Effective Date: 17 June 2026 | Last Updated: 17 June 2026
Data Controller: BringitHome Premier Solutions Limited, RC 8477018
DPO Contact: privacy@bringithome.ng
1. INTRODUCTION
BringItHome operates as a Data Controller under the Nigeria Data Protection Act 2023 (NDPA) . This Policy explains how we collect, use, share, and protect your personal data, and your rights as a data subject.
2. DATA WE COLLECT
| Data Type | Who | Why | Legal Basis |
|---|---|---|---|
| Email address | Buyers, Shoppers, Managers | Authentication, communications | Performance of Contract |
| Full name | All | Account identity | Performance of Contract |
| Phone / WhatsApp number | All | OTP, delivery coordination | Performance of Contract |
| Delivery address | Buyers | Order fulfillment | Performance of Contract |
| BVN (encrypted) | Shoppers, Managers | CBN KYC compliance, Paystack setup | Legal Obligation |
| Bank account number | Shoppers, Managers | Payout processing | Performance of Contract |
| Order history | Buyers | Service provision, dispute resolution | Performance of Contract |
| Ratings and reviews | All | Platform quality | Legitimate Interest |
| Device/session data | All | Security, fraud prevention | Legitimate Interest |
3. HOW WE USE YOUR DATA
We use your data to:
- Provide and improve the BringItHome service
- Process payments via Paystack and release escrow funds
- Verify Shopper identity for CBN compliance
- Resolve disputes and investigate reports
- Send transactional notifications (order updates, OTPs)
- Comply with Nigerian legal obligations
We do not use your data for unsolicited marketing without your explicit consent.
4. PUBLIC PROFILE DISPLAY
For Sellers (Freelance Shoppers and Managers), your username, avatar, rating, and aggregate performance metrics are displayed publicly on the platform to Buyers as part of the core marketplace service.
5. DATA SHARING
- Shoppers, Market Managers, and Dispatch Riders: Delivery addresses and contact numbers are shared with our employees (Market Managers) and independent contractors (Shoppers and Dispatch Riders) strictly for the purpose of order fulfillment.
- Paystack Inc.: For payment processing and KYC verification.
- Cloudflare Inc.: For CDN, WAF, and DDoS protection.
- Regulatory Authorities: NFIU, EFCC, police, or courts where legally required. Unauthorized use of data by Data Processors (Shoppers) will result in immediate NDPC reporting.
- No data sales: We do not sell your personal data to any third party.
6. DATA RETENTION
- Account data: Duration of account + 1 year after deletion
- Order/transaction records: 5 years
- Financial/ledger records: 7 years
- BVN (encrypted): 7 years after account closure, per CBN data retention requirements
- Support/dispute records: 3 years
7. YOUR RIGHTS UNDER NDPA 2023
You have the right to Access, Rectification, Erasure, Portability, Objection, and Withdrawal of Consent.
To exercise these rights, please contact our dedicated channels:
- Data requests & deletions: privacy@bringithome.ng
- Legal notices:legal@bringithome.ng
- General help: support@bringithome.ng
We will respond within 30 days .
8. DATA SECURITY
All data is transmitted securely via TLS 1.3. Sensitive fields (BVN) are field-encrypted at rest using AES-256. We maintain immutable audit logs for data access.
9. COOKIES AND SESSION STORAGE
We use browser session storage to maintain your shopping list state during checkout and remember your delivery preferences. We do not use tracking or advertising cookies.
9.1 Push Notifications
If you grant push notification permission, we register a browser or device push token with our notification infrastructure. This token is used solely to deliver order status updates and security alerts. You can revoke push notification permission at any time through your browser or device settings. We do not share push tokens with advertisers.