Data Protection (NDPA) Policy Statement
Last reviewed in September 2025
INTRODUCTION
As a data subject whether a recruitment candidate, customer, delivery recipient or sender, vendor, or employee, you can be assured that Fez Delivery Co. (“Fez Delivery,” “we,” “our,” or “us”) is committed to protecting your privacy and providing the highest level of data security at every interaction. We value your personal data and protect it in line with the Nigeria Data Protection Act (NDPA) and all applicable regulations.
This Policy explains what information we collect, how we collect, use, share, store, and retain your personal data, and your rights. By visiting our websites (www.fezdelivery.co), using our mobile applications, communicating with us via social media, email, or any other interactive channels, or engaging any of our services (“Services”), you accept and consent to the practices described in this policy.
PERSONAL INFORMATION COLLECTED AND COLLECTION METHODS
Personal information refers to any data that can identify you as an individual. Depending on how you interact with Fez Delivery, we may collect:
- Personal/Contact Details: Full name, phone number, email, postal address, next-of-kin details, date of birth, government-issued ID.
- Delivery & Transaction Data: Package details, delivery addresses, sender/receiver details, payment information, and related service records.
- Biometric Information: Where required for secure identity verification (e.g., facial or fingerprint recognition for employee authentication).
- Visual/Audio Data: CCTV footage at our facilities, photos or videos uploaded to confirm delivery.
- Employment & Medical Data: For staff onboarding; education, employment history, and (if required) limited medical fitness data.
- Financial Information: Billing details, card or bank account numbers when you pay for our services.
We collect this information via our website, mobile apps, call center, live chat, email, social media channels, physical service points, and through interactions with our delivery personnel.
CONDITIONS FOR PROCESSING PERSONAL DATA
Fez Delivery personnel or any third party acting on our behalf will process your personal data only when at least one of these conditions applies:
- Consent: You have given clear consent for specific processing purposes.
- Contract: Processing is necessary to fulfill a delivery or other service contract with you.
- Legal Obligation: Processing required to comply with applicable laws (e.g., tax, anti-fraud)
- Vital Interest: To protect your life or another person’s vital interests in emergencies.
- Public Interest/Legitimate Interest: For legitimate business purposes that do not override your rights.
How We Use Your Personal Data
To the extent permitted by law, we use your information to:
- Provide and operate our logistics, delivery, and related services.
- Manage pickups, deliveries, payments, and customer support.
- Improve our services, develop new offerings, and conduct data analytics for operational efficiency.
- Detect and prevent fraud, theft, or abuse of our systems.
- Communicate service updates, promotions, or offers (where permitted).
- Comply with legal and regulatory requirements, including responding to law enforcement requests.
Without this information, we may be unable to provide you with certain services.
TRANSFER OF PERSONAL DATA
Personal data collected by Fez Delivery may be shared within our organization with staff who have a legitimate need to know. We may disclose data to:
- Fez Delivery Branches & Affiliates that need the information to provide services.
- Regulatory/Governmental Authorities where required by law
- ∙Trusted Contractors or Third-Party Service Providers (e.g., payment processors, IT support) under confidentiality agreements
- Credit or Debt Recovery Agencies if necessary for payment disputes
- Business Partners or Successors in the event of mergers or acquisitions
These disclosures may involve transferring data to countries that do not have equivalent data protection laws. In such cases, Fez Delivery will ensure appropriate safeguards (e.g., encryption, contractual clauses) are in place.
TRANSFER TO A FOREIGN COUNTRY
Any international transfer of personal data will comply with the NDPA. Transfers will occur only where:
- The receiving country ensures an adequate level of protection as determined by Nigeria’s supervisory authorities; or
- Other legal conditions apply (such as your explicit consent, necessity for contract performance, public interest, or protection of vital interests).
Where safeguards are lacking, you will be informed of the risks before giving consent.
HOW WE PROTECT YOUR PERSONAL DATA
We use strong technical and organizational measures to keep your data secure, including:
- Encryption of data in transit and at rest
- Firewalls and intrusion detection systems
- Role-based access controls and multi-factor authentication
- Regular staff training and security audits
You are responsible for maintaining the secrecy of any login credentials and must not share them with anyone.
PERSONAL DATA BREACH NOTIFICATION
If a personal data breach occurs, Fez Delivery will notify the appropriate regulatory authorities and affected individuals within 72 hours of becoming aware of the breach, in line with NDPA requirements.
YOUR RIGHTS
Every data subject has the following rights:
- ∙ Right to be Informed: Transparent information on how we use your data.
- ∙ Right of Access: Obtain a copy of your personal data.
- ∙ Right to Rectification: Correct inaccurate or incomplete data.
- ∙ Right to Erasure: Request deletion of data when no legal reason exists for continued processing.
- ∙ Right to Restrict Processing: Block or limit processing under certain conditions.
- ∙ Right to Data Portability: Receive your data in a machine-readable format or transfer it to another controller.
- ∙ Right to Object: Object to processing for direct marketing or other legitimate interests.
- ∙ Right to Withdraw Consent: Withdraw previously given consent at any time.
To exercise these rights, contact our Data Protection Officer (details below). You also have the right to lodge a complaint with the National Information Technology Development Agency (NITDA).
AUTOMATED PROCESSING AND PROFILING
Fez Delivery does not make solely automated decisions with significant legal effects. If we introduce automated decision-making (e.g., fraud detection, route optimization), we will:
- ∙ Inform you of such processing and its logic.
- ∙ Provide meaningful information about potential impacts.
- ∙ Offer the right to request human review.
PERSONAL DATA RETENTION
We retain personal data only as long as necessary for the purposes collected or as required by law. When data is no longer needed, it is securely deleted or anonymized.
USE OF COOKIES
Fez Delivery uses cookies to improve user experience, including:
- ∙ Essential cookies for core site functionality.
- ∙ Analytics cookies to understand website usage.
- ∙ Preference cookies to remember user settings.
You can manage or disable cookies in your browser, but some features may not function properly.
MAINTAINING ACCURATE INFORMATION
You are responsible for ensuring that the information you provide is accurate and up to date. Notify Fez Delivery promptly of any changes.
PRIVACY OF CHILDREN
Our services are not directed to children under 18, and we do not knowingly collect their personal information without guardian consent.
ELECTRONIC COMMUNICATION
To maintain security and compliance, Fez Delivery may monitor electronic communications for legal or operational reasons.
SOCIAL MEDIA
We manage official social media accounts to communicate with customers. Please remember that any information you share on these platforms is public and governed by the respective platform’s privacy policies.
CONTACTING YOU
By providing your phone number, email, or postal address, you consent to being contacted regarding Fez Delivery’s services or updates. You can opt out of marketing communications by emailing dpo@fezdelivery.co.
Do we share your Data?
We do not disclose or share personal data provided to us on this website, unless it is absolutely necessary. We may share your personal information with affiliates; authorised agents; service providers, such as IT service providers; operating companies and other related entities.
Policy Updates
Fez Delivery reserves the right to update this Privacy Policy periodically. Changes will be posted on our website with a new “Last Updated” date. We encourage you to review it regularly.
Contact Information
For questions, concerns, or to exercise your rights under this Policy, please contact:
Data Protection Office
Fez Delivery Co.
6-10 Industrial Cres, Ilupeju, Lagos 102215, Lagos
Email: dpo@fezdelivery.co
Phone: 020 170 030 77