Ezzy Express – Privacy Policy

1. Information We Collect

1.1 Personal Information You Provide

When you place an order or use our services, we collect:

• Contact Information: Full name, email address, phone number
• Delivery Information: Delivery address, location coordinates (if you enable location services)
• Order Information: Products purchased, order history, preferences
• Payment Information: Payment method details (processed securely through third-party payment providers)
• Communications: Messages, feedback, reviews, photos, or other content you submit

1.2 Information Collected Automatically

When you visit our Platform, we may automatically collect:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages viewed, time spent on pages, links clicked, referring website
• Location Data: General location based on IP address or precise location if you grant permission
• Cookies and Tracking Technologies: We use cookies and similar technologies to enhance your experience (see Section 8)

1.3 Information from Third Parties

We may receive information from:

• Payment processors (transaction confirmation, payment status)
• Delivery partners and logistics providers
• Analytics and advertising services

2. How We Use Your Information

We use your personal information for the following purposes:

2.1 Order Processing & Delivery

• Processing and fulfilling your orders
• Coordinating delivery with our riders
• Sending order confirmations, updates, and delivery notifications
• Handling returns, refunds, and customer support

2.2 Service Improvement

• Analyzing usage patterns to improve our Platform
• Personalizing your shopping experience
• Developing new features and services
• Conducting research and analytics

2.3 Communication

• Sending transactional emails (receipts, order updates)
• Responding to your inquiries and support requests
• Sending promotional offers and marketing communications (with your consent)
• Conducting surveys and collecting feedback

2.4 Security & Legal Compliance

• Preventing fraud, unauthorized access, and security threats
• Enforcing our Terms & Conditions
• Complying with legal obligations and regulatory requirements
• Protecting the rights and safety of our users and staff

3. Legal Basis for Processing (NDPR Compliance)

Under the Nigeria Data Protection Regulation (NDPR), we process your personal data based on:

• Consent: You have given clear consent for us to process your data for specific purposes
• Contract Performance: Processing is necessary to fulfill our contract with you (delivering your orders)
• Legal Obligation: We must process your data to comply with Nigerian laws
• Legitimate Interest: Processing is in our legitimate business interests (fraud prevention, service improvement)

4. How We Share Your Information

We do not sell your personal information. We may share your data with:

4.1 Service Providers

• Delivery Partners: To fulfill and deliver your orders
• Payment Processors: To process payments securely
• Technology Providers: Hosting, analytics, customer support tools
• Marketing Services: Email and SMS service providers (with your consent)

4.2 Legal & Regulatory Authorities

We may disclose your information when required by law, court order, or regulatory authority, or to protect our rights and prevent fraud.

4.3 Business Transfers

If Ezzy Express undergoes a merger, acquisition, or sale of assets, your information may be transferred to the new entity.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.

• Order Data: Retained for 7 years for accounting and legal purposes
• Account Information: Retained until you request deletion or account closure
• Marketing Data: Retained until you withdraw consent
• Cookies: Expire based on cookie settings (see Section 8)

6. Your Rights Under NDPR

As a Nigerian data subject, you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (subject to legal obligations)
• Right to Object: Object to processing of your data for marketing purposes
• Right to Data Portability: Request transfer of your data to another service
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
• Right to Lodge a Complaint: File a complaint with the Nigeria Data Protection Commission (NDPC)

To exercise any of these rights, please contact us at support@ezzyrun.ng

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

• SSL/TLS encryption for data transmission
• Secure payment processing through PCI-DSS compliant providers
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• Employee training on data protection

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our Platform.

8.1 Types of Cookies We Use

• Essential Cookies: Required for basic Platform functionality (e.g., shopping cart, checkout)
• Performance Cookies: Help us understand how visitors use our Platform (e.g., Google Analytics)
• Functionality Cookies: Remember your preferences and settings
• Marketing Cookies: Track your activity to show relevant advertisements (with your consent)

8.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling certain cookies may affect Platform functionality. You can manage your cookie preferences through our cookie consent banner.

9. Third-Party Links

Our Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

10. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us immediately so we can delete it.

11. International Data Transfers

Your data is primarily stored and processed in Nigeria. If we transfer data outside Nigeria, we ensure appropriate safeguards are in place to protect your information in compliance with NDPR requirements.

12. Marketing Communications

With your consent, we may send you promotional emails, SMS messages, or push notifications about:

• New products and special offers
• Exclusive deals and discounts
• Platform updates and announcements

You can opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in our emails
• Replying "STOP" to SMS messages
• Contacting us at support@ezzyrun.ng

Note: You will still receive transactional emails related to your orders even if you opt out of marketing.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated policy on this page with a new "Last Updated" date
• Sending you an email notification (for significant changes)

Your continued use of the Platform after changes are posted constitutes acceptance of the updated Privacy Policy.

14. Data Protection Officer

Ezzy Run Technologies Ltd has appointed a Data Protection Officer (DPO) to oversee our data protection practices and ensure NDPR compliance.

You can contact our DPO at: dpo@ezzyrun.ng

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

16. Regulatory Authority

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with: