Privacy & Data Policy

IMATA Logistics Nigeria Limited • NDPA 2023 & NDPR

This document replaces separate notices for data usage, privacy, and rights where they overlap. For account-specific deletion steps, see Data Retention & Deletion.

Data Collection

We collect only what is needed to run logistics: identity and contact details, pickup and delivery addresses, payment references and transaction metadata (not full card numbers stored on our servers where a gateway handles payment), shipment and waybill data, rider assignment and location during active deliveries, and communications metadata needed for support and disputes.

  • Booking and delivery execution
  • Verification, fraud prevention, and audit trails
  • Customer support and dispute resolution

Data Usage

Personal data is used strictly for operational delivery workflows, rider matching, real-time tracking during active jobs, customer notifications, security monitoring, and compliance. We do not sell personal data. Analytics, where used, favours aggregated or minimised datasets.

Processing is aligned with the Nigeria Data Protection Act 2023 and NDPR, including lawful bases where applicable (contract, legal obligation, legitimate interests balanced against your rights).

User Rights

You may exercise the following rights, subject to verification and legal limits:

  • Access to the personal data we hold about you
  • Rectification of inaccurate or incomplete data
  • Erasure where applicable, and withdrawal of consent where processing is consent-based
  • Objection to certain processing and, where feasible, data portability
  • Lodging a complaint with the Nigeria Data Protection Commission or other competent authority

Requests: Customersupport@Imata-logistics.com

Data Retention & Deletion

Retention periods depend on legal, tax, and operational needs. Delivery and financial records may be kept for auditing and regulatory periods (often up to several years). Operational logs may roll off sooner. Aggregated or anonymised data may be retained where it no longer identifies you.

Account & data deletion

Rider, customer, and enterprise accounts (where applicable):

  1. Email Customersupport@Imata-logistics.comwith the subject line "Account Deletion Request"
  2. Include your registered email and account type (rider, customer, or enterprise)
  3. We aim to confirm receipt within 5 business days and complete processing within 30 days where feasible

Typically deleted: credentials, profile fields where lawful, sessions, and saved addresses where no retention duty applies.

May be retained: waybills and delivery records, payment records for tax/audit, and data required to defend legal claims — as permitted by law.

Enterprise contact for corporate data questions.