Privacy notice

Who we are

EviPostal is shipping software for businesses in Nigeria. This notice explains what we collect from the people who use our website and our app, why we collect it, how long we keep it and who we share it with. It covers evipostal.com and app.evipostal.com.

The business that uses EviPostal to serve you, such as a shipping store, a logistics company or an online seller, is responsible for the details it enters about you. We process those details on its behalf and under its instructions.

What we collect

• Account details for the people who sign in: name, email address, a hashed password, and the phone number if one is given.
• Business details: the business name, its stores and branches, and the bank account the business enters so its card sales can be paid to it. We never store card numbers.
• Shipment details a business enters so a carrier can deliver: the sender’s and receiver’s names, phone numbers and addresses, and what is in the parcel.
• Payment records: amounts, dates and the references the payment provider gives us.
• Messages sent through the contact form, with the name, email address and phone number given.
• Technical records, such as the IP address, the browser and the time of a request, kept in logs for security and support.

Why we use it

• To run the service: compare carrier prices, book shipments, print labels and receipts, and show tracking.
• To take and record payments, and to pay a business its card sales.
• To keep accounts safe: signing in, locking an account after repeated failed attempts, two-step sign-in and activity logs.
• To answer messages and support requests.
• To meet legal duties, such as keeping financial records.
• To understand how the product is used, from figures that do not identify a person.
• We do not sell personal data and we do not use it for advertising.

Who we share it with

Each of these receives only what it needs for its job.

• The carriers that deliver a parcel: the names, phone numbers and addresses on the label.
• The payment provider (Paystack) that takes card payments and pays card sales to a business’s bank account.
• The email provider that sends receipts, tracking updates and account emails on our behalf.
• The companies that host our servers and store our files.
• A court, a regulator or the police, when the law requires it.

How long we keep it

• Account and business details: while the account is open, then for as long as Nigerian tax and company law requires.
• Shipment and payment records: as part of the business’s financial history, for the period the law requires.
• Contact-form messages: until they are dealt with, and for a reasonable time afterwards.
• Logs: for a short, fixed period, then deleted.
• The exact periods will be stated here once they have been reviewed.

Your rights

Under the Nigeria Data Protection Act 2023 you can ask what we hold about you, ask for a copy, ask us to correct it, ask us to delete it where the law allows (financial records must be kept), object to or restrict how we use it, withdraw a consent you gave, and complain to the Nigeria Data Protection Commission.

Write to us using the details on the contact page. If you are the customer of a business that uses EviPostal, ask that business first; we help it answer.

Cookies

We use only the cookies needed to run the site and the app: a session cookie when you sign in, and a note in your browser that you have seen the cookie notice. There are no advertising or analytics cookies.

Security

Passwords are stored hashed, connections are encrypted, platform staff use two-step sign-in, and access to personal data is limited to the people who need it for their work. No system is perfectly secure. If something goes wrong that affects you, we will tell you and the regulator as the law requires.

Changes and contact

When this notice changes we update this page and the date at the top. Our contact details are on the contact page.