improve our platform's safety, routing, and fraud-detection algorithms.
3. Information Sharing
We do not sell your personal data. However, to fulfil our services, we must share limited data with:
- Riders, Drivers & Runners: Your name, phone number, and relevant pickup/delivery address or route are shared with the individual assigned to your order, errand, or ride.
- Vendors & Grocery Merchants: Your order details are shared with the relevant Vendor or Merchant to prepare your meal or grocery order.
- Co-Passengers (Shared Rides): If you opt into a shared ride, your first name, pickup/dropoff points, and route may be shared with your co-passenger(s) for coordination purposes.
- Payment Processors: Transaction data is shared with Paystack solely to process payments. We do not receive or store your full card number.
- Legal Authorities: If required by Nigerian law or to protect the safety of our users.
5. Data Retention
We retain your personal data for as long as your account remains active, and for a reasonable period afterward where necessary to comply with our legal, accounting, and tax obligations under Nigerian law (typically up to 6 years for financial transaction records). If you request deletion of your account, we will delete or anonymize your personal data except where retention is required by law, or is necessary to resolve disputes, enforce our agreements, or prevent fraud.
6. Data Security
We implement industry-standard encryption protocols (SSL) and secure servers to protect your data. While no digital platform is 100% invulnerable, we take every commercially reasonable step to prevent unauthorized access, loss, or misuse of your information.
7. Your Rights (NDPR)
Under the Nigerian Data Protection Regulation, you have the right to:
- Request access to the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your account and associated data ("Right to be Forgotten").
- Object to or request restriction of certain processing of your data, and request a copy of your data in a portable format.
- Withdraw consent for marketing communications at any time.
8. Children's Privacy
Our services are not directed to, and we do not knowingly collect personal data from, individuals under the age of 18. If we become aware that we have inadvertently collected data from a minor, we will take steps to delete such information promptly. If you believe a minor has provided us with personal data, please contact our Data Protection Officer using the details below.
9. Third-Party Services & Links
Our platform integrates with trusted third-party services to deliver core functionality, including Paystack (payments), Google (maps, location, and sign-in), and push-notification services for order and trip updates. These providers process limited data strictly to perform their function and are governed by their own privacy policies. Our platform may also contain links to external websites; we are not responsible for the privacy practices of those third-party sites.
10. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, services, or legal requirements. Material changes will be communicated via email, an in-app notification, or a notice on this page, along with an updated "Last Updated" date. Continued use of our services after such changes take effect constitutes your acceptance of the revised policy.
Contact Data Protection Officer
If you have questions regarding this policy or wish to exercise your rights, please contact us:
Mpat Enin, Akwa Ibom State