Privacy Policy – Jolo
Effective Date: 25/9/2025
Last Updated: 25/9/2025
This Privacy Policy explains how Jolo Technologies Limited (“Jolo”, “we”, “our”, “us”) collects, uses, shares, and protects your personal data when you use our website, mobile application, and related services (the “Services”).
By using our Services, you consent to the practices described in this Privacy Policy, in line with the Nigerian Data Protection Act (NDPA) 2023, NDPR,and other applicable data protection laws.
1. Scope of This Privacy Policy
This Policy applies to:
- Customers/Users ordering food, groceries, or sending parcels.
- Vendors/Restaurants listing meals and fulfilling customer orders.
- Riders/Delivery Partners who pick up and deliver orders/parcels.
- Visitors to the Jolo website or mobile application.
2. Data We Collect About You
When you use Jolo’s Services, we collect different categories of personal data depending on whether you are a customer, vendor/restaurant, or rider/delivery partner.
A. Information You Provide Directly
1. For Customers/Users:
- Identity Data: Full name, gender, date of birth (optional), email address, etc.
- Contact Data: Phone number, email address, delivery addresses, etc.
- Account Data: Username, password, profile picture (if uploaded), order history.
- Payment & Financial Data: Debit/credit card details, bank account information (processed securely through third-party processors), wallet/balance information within the Jolo app
- Support & Feedback Data: Information you provide when contacting customer support, reporting issues, or filling out surveys.
2. For Vendors/Restaurants:
- Business Identity Data: Registered business name, CAC certificate/incorporation documents, TIN (Tax Identification Number).
- Contact Data: Official business address, contact number, business email, representative/manager’s name.
- Banking & Settlement Data: Bank account information for payouts, proof of ownership.
- Menu & Inventory Data: Information on listed products, pricing, promotional materials, photos/videos provided to Jolo.
3.For Riders/Delivery Partners:
- Identity Data: Full name, NIN (for verification).
- Contact Data:Phone number, address, emergency contact details.
- Verification Data:Driver’s license, vehicle particulars, proof of insurance, guarantor details.
- Banking Data: Account details for payment/settlement of delivery earnings.
- Employment/Onboarding Data: Background checks, training records, agreements signed with Jolo.
B. Information We Collect Automatically
When you interact with Jolo’s app, website, or rider platform, we automatically collect:
- Device Information: IP address, device type, browser type, operating system, unique device identifiers, app version.
- Usage Information:
- Pages/screens visited within the app.
- Search history (e.g., groceries searched, restaurants browsed).
- Clickstream data (buttons tapped, navigation flow).
- Order preferences (frequently ordered items, delivery frequency).
- Location Information:
- Real-time GPS location (when enabled) to:
- Deliver accurate rider tracking.
- Estimate delivery times.
- Match you to nearby vendors/riders.
- Delivery address coordinates saved for future orders.
- Real-time GPS location (when enabled) to:
- Transaction Data: Time, date, and details of orders placed, cancellations, refunds, and promotional codes used.
- Performance & Analytics Data: App crash logs, error reports, and usage statistics for service improvement.
C. Information From Third Parties
We may receive additional personal data from trusted third-party sources, including:
- Payment Partners & Banks: Confirmation of successful transactions, fraud alerts, chargeback information.
- Logistics & Verification Partners: Identity validation (e.g., NIN verification), background checks for riders, address verification for vendors.
- Marketing & Advertising Partners: Insights into customer engagement with Jolo’s ads (clicks, impressions, conversions).
- Public/External Sources:
- Social media (if you interact with Jolo ads, campaigns, or accounts).
- Public directories (to verify vendor registration or contact info).
- Corporate Partners: If you use Jolo through workplace/community programs, we may receive your details from such organizations.
