← Back to Shop4Me

Privacy Policy

Last updated 2026-07-01

Shop4Me ("we", "us") provides a personal shopping and delivery service in Nigeria. This policy explains what personal data we collect, why, and the rights you have over it under the Nigeria Data Protection Act 2023 ("NDPA").

1. What we collect

Account details: your name, phone number, and optionally an email address and profile photo.

Order details: delivery addresses, shopping lists, order history, and payment status (we never see or store your card or bank details — Paystack processes those directly).

Location data: while you're actively delivering an order as a driver, we collect your device's location so the customer can track their delivery. Shoppers are not location-tracked, since they work from a fixed store.

Communications: messages you send us for support, and the content of ratings/reviews you submit.

Device data: your push-notification token, so we can notify you about order updates.

2. Why we collect it

To create and manage your account and let you place, fulfill, or deliver orders.

To process payments and payouts via Paystack.

To show delivery progress and estimated arrival to customers.

To send order-status notifications and respond to support requests.

To maintain the safety and integrity of the marketplace (fraud prevention, review moderation).

3. Who we share it with

Paystack, our payment processor, for processing payments and payouts.

The other parties to your order — a customer sees their assigned shopper's and driver's name and, while a delivery is active, the driver's live location; a shopper or driver sees the customer's delivery address and order contents.

Firebase Cloud Messaging, to deliver push notifications to your device.

Law enforcement or regulators, only where required by Nigerian law.

4. How long we keep it

Account and order records are kept for as long as your account is active, plus a reasonable period afterward for tax and dispute purposes.

Delivery location history is kept for 90 days and then automatically deleted.

One-time verification codes (OTPs) are deleted within 24 hours regardless of whether they were used.

If you delete your account, we anonymize your personal details after a 30-day grace period (see Section 6) — order records are kept in anonymized form since we have a legal obligation to retain transaction history.

5. Your rights under the NDPA

You can request a copy of the personal data we hold about you, ask us to correct inaccurate data, or ask us to delete your account entirely.

You can withdraw consent to location tracking at any time by going offline as a driver — this will stop new location pings but won't retroactively delete history already collected for completed deliveries.

To exercise any of these rights, contact us through the in-app support channel.

6. Deleting your account

You can request account deletion at any time from your Account screen. Your account is deactivated immediately, and your personal data is permanently anonymized 30 days later, giving you time to change your mind by contacting support.

Order and payment records tied to your account are kept in anonymized form after deletion, since we're legally required to retain transaction records for a period even after a customer or worker leaves the platform.

7. Contact

Questions about this policy can be sent to us through the in-app "Need help?" support channel.