AwaHop and AwaRuns Privacy Policy

AwaHop and AwaRuns are services operated by Awa Technology Services Ltd., which is responsible for the personal information described in this Privacy Policy.

Registered address: House 4, 1 E Road, Phase 2, F.H.A., Lugbe, Abuja, Federal Capital Territory, Nigeria.

This Policy explains how we handle personal information relating to riders, drivers, delivery customers, couriers, delivery recipients, people who contact us and visitors to our public website at awahop.ng.

For general enquiries or privacy-related requests, contact us at admin@awahop.com. Privacy requests will be directed to the person responsible for data protection.

We process personal information in accordance with the Nigeria Data Protection Act 2023 (NDPA), applicable regulations and guidance issued by the Nigeria Data Protection Commission (NDPC), and other applicable Nigerian laws.

This Policy should be read together with the relevant service Terms and any other notices provided when information is collected.

Accounts: Name, phone number, email address, profile details and information used to create, authenticate and manage an account. If you sign in through an available third-party provider, we receive information supplied through that process.

Driver and courier verification: Identity and eligibility information, driving licence, vehicle and application information, verification results, government-issued identification details and payout bank details where applicable. Identity checks may include photographs and facial-verification information where used.

Rides: Pickup points, destinations, routes, distances, times, fares, ride status, trip history and information needed to coordinate a booking.

Deliveries: Collection and delivery addresses, recipient name and phone number, notes and instructions, parcel description and selected size, declared value, handling details, collection and delivery codes, fees and delivery status. Where you supply another person's details, provide only necessary information and ensure you have authority to do so. We will give notices to those people where required by law.

Location: Information used to identify pickups and destinations, match jobs, calculate routes and arrival times, monitor active rides or deliveries, and investigate safety concerns or disputes. This may include a driver's or courier's latest position and route information retained in relevant job records.

Payments: Transaction references, amounts, payment status, refunds, commissions, earnings and payout details. Payment providers process payment-card credentials. AwaHop does not store full card numbers or card security codes; limited card descriptors, such as the last four digits or card brand, may be recorded.

Support, security and devices: Enquiries, support messages, complaints, incident information, information you provide as evidence, emergency contact details where supplied, device or browser information, operating system, application version, IP address and technical logs where processed to operate and secure the service.

We use information to manage accounts; provide, coordinate and price rides and deliveries; calculate routes and arrival times; arrange payments and payouts; verify eligibility; communicate with service participants; investigate complaints, fraud and safety incidents; respond to privacy requests; maintain service security and reliability; and meet applicable legal, tax, accounting and regulatory obligations.

Depending on the purpose, we rely on performance of a contract or steps requested before entering a contract; compliance with a legal obligation; legitimate interests, subject to your rights; consent where required, including for optional uses; and vital interests in an emergency where legally permitted.

You may withdraw consent for processing based on consent without affecting processing lawfully carried out before withdrawal.

Where necessary for the relevant purpose, information may be shared with the rider, driver, sender, recipient or courier involved in a job; payment and payout providers and banks; mapping, communication, hosting and other service providers; and authorised support, safety, professional or legal personnel.

Access is limited on a need-to-know basis.

We disclose information to courts, regulators, law-enforcement agencies and other authorities only where required or otherwise lawfully justified. We assess the requesting authority and lawful basis, limit disclosure to information necessary for the request, and keep appropriate records. Where lawful and appropriate, we inform the affected person.

We do not sell personal information or use it for advertising tracking.

Our website provides information about AwaHop, AwaRuns and Awa Technology Services Ltd.

The website does not currently use advertising-tracking cookies, separate marketing analytics or an online contact form.

When you use the Email Us link, your email application opens. We receive and process the information you choose to send us to respond to your enquiry.

Our hosting providers may process routine technical information necessary for website delivery, administration and security.

We use automated systems to support ride and delivery matching, route and fare calculations, and other service operations.

When you use AI-assisted Help, the messages you submit and relevant service information are processed using a third-party AI service to assist with your enquiry. You may request human support.

Personal information is handled in accordance with this Privacy Policy, including its provisions on service providers, security and international data transfers.

Some of our technology and service providers may process personal information outside Nigeria.

Where personal information is transferred internationally, we will comply with applicable Nigerian data protection laws and ensure appropriate safeguards are in place to protect that information.

We retain personal information only for as long as necessary to provide our services and meet applicable legal, accounting, safety, fraud-prevention and dispute-resolution obligations.

Financial and accounting records are retained for at least six years where required by law, subject to any longer applicable legal obligation.

Other information, including ride, delivery, identity, location and incident records, is retained according to its purpose and applicable legal requirements. Detailed location information will be minimised when no longer necessary.

You may request account deletion through the available in-app or public account-deletion process.

Where no continuing lawful basis exists, personal information will be erased or anonymised without undue delay. Certain records may be retained where necessary to satisfy legal obligations, resolve disputes, investigate incidents or establish, exercise or defend legal claims.

We will respond to privacy and deletion requests without undue delay and normally within 30 days. Where legally permitted, complex requests may require an extension of up to 60 additional days, with notice provided within the initial response period.

Records subject to a lawful legal hold may be preserved while that basis continues and reviewed when the hold ends.

We use appropriate technical and organisational measures intended to protect information against unauthorised access, loss, misuse or disclosure, including appropriate access controls and security review.

No system can guarantee absolute security.

Where a personal-data breach is likely to result in a risk to individuals' rights and freedoms, we will notify the NDPC within 72 hours where legally required, and notify affected people where the NDPA requires it.

Subject to applicable law and exceptions, you may ask to access or correct personal information; request erasure or restriction; object to certain processing; receive applicable portable information; withdraw consent where consent is relied on; and exercise applicable rights relating to automated decisions with legal or similarly significant effects.

We may verify identity and will explain a refusal or lawful retention where appropriate.

For requests, contact admin@awahop.com with the subject Data Protection Request, or use available app privacy functions.

Account deletion can also be requested from the public deletion page without signing in.

Device location permissions may be managed in device settings, but disabling location may limit relevant service features.

You may complain to the Nigeria Data Protection Commission at https://ndpc.gov.ng.

AwaHop and AwaRuns account holders must be at least 18 years old; the services do not deliberately offer accounts to children.

Where a lawful booking by an adult involves a minor, the adult is responsible for their authority, the booking and appropriate supervision.

We collect only information about the minor necessary for the service and obtain parental or guardian consent where required.

If we discover an account created for someone under 18, we may verify age, suspend or close the account, and handle associated information according to applicable law.

We will update the version and date of this Policy when it changes.

Where a material change affects the handling of personal information, we will provide appropriate notice and obtain fresh consent when legally required.