DeelaMart Privacy Policy

Oct 2, 2026 · @Kiff

1. Introduction and Scope

This Privacy Policy explains how DeelaMart ("we", "us") collects, uses, shares and protects personal data when you use our websites, mobile apps and related services (the "Platform"). It applies to Customers, Merchants, Couriers and visitors.

DeelaMart acts as the data controller for personal data we collect for our own purposes. Where Merchants or Couriers receive your data to fulfil an Order, they handle it as independent controllers under their own legal duties. By using the Platform, you acknowledge this Policy. Where the law requires your consent, we will ask for it separately.

This Policy should be read with our Terms and Conditions. Capitalised terms not defined here have the meaning given there.

2. Information We Collect

We collect the categories of information below, depending on how you use the Platform.

We do not intentionally collect sensitive data such as health, religion or biometric data. If you give us allergy or dietary information with an Order, we treat it with extra care and share it only with the relevant Merchant. Where we may use facial or document checks for identity verification, we do so only with your consent and as permitted by law.

3. How We Use Your Information

We use personal data only where we have a lawful basis, which may be performance of a contract, our legitimate interests, compliance with legal obligations, or your consent.

• To provide the Platform (contract). Create and manage accounts, process and deliver Orders, take payments, send order updates, and provide customer support.
• To verify and keep users safe (legitimate interests, legal obligation). Verify identity, check eligibility, detect and prevent fraud, abuse and safety incidents, and enforce our Terms.
• To improve and personalise (legitimate interests). Analyse usage, fix bugs, develop features, recommend Merchants and Items, and measure the performance of promotions.
• To communicate (contract, legitimate interests). Send service messages, security alerts and policy updates.
• To market (consent or legitimate interests). Send offers and promotions by email, SMS or push notification. You can opt out at any time.
• To meet legal duties. Keep tax and accounting records, respond to lawful requests from authorities, and resolve disputes.

Automated processing. We use automated tools to match Orders to Couriers, estimate delivery times, detect fraud and rank search results. Where an automated decision significantly affects you, such as an account restriction, you may ask for human review.

4. How We Share Your Information

We do not sell your personal data for money. We share it only as described below.

• Merchants. Your name, Order details, delivery notes and, for delivery, a delivery address, so they can prepare and fulfil your Order.
• Couriers. Your first name, delivery address, contact method (often masked), and Order details needed to deliver.
• Service providers. Payment processors, cloud hosting, identity verification, mapping, messaging, analytics, customer support and fraud prevention providers acting on our instructions under contract.
• Other users. Public reviews and ratings you post are visible, and a Courier's name and photo are shown to Customers on active deliveries.
• Legal and safety. Courts, regulators, law enforcement and others where required by law, or where needed to protect rights, safety or property.
• Business transfers. A buyer or successor in a merger, acquisition or restructuring, subject to this Policy.
• With your consent. Any other sharing you have approved.

We may share aggregated or de-identified data that cannot reasonably identify you.

5. Cookies and Similar Technologies

We use cookies, SDKs, pixels and similar technologies for four purposes:

• Essential. Needed for login, security, checkout and basic functions. These cannot be turned off.
• Preferences. Remember settings such as language and saved addresses.
• Analytics. Show how the Platform is used so we can improve it.
• Advertising. Measure and, where you allow it, personalise marketing.

You can manage non-essential cookies through our cookie banner or settings, and through your browser or device controls. Blocking some cookies may affect how the Platform works. You can also reset or limit your device advertising identifier in your device settings.

6. Location Data

We use location data to show nearby Merchants, calculate delivery fees and times, route Couriers, and help keep deliveries safe.

• Customers. We use the delivery address you enter and, with your permission, your device location. You can turn off device location in your phone settings and enter an address manually.
• Couriers. Real-time location is collected while the Courier app is online and during active deliveries, and may be shared with the Customer and Merchant to track an Order. It is not collected when the Courier is offline.
• Merchants. Business location is displayed to Customers.

We retain precise location history only as long as needed for the purposes in section 8.

7. Payments and Financial Data

Payments are processed by third-party payment providers that are certified to industry security standards, including PCI DSS. DeelaMart does not store full card numbers; we hold a secure token, the card type and the last four digits.

Merchant and Courier bank or wallet details are collected to pay out earnings and are shared only with payout and banking partners. We may use payment and transaction data to detect fraud, resolve disputes and meet tax and accounting duties.

8. Data Retention

We keep personal data only as long as needed for the purposes in this Policy, to meet legal duties, or to resolve disputes. Typical periods are below; local law may require longer or shorter periods.

When data is no longer needed, we delete or anonymise it.

9. Security

We protect personal data with technical and organisational measures that include encryption in transit and at rest where appropriate, access controls based on role and need, staff confidentiality and training, regular security testing, and vendor due diligence. No system can be completely secure, so please use a strong, unique password and keep it private.

If a breach is likely to put your rights and freedoms at risk, we will notify you and the relevant regulator within the time limits set by Applicable Law.

10. International Transfers

We and our service providers may process personal data in countries other than where you live, including countries whose data protection laws differ from yours. Where we transfer data across borders, we use lawful safeguards such as standard contractual clauses, adequacy decisions, or other mechanisms recognised by Applicable Law, and require recipients to protect data to a comparable standard.

11. Your Rights and Choices

Depending on where you live, you may have the following rights:

• Access a copy of the personal data we hold about you.
• Correction of inaccurate or incomplete data.
• Deletion of your data, subject to legal retention duties.
• Restriction of processing in certain circumstances.
• Portability of data you provided, in a common machine-readable format.
• Objection to processing based on legitimate interests, and to direct marketing at any time.
• Withdrawal of consent where processing relies on consent, without affecting earlier processing.
• Review of significant automated decisions.

How to exercise them. Use the privacy controls in the app or contact us using the details in section 14. We may need to verify your identity first. We aim to respond within 30 days, or the period required by law, and will explain any refusal.

Marketing choices. Use the unsubscribe link in any email, reply STOP to SMS, or change push notification settings on your device.

Complaints. You may complain to your local data protection authority at any time. We would welcome the chance to address your concern first.

12. Children's Privacy

The Platform is for adults aged 18 and over (or the age of majority where you live). We do not knowingly collect personal data from children. If we learn that we have collected data from someone under the minimum age, we will delete it and close the account. If you believe a child has given us data, contact us using the details in section 14.

13. Merchants and Couriers

Their data. We collect business, identity, vehicle, banking, performance and, for Couriers, location data to onboard, verify, pay and support them, and to maintain safety and quality. Background checks are run only where permitted by law and with consent, and we receive the results from the screening provider.

Customer data duties. Merchants and Couriers may use Customer data only to fulfil the relevant Order and as the law allows. They must not store it longer than needed, contact Customers for unrelated purposes, sell or disclose it, or add it to marketing lists without consent. Breach of these duties may lead to suspension and legal action.

14. Changes to This Policy and Contact

Changes. We may update this Policy from time to time. We will post the new version with its effective date and, for material changes, notify you by email or in the app. Where the law requires consent for a change, we will ask for it.

Contact. For questions or to exercise your rights, contact DeelaMart's Data Protection Officer or privacy team: Deela Harvest Limited, 87 Idua Road, Eket, Akwa Ibom State, privacy-policy@deelamart.shop, 08160959418.