Understanding Our

PRIVACY

Privacy Policy for Mega Dispatch

Mega Dispatch Logistics (“Mega Dispatch”, “we”, “us”, or “our”) is committed to protecting the privacy of its users and compliance with applicable data protection laws (including Nigeria’s NDPR and principles of the GDPR). This Privacy Policy explains how we collect, use, share, and protect your personal data in connection with our logistics and delivery services and customer support. The policy applies to all users of our services, including consumers, business partners, delivery riders, and other logistics personnel.

Data Collection and Usage

We collect personal information that is necessary to provide and improve our services. This includes information you provide to us and data we collect automatically:

Information you provide directly: full name, email address, phone number, street address, billing/shipping address, payment information (e.g. credit card or bank details), and any other details you submit when creating an account, placing an order, or contacting customer support. For example, to process your delivery orders and payments, we need to know your name, contact and address details.
Location data: If you use our mobile app or delivery tracking, we collect geolocation data (e.g. GPS coordinates) to plan routes and monitor deliveries in real time.
Usage and device data: We may collect technical data (such as IP address, device identifiers, browser type, and usage logs) when you visit our website or use our app to help us enhance system performance and security.
Usage Data: We collect information about how you use our Services, such as your ride history, pickup and drop-off locations, and app interactions.

We use the above data for purposes including:

Service provision: to operate and improve our logistics, delivery and customer support services (e.g. scheduling pickups, providing real-time tracking, fulfilling orders, and processing payments).
Communications: to contact you about your orders, account status, and service updates, and to respond to your inquiries or support requests.
Analytics and improvement: to analyze how our services are used and to improve our technology and user experience. We process data for legitimate interests such as analyzing usage patterns, testing features and managing our platform – for example, gaining insights into user behavior and improving our services.
Marketing (with consent) with your consent, we may send you promotional emails or messages about our offers and news. You may opt in to receive marketing communications and can opt out at any time. As one logistics provider notes, customers who opt in to marketing can unsubscribe through provided links.
Legal compliance and protection:to comply with legal obligations (e.g. tax or reporting requirements), prevent fraud, resolve disputes, or protect our rights and property.

We limit our data collection to what is relevant and necessary for these purposes. All data collected is stored securely and used only as described in this policy.

Legal Basis for Processing

We process personal data on lawful grounds in accordance with the Nigerian Data Protection Regulation (NDPR) and similar international standards. The legal bases include:

Contractual necessity: processing is required to fulfill our contract with you (e.g. delivering your package, billing, and providing customer support).
Legal obligation: processing is necessary to comply with laws and regulations (e.g. retaining records for taxation or regulatory audits).
Legitimate interests: we process data for our legitimate business interests, provided they do not override your privacy rights. For instance, we use data to improve our website and services through testing and analytics (e.g. to optimize our platform and enhance data security). Such interests include fraud prevention and service optimization, as long as they are balanced against your rights.
Consent: where required (e.g. for marketing or non-essential location services), we obtain your consent before processing your data. You may withdraw consent at any time without affecting the lawfulness of prior processing.

In all cases, we ensure our processing is transparent and lawful. As the NDPR specifies, processing is lawful only if it meets one of these bases. We will inform you of the specific legal basis whenever we collect your data.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies on our website and apps to enhance functionality and analyze usage. These may include session cookies (temporary) and persistent cookies. For example:

Authentication and functionality: cookies help keep you signed in and remember preferences (e.g. language, customer settings).
Analytics: we use web analytics (such as Google Analytics) to understand how users interact with our site, enabling us to improve performance and content. Cookies may “recognize you and your device” to track usage and improve service quality.
Advertising and personalization: cookies and pixels may be used to deliver personalized ads or offers and to measure their effectiveness. They also enhance security by helping to detect and prevent fraud. For instance, cookies may be used to “help ensure that account security is not compromised” and to “mitigate risk and prevent fraud”.

You can manage or delete cookies through your browser settings. As Oando PLC’s policy notes, you may “enable, disable, block, and delete cookies by activating the cookie settings on your internet browser”. Note that blocking cookies may affect website functionality. We do not use cookies to collect highly sensitive information without your consent.

