OUR PRIVACY
PROMISE.

Welcome to Hutdrop ("Hutdrop", "we", "us", "our"). We provide a digital platform for users to request and purchase items from vendors—including Food, Over-the-Counter (OTC) Health Products, Groceries, and Package Delivery services—and have them delivered to their doorstep ("Services").

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our platform. We are committed to safeguarding your privacy in compliance with the Nigeria Data Protection Act (NDPA) 2023 and other applicable data protection laws.

This Privacy Policy will be reviewed annually to ensure compliance with applicable data protection laws and regulations, including the Nigeria Data Protection Act (NDPA) 2023.

We are continually improving our methods of communication and adding new functionalities to our platform. Because of these ongoing changes and the evolving nature of technology and law, our data protection practices may change from time to time. When changes occur, we will update this Policy on our website and application, and update the "Last Updated" date at the top.

We process your personal data under the following legal bases as required by the NDPA:

• Performance of a Contract: To fulfill orders, complete deliveries, process payments, and provide customer support as part of our contractual obligations to you.
• Legal Obligation: To comply with applicable laws, tax regulations, financial reporting requirements, and respond to lawful requests from authorities.
• Legitimate Interests: For fraud prevention, ensuring the safety and security of our riders and users, improving our services, and conducting business analytics.
• Consent: Where you have given clear consent for us to process your data for specific purposes, such as marketing communications or precise GPS location tracking.

We collect information directly from you, automatically through your use of our Services, and in some cases from third parties with your authorization. Specifically, we collect your information when you:

• Create an account or register for our Services
• Place an order for food, groceries, pharmaceuticals, or package delivery
• Update your profile, delivery addresses, or payment methods
• Contact us with questions, complaints, or customer support requests
• Subscribe to newsletters, promotions, or marketing communications
• Participate in surveys, promotions, or loyalty programs
• Browse or interact with our website or mobile application
• Communicate with riders or vendors through our platform
• Connect via social media platforms linked to our Services

The information we collect depends on the services you use. We collect only the information essential to create your account and provide our Services:

• Identity Data: Full name, username, date of birth, gender, and profile photo.
• Contact Data: Email address, telephone numbers, and physical delivery addresses.
• Financial Data: Transaction history and payment confirmations. Payment card details are processed securely via third-party payment gateways and are not stored on our servers.
• Transaction Data: Details of orders placed, delivery history, order preferences, and vendor interactions.
• Technical Data: IP address, device ID, device type, operating system, browser type and version, mobile network information, and app version.
• Usage Data: Information about how you interact with our website and application, including pages visited, features used, and time spent on the platform.
• Location Data: Precise GPS coordinates (required for logistics, delivery tracking, and recommending nearby vendors).
• Communication Data: Records of your communications with our customer support, riders, and vendors through the Hutdrop platform.

We use your personal data to:

Our platform allows you to communicate with customer support, riders, and vendors via chat, email, or calls. We may record and monitor these communications for the following purposes:

• Safety and security monitoring
• Quality assurance and training
• Fraud prevention and investigation
• Dispute resolution and complaint handling
• Service improvement and analytics

We use cookies (small text files stored in your browser) and similar technologies such as web beacons to collect information that helps us:

• Remember your preferences and login status
• Understand how you use our website and app
• Personalize content and recommendations
• Analyze traffic and usage patterns
• Improve our Services and user experience

You can configure your browser to refuse cookies or notify you when cookies are sent. However, disabling cookies may limit certain functionalities of our platform.

We take the security of your personal information seriously and have implemented appropriate technical and organizational measures to protect against unauthorized access, loss, misuse, alteration, or disclosure.

Our security measures include:

• Industry-standard encryption (SSL/TLS) for data transmission
• Encrypted storage of personal data using data isolation technology
• Firewalls and intrusion detection systems
• Access controls limiting data access to authorized personnel only
• Regular security audits and vulnerability assessments
• Secure third-party payment processing (we do not store card details)

Under the Nigeria Data Protection Act (NDPA) 2023, you have the following rights regarding your personal data:

• Right of Access: Request confirmation and access to the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data where it is no longer necessary.
• Right to Restrict Processing: Request limitation of how we process your data in certain circumstances.
• Right to Object: Object to the processing of your personal data for specific purposes.
• Right to Data Portability: Request a copy of your data in a structured, machine-readable format.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at privacy@hutdrop.com or complete our Data Deletion Request Form. We may require identification verification before processing your request.

We will respond to valid requests within the timeframe required by law. If we cannot comply with your request, we will inform you of the reason.

With your consent, we may contact you with promotional offers, updates, and marketing communications via email, SMS, push notifications, or other digital channels.

To opt out of marketing communications:

• Click "Unsubscribe" in any marketing email
• Update your notification preferences in the app settings
• Email us at privacy@hutdrop.com

Even if you opt out of marketing, we may still send you non-promotional messages such as order confirmations, delivery updates, and important account notifications.

Our platform may contain links to third-party websites, applications, or services that we do not operate. These links are provided for your convenience and do not imply endorsement.

We have no control over and assume no responsibility for the content, privacy policies, or practices of third-party sites. We encourage you to review the privacy policies of any third-party services before providing personal information.

We may also use third-party services (such as social media platforms) for interactive features. These services may collect information about you in accordance with their own privacy policies.

Our Services are not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@hutdrop.com. We will take steps to delete such information from our systems.

In compliance with the Nigeria Data Protection Act (NDPA) 2023, we have appointed a Data Protection Officer (DPO) responsible for overseeing our data protection strategy and ensuring compliance.

You may contact our DPO regarding any questions, concerns, or requests related to this Privacy Policy or your personal data at: privacy@hutdrop.com

This Privacy Policy is governed by the laws of the Federal Republic of Nigeria, including the Nigeria Data Protection Act (NDPA) 2023.

Where any provision of this Policy is deemed inconsistent with applicable law, regulation, or convention, such provision shall be subject to the overriding law. This Policy applies to all users of the Services provided by Hutdrop and to anyone who contacts Hutdrop or submits information to us.