3. Why We Collect Your Data
| Purpose of Processing | Details of Use | Lawful Basis |
|---|---|---|
| Account creation and management | To register customers, vendors, and riders on the Jolo platform; store profile, login credentials, preferences. | Performance of contract |
| Identity and verification checks | To verify riders’ licenses, vendors’ CAC registration, guarantor details, NIN/BVN (if applicable). | Legal obligation / Legitimate interest |
| Order processing and fulfillment | To receive, process, and deliver customer orders; to share order details with vendors and riders. | Performance of contract |
| Payment processing and settlements | To process customer payments securely; to transfer payouts to vendors and riders; to handle refunds or disputes. | Performance of contract / Legal obligation |
| Delivery tracking and logistics | To provide real-time GPS tracking of riders; to optimize route and delivery times. | Performance of contract / Legitimate interest |
| Customer support and dispute resolution | To respond to inquiries, complaints, or refund requests. | Performance of contract / Legitimate interest |
| Personalization and recommendations | To recommend groceries, restaurants, or services based on order history and preferences. | Legitimate interest |
| Promotions and marketing | To send promotional messages, offers, loyalty programs, and campaigns (via SMS, email, push notifications). | Consent |
| Fraud detection and prevention | To identify and prevent fraudulent transactions, fake accounts, misuse of promotions, and suspicious activities. | Legal obligation / Legitimate interest |
| Security and platform integrity | To monitor for account breaches, delivery fraud, or misuse of services. | Legitimate interest |
| Compliance with laws | To comply with AML, tax, and financial reporting requirements; to respond to law enforcement requests. | Legal obligation |
| Analytics and service improvement | To analyze app/website usage, order patterns, and feedback; to enhance efficiency and develop new features. | Legitimate interest |
| Research and development | To test new services, run pilots, and assess potential business models using anonymized/aggregated data. | Legitimate interest |
| Legal claims and rights | To establish, exercise, or defend against legal claims. | Legitimate interest / Legal Obligation |
4. How We Use Your Data
We use the information we collect for various purposes depending on whether you are a customer, vendor/restaurant, or rider/delivery partner. Our use of your personal data ensures that Jolo can provide safe, reliable, and seamless services.
A. For Customers/Users
We use your data to:
- Account Creation & Verification: Register your Jolo account, verify your identity (including optional NIN/BVN where required by law), and secure login.
- Order Processing & Delivery:
- Match your orders with relevant vendors and riders.
- Confirm, prepare, and deliver your purchases to your chosen address.
- Provide real-time tracking of your rider/delivery.
- Payment Processing:
- Facilitate secure payments via cards, bank transfers, or wallet balance.
- Process refunds, discounts, and promotional credits.
- Customer Support:
- Resolve complaints and disputes.
- Provide order status updates and respond to inquiries.
- Personalization:
- Recommend vendors, groceries, or restaurants based on past orders.
- Save delivery addresses and preferences for faster checkout.
- Communication:
- Send service-related updates (order confirmations, delivery status, account alerts).
- Share marketing offers, discounts, or promotions (only if you have opted-in).
- Safety & Security:
- Detect fraudulent orders or suspicious account activity.
- Protect against unauthorized transactions.
- Service Improvement:
- Analyze purchase history, app usage, and feedback to improve recommendations, delivery times, and platform performance.
B. For Vendors/Restaurants
We use your data to:
- Onboarding & Verification: Confirm business registration, CAC documents, tax details, and authorized representatives.
- Order Fulfilment:Share customer order details (name, items, delivery address) so you can prepare the order accurately.
- Payments & Settlements: Process and transfer payouts to your linked bank account.
- Inventory & Menu Management: Store your product/menu listings, promotions, and availability for customers to browse.
- Support & Communication:Contact you about disputes, refunds, or service improvements.
- Performance Analytics: Provide insights on sales, order volume, customer ratings, and platform engagement.
- Compliance & Security: Prevent fake vendor accounts, monitor fraudulent activities, and ensure service quality standards.
C. For Riders/Delivery Partners
We use your data to:
- Onboarding & Verification: Validate your identity, driver’s license, vehicle information, guarantor details, and background checks.
- Job Allocation: Match you with nearby delivery requests based on your real-time location and availability.
- Navigation & Tracking: Enable GPS navigation and allow customers/vendors to track deliveries in real-time.
- Payments & Earnings: Process delivery fees and transfer earnings to your linked bank account or wallet.
- Support & Dispute Resolution: Investigate complaints, accidents, or payment disputes involving deliveries.
- Safety & Security: Monitor fraudulent rider accounts or misuse of the platform.
- Performance Monitoring: Track delivery ratings, completion rates, and response times to improve service standards.
D. For All Users (Customers, Vendors, Riders)
We also use your data across the platform to:
- Improve Platform Performance: Analyze app usage, crashes, and service bottlenecks to optimize performance.
- Fraud Prevention & Security: : Detect unusual activity, prevent account takeovers, and ensure safe transactions.
- Legal & Regulatory Compliance:
- Fulfill obligations under financial regulations (AML/KYC, tax laws).
- Respond to legal requests or law enforcement inquiries.
- Marketing & Engagement (with consent): Share updates, discounts, loyalty programs, and campaigns that may interest you.
- Research & Development: Use aggregated/anonymized data to test new features, services, and partnerships.
5. Cookies & Tracking Technologies
We use cookies and similar tools to:
- Keep you logged in,
- Personalize your browsing experience,
- Track service usage for analytics and improvement.
You can disable cookies in your browser settings, but some features may not work properly.
