Privacy Policy
Last Updated: January 2026
1. Our Commitment
1.1 We treat your personal data with care and transparency. This Privacy Policy explains how LIGT Technology & Services (“LIGT”, “we”, “us”) collects, uses, shares, and protects your personal data when you use our mobile and web applications and delivery services (the “Platform”).
1.2 LIGT is the data controller for personal data processed under this Policy. We comply with the Nigeria Data Protection Act 2023 (NDPA), the General Application and Implementation Directive (GAID) 2025, and other applicable Nigerian laws.
1.3 This Policy applies to Consumers. Riders and Merchants are covered by separate onboarding terms and privacy notices, but the sections on sharing, security, and your rights apply generally.
2. Information We Collect
2.1 Information you give us
- Account details: name, phone number, email address (if provided), delivery addresses and address coordinates, profile information.
- Orders and receipts: items purchased, Merchant details, delivery instructions, parcel pickup and drop-off details, recipient name and phone number, payment confirmations and transaction references.
- Support communications: messages, photos, and details you send when you contact us or report an issue.
- Ratings and reviews you provide about Merchants or Riders.
2.2 Information collected automatically
- Location data: device GPS coordinates when you place an order, book a parcel delivery, or track a Rider, to ensure accurate doorstep delivery.
- Device and usage data: device model, operating system, app version, IP address, language, crash logs, and how you use the Platform.
- Cookies and similar technologies on our website, to keep you signed in, remember preferences, and understand site performance.
2.3 Information from third parties
- Payment processors: confirmation of payment status (we do not receive or store your full card number, CVV, or PIN).
- Merchants and Riders: order status, delivery confirmation, and incident reports.
2.4 Sensitive data
We do not intentionally collect sensitive personal data (such as health, biometric, religious, or political data). If you voluntarily include such details in delivery instructions or messages, you consent to us processing them for that purpose.
3. How We Use Information and Our Legal Bases
We use your information strictly for the following purposes:
| Purpose | Examples | Legal basis (NDPA) |
|---|---|---|
| Fulfil orders and deliveries | Connect your order to the right Merchant and Rider; process payments; issue receipts | Performance of a contract |
| Provide live tracking and alerts | Real-time route tracking, arrival alerts, order status | Performance of a contract; consent (for location) |
| Prevent fraud and secure the Platform | Verify accounts, detect suspicious activity, prevent abuse | Legitimate interests; legal obligation |
| Customer support and dispute resolution | Investigate missing items, refunds, complaints | Contract; legitimate interests |
| Legal and regulatory compliance | Tax, record-keeping, lawful requests from authorities | Legal obligation |
| Improve the Platform | Fix bugs, analyse usage, improve delivery accuracy (using aggregated or de-identified data where possible) | Legitimate interests |
| Service and marketing messages | Order notices; promotions you have opted in to | Contract; consent |
We do not use your personal data for purposes incompatible with those above without informing you and, where required, obtaining your consent.
4. Data Sharing and Disclosure
4.1 We do not sell your personal data.
4.2 We share only what is necessary:
- Your assigned Merchant and Rider: delivery drop-off location, contact name, phone number (which may be masked or routed through the app), and order details, to complete your order.
- Payment processors: to process payments and prevent fraud.
- Service providers: cloud hosting, maps and navigation, SMS/WhatsApp/notification delivery, analytics, and customer support tools, under written agreements requiring confidentiality and security.
- Authorities and regulators: where required by law, court order, or to protect rights, safety, and prevent crime.
- Business transfers: in a merger, acquisition, or asset sale, your data may transfer to the successor, who must honour this Policy.
4.3 Merchants and Riders who receive your information must use it only to fulfil your order.
5. Cross-Border Transfers
Some of our service providers (for example, cloud or analytics providers) may process data outside Nigeria. Where we transfer personal data abroad, we do so only where the destination offers adequate protection under the NDPA, or where appropriate safeguards (such as standard contractual clauses or binding agreements) or another lawful basis applies.
6. Data Retention
We keep personal data only as long as necessary for the purposes above:
- Account data: while your account is active, and for a reasonable period after closure.
- Order, receipt, and payment records: generally up to 6 years to meet tax, accounting, and legal obligations.
- Location and tracking data: kept only as long as needed to complete and support the delivery and resolve disputes, then deleted or anonymised.
- Support records: up to 2 years after resolution.
When data is no longer needed, we delete or anonymise it securely.
7. Data Security
7.1 We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, secure cloud infrastructure, staff confidentiality obligations, and monitoring for unauthorised access.
7.2 No system is completely secure. Please protect your account credentials and OTPs and never share them, including with anyone claiming to be LIGT.
7.3 Data breaches: If a breach is likely to result in risk to your rights and freedoms, we will notify the NDPC within 72 hours of becoming aware, and notify affected users promptly where required by law.
8. Your Rights
Under the NDPA, you have the right to:
- Be informed about how your data is used (this Policy);
- Access your personal data and obtain a copy;
- Rectify inaccurate or incomplete data;
- Erase your data, subject to legal retention duties;
- Restrict or object to processing, including direct marketing;
- Data portability, receiving your data in a structured, commonly used format;
- Withdraw consent at any time (without affecting prior lawful processing);
- Not be subject to solely automated decisions with legal or similarly significant effects, and to request human review;
- Lodge a complaint with the Nigeria Data Protection Commission (NDPC).
To exercise any right, email support@ligtx.com.ng. We may verify your identity first and will respond within the time required by law (generally within 30 days).
9. Location Data Controls
You can turn off location permissions in your device settings at any time. Without location access, you can still enter an address manually, but live tracking and address accuracy may be limited.
10. Cookies and Similar Technologies
Our website uses essential cookies (login, security) and, where enabled, analytics cookies to understand usage. You can manage cookies in your browser settings. Blocking some cookies may affect site functionality.
11. Children's Privacy
The Platform is for users 18 and older. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact support@ligtx.com.ng and we will delete it.
12. Third-Party Links and Services
The Platform may link to third-party sites or services. We are not responsible for their privacy practices, so please review their policies.
13. Changes to This Policy
We may update this Policy from time to time. We will post the updated version with a new “Last Updated” date and, for material changes, notify you in the app, by SMS, or by email. Continued use after the effective date means you accept the changes.
14. Contact Our Privacy Team
If you have questions, or wish to request access, data updates, or account deletion, contact our privacy team:
LIGT Technology & Services, Data Protection Contact
Email: support@ligtx.com.ng
Address: [Registered Address], Akwa Ibom, Nigeria
Data Protection Officer: [Name / designated DPO email]
If you are unsatisfied with our response, you may complain to the Nigeria Data Protection Commission (NDPC).