1. Introduction
BlackBoxNG Logistics is committed to protecting the privacy of every person who uses our services. This policy explains what personal information we collect, why we collect it, how we protect it, who we share it with, and what rights you have over your data. It applies to our website, our application, and all delivery services we provide.
Our data practices comply with the Nigeria Data Protection Act 2023 (NDPA) and the regulations issued by the Nigeria Data Protection Commission. By accessing our services, you acknowledge that you have read, understood, and accepted these practices.
2. Who We Are (Data Controller)
BlackBoxNG Logistics is the Data Controller. We determine the purposes and methods of personal data processing.
Contact channels:
- Email: hello@blackboxng.com
- Phone: +234 704 911 7938
- Address: 109 Muslimat Oginla Street, God First Estate, Owode Onirin, Lagos
Detailed obligations are outlined in our separate Data Protection Policy.
3. Information We Collect
We collect the following categories of personal information:
- Identity Information: full name, date of birth, gender, and government-issued identification used for Know Your Customer verification.
- Contact Information: billing address, delivery address, email, phone number.
- Financial and Transaction Information: payment methods, transaction history, delivery fees. We do not store full card details.
- Location Information: pickup and drop-off addresses, plus real-time geo-location from rider devices during active deliveries.
- Technical Information: IP address, device type, browser, operating system, access timestamps, and referring URLs.
- Usage Information: navigation behaviour, features used, pages visited, booking history, search queries.
- Delivery and Operational Information: package descriptions, declared values, confirmation photographs, and CCTV footage from our facilities.
- Marketing and Communications Information: communication preferences and engagement metrics with marketing content.
We do not intentionally collect sensitive personal data (race, religion, health, biometric identifiers, political opinions) unless legally required.
4. How We Collect Your Information
We collect information through:
- Direct interactions: account creation, booking, KYC verification, support contact.
- Automated technologies: cookies and tracking technologies on our website and application. See our Cookie Policy.
- Third parties: payment processors, identity verification providers, analytics partners.
5. Legal Basis for Processing (NDPA 2023)
Our processing relies on these legal bases:
- Contractual necessity: managing accounts, processing bookings, dispatching riders, completing deliveries.
- Legal obligation: tax compliance, anti-money-laundering rules, regulatory requirements.
- Legitimate interests: fraud prevention, abuse detection, service improvement, performance reporting. Balanced against your rights.
- Consent: freely given, specific consent for purposes like marketing communications. Withdrawable any time.
6. How We Use Your Information
We use personal information to:
- Create and manage BlackBoxNG accounts with identity verification.
- Process, dispatch, and track delivery bookings.
- Communicate about booking status, delivery attempts, and support queries.
- Process payments and issue receipts.
- Conduct KYC identity verification.
- Detect and prevent fraud, abuse, and unlawful activities.
- Personalise the platform experience.
- Send service notifications and promotional communications where you have opted in.
- Comply with legal and regulatory obligations.
- Enforce our Terms of Service and protect rights and safety.
7. Location Data and Delivery Tracking
We record pickup and drop-off addresses for rider assignment, fee calculation, and routing. During an active delivery, we track rider geo-location in real time to confirm pickup arrival, provide live status updates, and support dispatch operations.
We do not retain rider geo-location data beyond delivery completion and dispute resolution windows. We do not use it for persistent navigation profiling.
8. Information Sharing
We do not sell personal data. We share it only when necessary, with:
- Riders and delivery partners: pickup address, drop-off address, contact phone number, and package details, shared only with the assigned rider.
- Payment processors: payment data for transaction authorisation and completion. We do not store full card details internally.
- Technology and service providers: cloud hosting, analytics, identity verification, and customer support providers, all bound by contractual confidentiality.
- Professional advisers: lawyers, auditors, and insurers for legal advice, compliance reviews, and insurance claims.
- Regulatory authorities: disclosures required by Nigerian law, court orders, or lawful government requests.
- Business transfers: data transfer in a merger, acquisition, or sale of the business, with appropriate safeguards.
9. Data Security
Our security measures include:
- Industry-standard encryption in transit and at rest.
- Restricted access on a need-to-know basis with confidentiality obligations.
- Firewalls and intrusion detection systems.
- Multi-factor authentication for internal system access.
- Regular security reviews and vulnerability assessments.
We report data breaches to the Nigeria Data Protection Commission within 72 hours where they are likely to risk individual rights and freedoms. We notify affected individuals without undue delay for high-risk breaches.
Compromise contact: hello@blackboxng.com or +234 704 911 7938.
10. Data Retention
Our retention periods:
- Active accounts: the duration of the relationship plus three (3) years after account closure.
- Transaction and delivery records: a minimum of six (6) years for tax, accounting, and dispute resolution.
- Marketing preferences: until consent is withdrawn.
- Security and fraud data: the duration of the investigation and resolution.
We respond to account deletion requests within five (5) business days of a verified request, except where retention is legally required.
11. Your Rights Under the NDPA
You have the following rights:
- Right of Access: request a copy of the personal data we hold about you and information about how we process it.
- Right to Rectification: request correction of inaccurate or incomplete data.
- Right to Erasure: request deletion where we have no lawful basis to retain it.
- Right to Restriction: request that we pause or restrict processing (e.g. while accuracy is being verified).
- Right to Data Portability: request a structured, machine-readable copy where processing is consent- or contract-based and automated.
- Right to Object: object to legitimate-interests-based processing or direct marketing. We will stop unless we have compelling grounds to continue.
- Right to Withdraw Consent: withdraw consent at any time. This does not affect the lawfulness of processing carried out beforehand.
- Right to Account Deletion: email hello@blackboxng.com with the subject "Account Deletion Request".
We respond within 30 days. Identity verification may be required.
12. Children's Privacy
Our services are not directed at individuals under 18. We do not knowingly collect personal data from children. If you suspect we hold child data without appropriate consent, report it to hello@blackboxng.com for prompt deletion.
13. Marketing Communications
We send promotional emails or messages only where you have given consent. You can opt out by clicking the unsubscribe link in marketing emails or by emailing hello@blackboxng.com with the subject "Unsubscribe".
Opting out does not affect transactional or booking-related communications.
14. Links to Other Platforms
Our website and application link to third-party sites with their own privacy policies. Those sites are beyond our control. We encourage you to review their privacy policies before sharing information.
15. Changes to This Policy
We may update this policy to reflect changes in our data practices, the law, or our services. We will revise the "Last Updated" date accordingly. Material changes trigger an email notification or a prominent platform notice. Please review this policy periodically.
16. Contact Us
Contact details:
- Email: hello@blackboxng.com
- Phone: +234 704 911 7938
- Address: 109 Muslimat Oginla Street, God First Estate, Owode Onirin, Lagos
- Support hours: Monday to Saturday, 9 AM to 5 PM (WAT)