6. How We Share Your Data
We do not sell your personal data. We may share your information as follows:
- With Vendors/Restaurants: Limited details such as your name, order, and delivery address to fulfill your request.
- With Riders/Delivery Partners: Your name, delivery address, and contact number so they can complete the delivery.
- With Service Providers: Payment processors, IT/cloud hosting, identity verification services.
- With Regulators/Authorities: To comply with laws, regulations, or law enforcement requests.
- With Group Entities: If applicable, within Jolo’s group for business operations.
- During Business Restructuring: If Jolo undergoes a merger, acquisition, or restructuring (with notice to you).
7. Cross-Border Data Transfers
If personal data is processed outside Nigeria, we ensure compliance with NDPA and use safeguards such as contractual protections to secure your information.
8. Data Security
We take the security of your personal data seriously and implement a combination of technical, organizational, and administrative safeguards to reduce risks of loss, misuse, unauthorized access, disclosure, or alteration.
Our security measures include:
- Encryption and Data Protection
- End-to-end encryption of sensitive information (e.g., payment details) during transmission using SSL/TLS.
- Storage of passwords and authentication data using industry-standard hashing and encryption techniques.
- Tokenization of payment and card information, processed only by certified third-party payment providers.
- Access Controls
- Strict role-based access to ensure only authorized personnel can view or handle personal data.
- Multi-factor authentication for internal systems and staff accounts.
- Regular monitoring and logging of system access.
- System Monitoring & Testing
- Continuous monitoring of our platforms for vulnerabilities and potential breaches.
- Routine penetration testing, vulnerability assessments, and security audits.
- Automated alerts for suspicious or unusual account activity.
- Organizational Safeguards
- Confidentiality agreements and mandatory data protection training for all employees, vendors, and riders with access to user data.
- Clear internal policies on handling, sharing, and storing personal data.
- Vendor due diligence before onboarding third-party service providers.
- Incident Response & Breach Management
- A defined incident response plan to quickly investigate, contain, and resolve security incidents.
- Immediate notification to users and regulators where legally required in case of a data breach.
- User Responsibility
- While we maintain strong security controls, no system is 100% secure.
- Users are responsible for protecting their login credentials, using strong passwords, and keeping devices updated.
- We encourage reporting of any suspected unauthorized access to our support team immediately.
9. Data Retention
We retain your data only for as long as necessary:
- To fulfill the purpose for which it was collected,
- To comply with legal or regulatory obligations,
- To resolve disputes or enforce contracts
When retention is no longer required, we securely delete or anonymize your data.
10. Your Rights Under NDPA/NDPR
As a data subject under the Nigerian Data Protection Act (NDPA 2023) and the NDPR, you have the following rights with respect to your personal data:
- Right of Access
- You can request confirmation of whether we process your personal data and obtain a copy of the data we hold about you, together with details about the purpose of processing.
- Right to Rectification
- You can request correction of inaccurate or incomplete personal data to ensure the information we hold is accurate and up to date.
- Right to Withdraw Consent
- Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect prior lawful processing.
- Right to Erasure (“Right to be Forgotten”)
- You may request deletion of your personal data in certain circumstances, such as when it is no longer necessary for the purposes collected, or where you have withdrawn consent—except where retention is required by law (e.g., tax, AML, regulatory compliance).
- Right to Restrict Processing
- You may request we limit the processing of your data in specific situations, such as while verifying accuracy or handling an objection request.
- Right to Restrict Processing
- You can object at any time to the processing of your personal data for direct marketing.
- You may also object to processing based on legitimate interests, unless we demonstrate compelling legitimate grounds that override your rights and freedoms.
- Right to Data Portability
- You have the right to request a copy of your data in a structured, commonly used, and machine-readable format, and to transmit it to another controller where technically feasible.
- Right Not to Be Subject to Automated Decision-Making
- You have the right not to be subject to decisions based solely on automated processing (including profiling) that produce legal or similarly significant effects, unless such processing is necessary for entering into or performing a contract, authorized by law, or based on your explicit consent.
- Right to Lodge a Complaint
- If you believe your data rights have been violated, you may lodge a complaint with our Data Protection Officer (DPO) or escalate it to the Nigeria Data Protection Commission (NDPC).
How to Exercise Your Rights
To exercise these rights, please contact us using the details provided in the Contact Us section below. We may require you to verify your identity before fulfilling your request, in line with legal requirements.
11. Updates to This Privacy Policy
We may update this policy periodically. Updates will be posted on our website/app with a new “Last Updated” date. For major changes, we will notify you directly.
12. Contact Us
For inquiries or to exercise your data rights, please contact:
- Legal Officer
- support@jolo.ng
- 2, Oyedele Ogunniyi Street, Anthony Village, Lagos
- +234-913-757-8052