Privacy Policy

1. Information We Collect

We collect information you give us directly, information generated when you use our services, and information received from third parties (such as payment processors or partner merchants).

Account information

• Full name, phone number, and email address
• Profile photo (optional)
• Date of birth (for age-restricted services and regulatory compliance)
• Password and authentication credentials

Service-specific information

• Pickup and drop-off addresses for ride-hailing and dispatch trips
• Delivery address and recipient name for grocery and courier orders
• Order contents, special instructions, and substitution preferences for grocery deliveries
• Vehicle make, model, plate number, and license information (drivers only)
• Insurance certificate and driving history (drivers only)

Payment information

Payment card details are processed and tokenised by our PCI-DSS compliant payment partners. Bizzo stores only a masked card reference and expiry date — not your full card number or CVV. For drivers, we collect bank account details for payout processing.

Device and usage information

• Device model, operating system, and unique device identifiers
• IP address and approximate network location
• App version, crash logs, and diagnostic data
• In-app interactions: screens visited, buttons tapped, session duration

Communications

• In-app messages, support chat logs, and emails exchanged with Bizzo
• Ratings and written feedback you submit after a ride, dispatch, or delivery
• Call logs (date, time, duration) for calls placed through our masked calling feature — call content is never recorded

2. How We Use Your Data

We use the information we collect to:

• Match riders with drivers, businesses with dispatchers, and customers with grocery shoppers
• Process payments, issue receipts, and handle refunds or disputes
• Enable real-time communication between users (e.g., driver-to-rider calls, shopper-to-customer messages)
• Provide estimated arrival times and order status notifications
• Personalise your experience, such as saved addresses or preferred payment methods
• Detect and prevent fraud, abuse, unsafe driving behaviour, and policy violations
• Comply with applicable laws and respond to lawful requests from regulatory or law-enforcement agencies
• Improve our algorithms, routing models, and dispatch systems using aggregated, de-identified data
• Send service-related communications (receipts, trip summaries, order confirmations)
• Send promotional messages where you have opted in to receive them

3. Location Information

Location data is central to how Bizzo works. Here is exactly what we collect and when:

Riders and delivery recipients

• Precise device location when you open the app to book a ride or place an order, to show nearby drivers and estimated arrival times
• Pickup and destination coordinates entered for each trip or order
• If you grant background location permission, we may collect location to enable features like automatic trip detection — you can revoke this at any time in your device settings

Drivers, dispatch riders, and shoppers

• Continuous precise location while you are online in the app, to enable dispatch and routing
• Trip-level GPS trace for every accepted job (route taken, stops made, duration)
• Location data is used to calculate earnings, resolve disputes, and verify trip completion
• Location collection stops when you go offline or close the app

Location data retention

Trip-level location traces are retained for 12 months and then aggregated and anonymised. Aggregated data (e.g. demand heatmaps) may be retained indefinitely for service improvement.

4. Ride-Hailing & Dispatch

When you use Bizzo Ride or Bizzo Dispatch (our corporate and logistics dispatch product), the following additional data practices apply.

Trip data shared with drivers

• Your first name and profile photo are shared with your assigned driver before pickup
• Your pickup location is shared when a trip is accepted; your destination is shared only after the trip starts, to prevent discrimination based on destination
• Your phone number is never directly shared — all calls and messages go through our masked communication system

Trip data shared with riders

• Driver's first name, profile photo, star rating, vehicle make/model, and plate number
• Real-time driver location during the trip

Safety features

• Trip-sharing: you can share a live link to your trip with a trusted contact
• Emergency button: activating the SOS button shares your real-time location and trip details with our safety team and, where required, local emergency services
• Telematics: we collect speed, braking, and acceleration data via your device's sensors during trips to monitor safe driving and provide driver feedback

Dispatch-specific data

• For corporate dispatch accounts, the company administrator has visibility into trip history, cost reports, and staff travel patterns within their account
• Employees using a corporate profile should refer to their employer's privacy notice for additional detail on how the company uses that trip data

5. Grocery Delivery

Bizzo Market connects you with local supermarkets, open markets, and specialty food merchants. The following data practices apply to grocery and courier delivery orders.

