Privacy Policy
Carrydey Technologies (operating as "Carrydey")
Last updated: November 2025
1. Introduction
Carrydey Technologies ("Carrydey", "we", "us", "our") operates a peer-to-peer delivery platform that connects senders and travelers for intercity parcel delivery. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and the choices you have. We operate in Nigeria and comply with applicable privacy laws, including the Nigerian Data Protection Regulation (NDPR).
2. Scope & Acceptance
By registering for or using the Carrydey platform (website, mobile apps, or related services) you accept the practices described in this policy. If you don't agree, please do not use our services.
3. What We Collect
We collect personal data required to provide safe, lawful, and secure delivery services. Data categories include:
- •Account & identity data: name, email, phone number, profile photo, NIN number or slip, government ID (passport, driver's licence), date of birth.
- •Verification data: BVN (when required), driver's licence details, selfie for liveness/face match, and any third-party verification reports.
- •Transaction & payment data: billing name, bank account details, Paystack payment ID, transaction history, refunds and escrow records.
- •Package & delivery data: pickup/drop locations, package description, weight/size, photos uploaded as proof, recipient name and OTP (when used).
- •Location & usage data: GPS coordinates (when enabled), IP address, device identifiers, app usage logs, timestamps.
- •Communications & messages: messages between users, support tickets, and call recordings (if any) for support/quality.
- •Optional marketing & profile data: business name (for company accounts), company CAC number, logo.
5. Why We Collect Data & Legal Basis
We process your data to:
- •Provide, operate, maintain, and improve the Carrydey service (performance of contract).
- •Secure payments and hold funds in escrow (legal/commercial necessity).
- •Verify identity for safety and trust (legitimate interest and legal obligations).
- •Communicate account or transactional information (contractual).
- •Prevent fraud and enforce our Terms (legitimate interest).
- •Comply with legal or regulatory demands (legal obligations).
6. How We Use Your Data
- •Match senders with travelers and manage bookings.
- •Process and secure payments using Paystack (we never store your raw card data; payments are tokenized via Paystack).
- •Perform KYC/identity checks, liveness checks, and background verification where applicable.
- •Provide customer support and handle disputes/disputes evidence.
- •Improve the product (analytics, aggregated insights).
- •Notify you about relevant updates and marketing (with your consent where required).
7. Sharing & Recipients
We may share personal data with:
- •Payment processors (Paystack) to process and escrow payments.
- •Verification providers (third-party identity/BVN/NIN providers) for KYC.
- •Service providers (cloud hosting, email, SMS, analytics) who act as processors.
- •Law enforcement or regulators when required by law.
- •Companies you choose to interact with (registered companies on our platform) — with your explicit consent.
We will not sell your personal data.
8. Data Retention
We retain personal data for as long as needed to provide services, meet legal obligations, resolve disputes, enforce agreements, and for permitted business purposes. Typical retention: account and transaction records for at least 5 years for audit/compliance, unless law requires otherwise.
9. Security
We take reasonable technical and organizational measures (TLS encryption, access controls, data minimization) to protect your data. However, no system is 100% secure — if a breach occurs we'll comply with applicable notification rules and notify affected users promptly.
10. Your Rights
Under applicable Nigerian law you may, subject to legal limits, request: access, rectification, portability, restriction, or deletion of your data. Some data is required to use our service (e.g., KYC info, payment records) and cannot be deleted while legal or contractual obligations remain.
11. Children
Carrydey does not knowingly collect data from children under 13. If you believe we have such data, contact us to remove it.
13. Cookies & Tracking
We use cookies and similar technologies for analytics, performance, and authentication. You can control cookies via your browser, but blocking critical cookies may limit core functionality.
14. Changes to This Policy
We may update this policy. We'll post the new effective date and notify users where appropriate.
15. Contact & Data Protection Officer
Carrydey Technologies
Email: privacy@carrydey.tech
If you have any questions about this Privacy Policy, please contact us at privacy@carrydey.tech