The short version
- We collect what we need to move a parcel from A to B, pay riders and keep everyone safe.
- We never sell your personal data.
- For rider checks we keep the verification result, not raw ID images, wherever our provider allows.
- Our servers are in London, so data leaves Nigeria under NDPA safeguards.
- You can ask to see, correct or delete your data, or object to how we use it.
02
Who we are
Sendam Logistics Ltd (“Sendam”, “we”) of Yaba, Lagos, runs the Sendam website, apps and same-day delivery service. We are the data controller for the personal data described in this notice, and we have appointed a Data Protection Officer (DPO) to oversee how we handle it.
03
What we collect
Only what we need for each person involved in a delivery.
Senders
- Name, phone number and, if you give it, email address
- Pickup and drop-off addresses, map pins and landmarks
- Order details: parcel size, declared value, delivery notes
- Payment references and receipts (card details are handled by our payment processor, not stored by us)
Business customers
- Business name and the name and phone number of the owner and staff logins
- Wallet top-ups, virtual account number and VAT invoices
- Orders you paste from WhatsApp or upload by CSV, including your buyers’ details
Receivers
- Name, phone number, address, pin and landmark, given to us by the sender or confirmed by you
- Delivery code confirmation and a proof-of-delivery photo of the parcel at the door
Riders
- Name, phone number, licence and bike papers
- Identity check results: NIN verification and selfie match results, not raw ID images where our provider allows
- Bank account details for nightly payouts, and your two guarantors’ names and phone numbers
- Live location while you’re online, trip history, earnings and SOS alerts
Everyone using our website or apps
- Device type, app version, IP address, crash logs and basic usage data, to keep the service secure and working
Rider identity checks. We keep the outcome of the NIN and selfie check (for example “verified”, the name match and a reference number), not copies of ID documents, wherever our verification provider allows it.
04
Why we use it, and our legal bases
The NDPA only allows us to process personal data when we have a lawful basis. Here is what we use your data for and the basis we rely on.
- Taking, pricing, dispatching and delivering orders
- Contract
- Live tracking, delivery codes and proof-of-delivery photos
- Contract; legitimate interests (preventing disputes and fraud)
- Payments, rider payouts, wallet top-ups and VAT invoices
- Contract; legal obligation (tax and accounting records)
- Rider identity, NIN and guarantor checks
- Legal obligation; legitimate interests (safety of customers and riders)
- Rider location while online, and the SOS button
- Contract; vital interests in an emergency
- Delivery updates by WhatsApp or SMS, and support
- Contract
- Package protection claims and rider accident cover
- Contract
- Promotions and news about Sendam
- Consent, which you can withdraw at any time
- Security, fraud prevention and improving the service
- Legitimate interests
06
Data stored outside Nigeria
Our servers are in London, United Kingdom. Personal data therefore leaves Nigeria when you use Sendam.
We only transfer data abroad under the NDPA’s cross-border rules. We rely on the level of protection under UK data protection law and on written contractual safeguards with our hosting provider, and we encrypt data in transit and at rest. You can ask our DPO for a summary of these safeguards.
07
How long we keep it
We keep data only as long as we need it, then delete or anonymise it. Proposed periods:
- Orders, payments and invoices
- 6 years after the order, to meet tax and accounting law
- Proof-of-delivery photos
- 90 days, or longer if there’s an open dispute or claim
- Rider live location history
- 30 days, then reduced to trip summaries
- Rider identity check results and guarantor details
- While you ride with us, plus 2 years
- Saved addresses and pins
- Until you delete them, or 2 years after last use
- Support chats
- 2 years
- Marketing preferences
- Until you opt out
08
How we protect it
- Encryption in transit and at rest
- Access limited by role: staff and riders see only what their job needs
- Logged access to rider identity results and payment data
- Regular staff training on handling personal data
09
Your rights
Under the NDPA you can ask us to:
Access
Ask for a copy of the personal data we hold about you.
Correction
Ask us to fix anything that is wrong or incomplete.
Deletion
Ask us to delete your data when we no longer need it or have no lawful reason to keep it.
Objection
Object to processing based on legitimate interests, and to marketing at any time.
You can also ask us to restrict how we use your data, ask for a portable copy, withdraw consent you have given, and ask for a human to review any decision made solely by automated means. To make a request, contact our DPO. We may need to confirm it’s really you, for example with a code sent to your phone, and we aim to reply within 30 days.
10
If something goes wrong
If a personal data breach is likely to put your rights and freedoms at risk, we will notify the Nigeria Data Protection Commission (NDPC) within 72 hours of becoming aware of it. If the risk to you is high, we will also tell you directly, in plain language, with steps you can take to protect yourself.
11
Children
Sendam accounts are for people aged 18 and over. If you believe a child has given us their personal data, contact our DPO and we will delete it.
12
Changes to this notice
We will update this notice when our services or the law change. If a change materially affects how we use your data, we will tell you in the app or by message before it takes effect.
13
Contact our Data Protection Officer
Data Protection Officer
Sendam Logistics Ltd, Yaba, Lagos
Email and phone contact to be added before launch
If you’re not happy with our answer, you have the right to complain to the Nigeria Data Protection Commission (NDPC).