Order data

• Items you add to your cart, substitution preferences, and special instructions
• Order history is retained in your account so you can reorder quickly
• Allergy or dietary notes you include in your order instructions are stored alongside the order record

Data shared with merchants

• Your first name, order contents, and delivery address are shared with the merchant to fulfil your order
• Merchants do not receive your full contact details; communication is routed through the Bizzo platform
• Merchants may retain order data in accordance with their own privacy policies — we recommend reviewing them

Data shared with shoppers

• Your first name, delivery address, order contents, and any substitution notes are shared with your assigned shopper
• Shoppers cannot see your payment method or full account profile

Merchant partners

If you access Bizzo Market through a partner merchant's own app or website (a "white-label" integration), the merchant may act as a joint data controller. In such cases, both Bizzo's and the merchant's privacy policies apply. Bizzo will identify such integrations clearly in the app.

6. Sharing Your Information

We do not sell your personal data. We may share your information in the following circumstances:

Service providers

We engage third-party companies to perform functions on our behalf — including payment processing, cloud hosting, identity verification, mapping and routing, push notification delivery, and customer support tooling. These providers access only the data necessary to perform their function and are bound by confidentiality obligations and data processing agreements.

Legal and regulatory disclosures

We may disclose your information where required by law, court order, or regulatory authority, including the Nigeria Data Protection Commission (NDPC) and equivalent regulators in other jurisdictions where we operate. We will notify you of such disclosures where legally permitted to do so.

Safety disclosures

Where we reasonably believe it necessary to prevent serious harm to any person, we may share relevant information with law enforcement, emergency services, or our internal safety team — without prior notice to you.

Business transfers

If Bizzo is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you via email and a prominent in-app notice before your data is transferred and becomes subject to a different privacy policy.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. Specific retention periods:

• Account data: retained for the life of your account, plus 3 years after closure to support dispute resolution and regulatory compliance
• Trip and order records: 5 years, to comply with financial and tax record-keeping obligations
• GPS traces: 12 months in full, then aggregated and anonymised
• Support communications: 2 years from the date of the last interaction
• Deleted account data: most data is permanently deleted within 90 days of an account deletion request; some data may be retained longer where required by law or to resolve open disputes

8. Your Rights & Choices

Under the Nigeria Data Protection Act 2023 (NDPA) and applicable data protection laws in other jurisdictions where Bizzo operates, you have the following rights:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate or incomplete data
• Deletion: request deletion of your data, subject to legal retention obligations
• Portability: receive your data in a structured, machine-readable format
• Objection: object to processing based on our legitimate interests
• Withdraw consent: where processing is based on consent (e.g. marketing emails), withdraw it at any time without affecting prior processing
• Opt out of marketing: use the unsubscribe link in any marketing email, or toggle off in Settings > Notifications

To exercise any of these rights, email privacy@bizzoride.com with the subject line "Privacy Request". We will respond within 30 days. We may ask you to verify your identity before processing your request.

9. Children's Privacy

Bizzo's services are not directed at children under 18. We do not knowingly collect personal data from anyone under 18. If you believe a child has created a Bizzo account, please contact us at privacy@bizzoride.com and we will delete the account promptly.

10. Security

We implement technical and organisational measures designed to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
• Strict role-based access controls — employees access only the data their role requires
• Regular third-party security audits and penetration testing
• Automated anomaly detection to identify unusual access patterns
• Multi-factor authentication for all internal systems

No system is completely secure. In the event of a data breach that is likely to result in a high risk to your rights, we will notify you and the NDPC without undue delay and within the timeframes required by law.

11. Changes to This Policy

We may update this policy from time to time. If we make material changes — such as changes to how we use your data or share it with third parties — we will notify you via in-app notification and email at least 14 days before the changes take effect. Continued use of our services after the effective date constitutes acceptance of the revised policy.

For non-material changes (such as clarifications or formatting corrections), we will update the "last updated" date at the top of this page.

12. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or how we handle your data, please contact our Data Protection Officer:

You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng if you believe your data protection rights have been violated.