Privacy Policy

When you register on Dropoff — as an operator, agent, or customer — we collect information necessary to provide and improve our services. This includes:

• Identity information: your name, business name, phone number, and email address.
• Account credentials: your password (stored in hashed form) and authentication tokens.
• Transaction data: booking details, shipment records, wallet top-ups, and payment history.
• Usage data: pages you visit, features you use, and actions taken on the platform.
• Device and connection information: IP address, browser type, and operating system, collected automatically when you access the platform.
• Communications: messages you send to our support team.

We do not collect sensitive personal data such as national identification numbers, biometric data, or health information unless explicitly required and disclosed for a specific purpose.

We use your information to:

• Create and manage your account on the platform.
• Process bookings, shipments, and wallet transactions.
• Send booking confirmations, collection alerts, and delivery notifications.
• Provide customer support and resolve disputes.
• Detect and prevent fraud, abuse, or unauthorised access.
• Improve platform features and fix technical issues.
• Comply with applicable Nigerian laws and regulatory obligations.
• Send platform updates, policy changes, and service announcements.

We will not use your information for unrelated marketing without your explicit consent. You may opt out of non-essential communications at any time.

Dropoff does not sell your personal data. We may share your information in the following limited circumstances:

• With operators and agents: booking and shipment details are shared between the relevant operator and agent to fulfil your shipment.
• With service providers: third-party vendors who help us operate the platform (e.g. cloud hosting, payment processors, SMS providers) are contractually bound to protect your data and may only use it for the services they provide to us.
• For legal compliance: where required by Nigerian law, court order, or government authority.
• Business transfers: in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. You will be notified in advance.

Operators on the Dropoff platform can see booking and shipment data for their own network. They cannot see data belonging to other operators.

We use cookies and similar tracking technologies to maintain your session, remember your preferences, and analyse how the platform is used. We use:

• Essential cookies: required for the platform to function. Cannot be disabled.
• Analytics cookies: help us understand usage patterns and improve the product. We use Microsoft Clarity for behavioural analytics.

You can control cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to use the core platform.

We retain your personal data for as long as your account is active or as needed to provide services. Transaction records are retained for a minimum of seven years in compliance with Nigerian financial record-keeping requirements. You may request deletion of your account and personal data at any time by contacting us, subject to any legal obligations that require us to retain certain records.

Under the Nigeria Data Protection Act (NDPA) 2023, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data, subject to legal retention requirements.
• Object to certain uses of your data.
• Withdraw consent for processing based on consent, at any time.
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC).

To exercise any of these rights, contact us at hello@dropoff.africa. We will respond within 30 days.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted data transmission (TLS), hashed password storage, access controls, and regular security reviews. However, no method of transmission over the internet is completely secure. We encourage you to use a strong, unique password and to contact us immediately if you suspect any unauthorised access to your account.

Our platform may contain links to third-party websites or services. This Privacy Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party services you interact with through Dropoff.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a prominent notice on the platform before the changes take effect. Your continued use of Dropoff after the effective date constitutes your acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, contact us at hello@dropoff.africa. Our registered address is in Lagos, Federal Republic of Nigeria.