Legal
Privacy Policy
Last updated: June 2026 · NDPR-aligned
Umarn respects your privacy. This policy explains what we collect, why we collect it, and your rights under the Nigeria Data Protection Regulation (NDPR).
1. Data we collect
- Identity: WhatsApp ID, display name, phone number, email (for receipts).
- Location: GPS pins shared per order for delivery and rider matching — not reused for pricing without a fresh share.
- Transactions: Order history, payment references, dispute records.
- Verification (vendors/riders): KYC documents stored securely and access-controlled.
2. How we use data
To process orders, calculate delivery, assign riders, prevent fraud, comply with law, and improve the Service. We do not sell personal data.
3. Sharing
We share necessary details with vendors and riders to fulfill your order (e.g. delivery directions). Payments are processed by Paystack under their privacy terms.
4. Retention
Order records may be retained for accounting and dispute resolution. You may request erasure via
DELETE MY DATA in the WhatsApp bot; we anonymise profile fields while keeping anonymised order logs.
5. Your rights
Access, correction, erasure, and consent withdrawal via bot commands (MY DATA, DELETE MY DATA,
UNSUBSCRIBE). Contact us for formal NDPR requests.
6. Security
Encryption in transit, restricted admin access to KYC media, and audit logging for verification actions.
7. Contact
Data protection enquiries: Contact support.