At XchangeDeliveries ("we", "us", or "our"), your privacy is not just a policy—it is a priority. This document outlines how we collect, use, and protect your personal data in compliance with the Nigerian Data Protection Regulation (NDPR) 2019 and other relevant Nigerian laws.
1. Information We Collect
To provide efficient delivery services, we collect the following types of data:
- Personal Identity: Name, phone number, and email address for account creation.
- Geolocation Data: Real-time location data to facilitate accurate pickup and delivery addresses.
- Transaction Data: Order history and payment references (processed securely via Paystack). Note: We do not store your full credit card details on our servers.
- Communication: Records of your interactions with our support team or riders.
2. How We Use Your Data
We use your information strictly to:
- Process and fulfill your food orders and logistics requests.
- Connect you with nearby Riders and Restaurants.
- Send real-time updates regarding order status (e.g., "Rider has arrived").
- Improve our platform's safety and security algorithms.
3. Information Sharing
We do not sell your personal data. However, to fulfill our service, we must share limited data with:
- Riders/Dispatchers: Your name, phone number, and delivery address are shared with the assigned rider to ensure successful delivery.
- Vendors/Restaurants: Your order details are shared with the vendor to prepare your package or meal.
- Legal Authorities: If required by Nigerian law or to protect the safety of our users.
4. Data Security
We implement industry-standard encryption protocols (SSL) and secure servers to protect your data. While no digital platform is 100% invulnerable, we take every commercially reasonable step to prevent unauthorized access, loss, or misuse of your information.
5. Your Rights (NDPR)
Under the Nigerian Data Protection Regulation, you have the right to:
- Request access to the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your account and associated data ("Right to be Forgotten").
- Withdraw consent for marketing communications at any time.
Contact Data Protection Officer
If you have questions regarding this policy or wish to exercise your rights, please contact us:
Mpat Enin, Akwa Ibom State