Data Sharing and Third Parties

We do not sell your personal information. We share your data only as necessary to provide our services or for legal reasons:

Service providers: We may disclose data to third parties who perform functions on our behalf (e.g. payment processors, IT and cloud service providers, logistics partners, marketing agencies). These providers are bound by contractual obligations to maintain confidentiality and use data only for the purposes we specify. For example, to process your transaction we may share your name, address, payment and contact details with financial institutions or vendors.
Affiliates and partners: Our subsidiaries or affiliates may access your data for internal business purposes (e.g. analytics, or providing a unified experience across services), always under strict confidentiality.
Legal and regulatory authorities: We may share data when required by law or court order (e.g. in response to subpoenas or compliance obligations). We may disclose information to protect Mega Dispatch’s rights or to prevent fraud or illegal activities. As stated in other Nigerian companies’ policies, data may be shared with “government agencies” or “judicial authorities” in response to legal requirements.
Business transfers: If Mega Dispatch is involved in a merger, acquisition, or asset sale, user data may be disclosed or transferred as part of that transaction (subject to this policy or notice and, if required, your consent).

In all sharing, we implement safeguards: third parties must use your data only for the specified purpose and protect it in accordance with the NDPR. For instance, the NDPR requires that any third-party data processing be governed by a written contract, ensuring confidentiality and compliance.

International Data Transfers

Mega Dispatch is based in Nigeria but may transfer and store personal data outside Nigeria (for example, using international cloud services or global partners). When we transfer data across borders, we do so in compliance with NDPR requirements. NDPR only allows transfer to countries that provide “adequate data protection” as determined by Nigeria’s regulator. Accordingly, we transfer personal data to foreign jurisdictions only if: (i) the receiving country is officially recognized as having adequate safeguards, or (ii) appropriate safeguards (like NDPR-standard contractual clauses) are in place, or (iii) we have obtained your explicit consent for the transfer. As one Nigerian privacy policy explains, transfers to foreign countries occur only when NDPR conditions are met. We also ensure that, wherever data is processed or stored, it remains subject to robust security controls.

Data Security Measures

User Rights

Under the NDPR (and aligned with GDPR principles), you have the following rights regarding your personal data:

Right of access: You may request a copy of the personal data we hold about you. We will provide it within the time frame required by law (typically within 30 days), unless doing so would adversely affect others’ rights.
Right to correction: You may request that we correct or update any inaccurate or incomplete data. It is important that the data we hold is accurate, so please inform us of any changes.
Right to withdraw consent: Where we process data based on your consent (for example, marketing communications), you may withdraw consent at any time. This will not affect the lawfulness of processing carried out before your withdrawal.
Right to object/restrict processing: You can object to or ask us to restrict processing of your personal data (for example, if you believe it is inaccurate or the processing is not justified). We will comply unless we have compelling legal grounds to continue processin
Right to data portability: You may request a copy of your data in a structured, machine-readable format, or ask us to transfer it to another controller, to the extent technically feasible
Right to erasure (“right to be forgotten”): You may ask us to delete your personal data when it is no longer needed for the purposes collected or if we have no legitimate reason to continue processing it. We will comply unless there are overriding legal obligations to retain it.
Right to lodge a complaint: If you believe your privacy rights have been violated, you may contact us (see below) or lodge a complaint with Nigeria’s National Data Protection Commission (NDPC) or other relevant supervisory authority. We strive to resolve issues internally whenever possible.

To exercise any of these rights, please contact us using the information below. We will respond to valid requests promptly and in accordance with legal requirements..

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described above or as required by law. In general, this means keeping transactional and account data for a limited period (for example, around seven (7) years after your last engagement with us), unless a longer retention is required by law (such as tax or financial regulations). Once data is no longer needed, we securely delete or anonymize it. This is consistent with NDPR principles, which specify that personal data “should be stored only for the period within which it is reasonably needed”.

Changes to the Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any revised policy will be posted on our website with its effective date. If we make significant changes, we will notify you by email or in-app notice before they take effect. Your continued use of our services after changes are posted will signify your acceptance of the updated policy. We encourage you to review this Privacy Policy periodically.

Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or our data practices, please contact Mega Dispatch Logistics at:

Email: support@megadispatch.com.ng

Phone: 0707-155-6624 (customer support)