Privacy Policy for Paket.ng

Effective Date: May 1, 2026

1. Introduction

Welcome to Paket.ng. We are a fintech and services company operating in Nigeria, providing finance solutions, package delivery, transport, and e-commerce services. At Paket.ng, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and related services, in strict compliance with the Nigeria Data Protection Act (NDPA) 2023 and other relevant Nigerian regulations.

2. The Personal Data We Collect

Due to the diverse nature of our services, we collect various categories of personal data:

• Identity Data: Full name, date of birth, gender, photograph, and government-issued identification numbers (such as your Bank Verification Number (BVN) or National Identification Number (NIN) for KYC/AML compliance).
• Contact Data: Email address, physical/delivery address, and telephone number.
• Financial Data: Bank account details, payment card information, and transaction history related to bill payments and transfers.
• Location/Transit Data: Real-time GPS location tracking for our transport and package delivery services, as well as pick-up and drop-off routing.
• Technical Data: IP address, device type, operating system, browser type, and app usage data.

3. Lawful Basis and Purpose for Processing

Under Section 25 of the NDPA 2023, we only process your personal data under the following lawful bases:

• Performance of a Contract: To fulfill our obligations to you, such as processing a bank transfer, executing an e-commerce order, or dispatching a vehicle/package delivery to your location.
• Legal Obligation: To comply with Nigerian laws and regulations, including Central Bank of Nigeria (CBN) directives for financial transactions, fraud prevention, and anti-money laundering (AML) protocols.
• Legitimate Interest: To improve our platform security, optimize our delivery routes, develop new services, and conduct internal business analytics.
• Consent: When you opt-in to receive promotional materials or marketing campaigns. You may withdraw this consent at any time.

4. Data Sharing and Third-Party Disclosure

We do not sell your personal data. We may share your information with:

• Service Providers: Third-party payment gateways, drivers, dispatch riders, and cloud hosting providers who assist in operating our services.
• Regulatory & Law Enforcement Authorities: The Nigeria Data Protection Commission (NDPC), the Central Bank of Nigeria (CBN), or law enforcement agencies when mandated by law or a valid court order.
• Merchants/Sellers: For e-commerce fulfillment purposes (sharing only the minimum necessary details like your name and delivery address).

5. Data Security and Retention

We implement robust technical and organizational security measures—including data encryption, firewalls, and strict access controls—to protect your personal data from unauthorized access, loss, or alteration.

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by Nigerian law. Financial transaction records, for instance, are retained in accordance with the CBN’s statutory retention periods. Once the retention period expires, your data is securely deleted or anonymized.

6. Cross-Border Data Transfers

Where your data needs to be transferred to or stored on servers located outside of Nigeria (e.g., international cloud service providers), Paket.ng ensures that such transfers comply with the NDPA 2023. We only transfer data to jurisdictions with adequate data protection laws or utilize mechanisms such as Standard Contractual Clauses to guarantee your data's safety.

7. Children’s Privacy

In compliance with the NDPA 2023, our financial and transport services are not directed at individuals under the age of 18 (defined as children under Nigerian law). We do not knowingly collect personal data from minors without verifiable consent from a parent or legal guardian. If we discover we have inadvertently collected such data, we will delete it promptly.

8. Your Data Privacy Rights

Under the NDPA 2023, you have legally protected rights over your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure (Right to be Forgotten): Request deletion of your data, subject to our legal and regulatory retention obligations.
• Right to Restrict Processing: Request a pause on processing your data under specific conditions.
• Right to Data Portability: Request the transfer of your data to another service provider in a structured, machine-readable format.
• Right to Object: Object to data processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Withdraw your consent at any time where processing is based on consent.

9. Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our services or legal requirements. We will notify you of significant changes via email or an in-app notification.

10. Contact Us and Data Protection Officer (DPO)

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact our Data Protection Officer at: