Privacy Policy

Pickriders Store ("we", "us" or "our") is a platform where businesses in Nigeria get their own online storefront link, sell to customers, and take payments, with delivery powered by Pickriders riders. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights you have.

It applies to visitors, customers who place orders, and vendors who sell through Pickriders Store. We handle personal data in line with the Nigeria Data Protection Act 2023 (NDPA) and the guidance of the Nigeria Data Protection Commission (NDPC).

We collect the following, depending on how you use Pickriders Store:

• Customer information: your name, phone number, email address (where provided), delivery address and location, order details, and any delivery notes.
• Payment information: we do not store your full card details. Payments are handled by our payment partner, Paystack. We receive a payment reference, the status, and the amount.
• Vendor information: business name and contact details, address, bank account and settlement details used for payouts, documents you upload, and store settings.
• Technical information: device and browser details, IP address, and information saved on your device such as your cart, saved delivery details, and session data.

We collect this when you place an order, create or manage a store, contact support, or use the site.

• To create and manage stores and accounts.
• To take orders and process payments.
• To dispatch riders and manage deliveries, including sharing the delivery address with the assigned rider.
• To send order and delivery updates, including WhatsApp messages where you have opted in.
• To pay vendors and reconcile transactions.
• To provide support and resolve disputes.
• To keep the platform secure, prevent fraud, and improve how it works.
• To meet our legal, tax, and regulatory obligations.

Under the NDPA we only process personal data where we have a lawful basis. Depending on the situation, our basis is:

• Contract: to provide the service you or a vendor asked for, such as fulfilling an order or making a payout.
• Consent: for optional messages such as WhatsApp updates. You can withdraw consent at any time.
• Legitimate interest: to secure the platform, prevent fraud, and improve our service.
• Legal obligation: where the law requires us to keep or share certain records.

We do not sell your personal data. We share it only where needed to run the service:

• Vendors: a vendor sees the details of orders placed with their store, such as the customer name, phone number, and delivery address.
• Riders: the assigned rider receives the pickup and delivery details needed to complete the trip.
• Payment partner: Paystack processes payments and payouts on our behalf.
• Messaging partner: Meta (WhatsApp) delivers order and delivery messages where you have opted in.
• Service providers: hosting, analytics, and support tools that help us operate, under confidentiality obligations.
• Legal and safety: authorities or advisers where we are required by law, or to protect our rights, our users, or the public.

When you choose to receive updates on WhatsApp, we use your phone number to send messages about your order, delivery, and account through the WhatsApp Business Platform. You can opt out at any time by replying to a message or contacting support. We may still send essential service messages, such as a delivery confirmation code, where they are needed to complete your order.

We use cookies and similar storage on your device to keep you signed in, remember your cart and delivery details, and understand how the site is used so we can improve it. You can clear or block this storage in your browser settings, though some features may not work as well.

We keep personal data for as long as needed to provide the service and to meet legal, accounting, and regulatory requirements. Order and payment records are typically kept for the period required by Nigerian tax and financial rules. When data is no longer needed, we delete it or make it anonymous.

We use technical and organisational measures to protect your data, including encryption in transit, access controls, and limiting who can see sensitive information such as bank and payout details. No system is completely secure, but we work hard to keep your data safe and to respond quickly if something goes wrong.

Under the NDPA you have the right to:

• Access the personal data we hold about you.
• Correct data that is wrong or out of date.
• Ask us to delete your data where there is no lawful reason to keep it.
• Object to or restrict certain processing.
• Withdraw consent for optional messages at any time.
• Request a copy of your data in a portable format.

To exercise any of these rights, contact us using the details below. You also have the right to complain to the Nigeria Data Protection Commission (NDPC) if you believe your data has been handled improperly.

Pickriders Store is not intended for anyone under the age of 18. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will remove it.

Some of our partners, such as our payment and messaging providers, may process data outside Nigeria. Where this happens, we take steps to make sure your data stays protected to a standard consistent with the NDPA.

We may update this Privacy Policy from time to time. When we make significant changes we will update the date at the top of this page and, where appropriate, let you know. Please check back so you stay aware of how we protect your data.

If you have any questions about this Privacy Policy or how we handle your data, contact us:

• Email: privacy@pickriders.com
• Address: Enugu, Nigeria

We will respond within a reasonable time and in line with the NDPA.