Privacy Policy for Red Star Express Plc
1. We care about your privacy
This Privacy Policy outlines how Red Star Express Plc, a leading logistics and courier company in Nigeria, collects, uses, processes, and protects your personal data. We are committed to ensuring that your privacy is respected and protected in accordance with the Nigeria Data Protection Act 2023 (NDPA).
By using our services, you consent to the collection and use of your personal data in accordance with this policy.
2. Who We Are
– Company Name: Red Star Express Plc
– Registered Office: 70, International Airport Road, Lagos, Nigeria
– Contact Information: +234(0) 700REDSTAR, dataprotection@redstarplc.com
3. Types of Personal Data We Collect
In the course of providing our logistics services, we collect various types of personal data, including but not limited to:
- Personal Identification Information: Name, address, phone number, email address.
- Payment Information: Debit card details, bank account numbers, payment history.
- Delivery Information: Delivery address, contact information, shipping details.
- Location Data: GPS data for tracking and delivering packages.
- Communication Data: Email communications, chat records, and any customer support interactions.
- Business Information (for corporate clients): Company name, registration number, VAT number.
4. How We Use Your Personal Data
We use the personal data we collect for the following purposes:
- Providing Logistics Services: To manage the delivery and logistics of goods, process orders, and communicate with customers.
- Payment Processing: To handle billing, payment confirmations, and invoicing.
- Customer Support: To respond to queries, process returns or complaints, and provide ongoing support.
- Marketing: To offer promotions, advertisements, and marketing communications (with your consent).
- Legal Compliance: To comply with applicable laws, including tax and customs regulations.
- Operational Purposes: To optimize our services, including analysis of delivery routes, performance, and efficiency.
5. Legal Basis for Processing Personal Data
Under the NDPA 2023, we can only process personal data when we have a valid legal basis for doing so. The legal bases we rely on include:
- Consent: When you provide explicit consent for us to collect and use your data.
- Contractual Necessity: To fulfill our contractual obligations with you, such as processing orders, deliveries, and payments.
- Legal Obligation: To comply with legal requirements such as tax laws and regulatory obligations.
- Legitimate Interests: For business purposes such as improving our services and customer experience, provided that these interests do not override your rights and freedoms.
6. How We Share Your Personal Data
We may share your personal data with third parties in the following situations:
- Service Providers: We may share your data with third-party service providers, such as payment processors, delivery partners, and IT support services, who assist us in providing our services.
- Legal Obligations: We may disclose your personal data if required to do so by law or in response to valid requests from public authorities.
- Business Transfers: In the event of a business transfer (e.g., merger, acquisition, or asset sale), your personal data may be part of the assets transferred.
We ensure that any third party with whom we share your data is subject to strict confidentiality and data protection agreements.
7. Data Retention
We retain your personal data for as long as necessary to fulfill the purposes for which it was collected or as required by law. The retention period may vary depending on the nature of the data and the legal requirements applicable to our business.
Transaction Records: We keep payment and transaction records for a minimum of 10 years as required by Nigerian tax and financial regulations.
Customer Profiles: Data collected for customer support or marketing purposes may be retained for as long as you remain a customer, or until you request deletion
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These measures include encryption, secure servers, and access control protocols.
9. Your Rights Under NDPA
Under the NDPA, you have the following rights regarding your personal data:
- Right to Access: You can request access to the personal data we hold about you.
- Right to Rectification: You can request that we correct any inaccurate or incomplete data.
- Right to Erasure: You can request the deletion of your personal data, subject to certain conditions.
- Right to Restrict Processing: You can request that we limit how we use your data under certain circumstances.
- Right to Data Portability: You can request a copy of your data in a machine-readable format for transfer to another service.
- Right to Object: You can object to the processing of your personal data in certain circumstances, such as for marketing purposes.
To exercise any of these rights, please contact our Data Protection Officer at dataprotection@redstarplc.com
10. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience when using our website, mobile application and other online products and services. Cookies help us understand how users interact with our services and improve functionality.
For more information about the cookies we use and how to manage them, please refer to our Cookie Policy.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any material changes will be communicated to you, and the revised policy will be posted on our website. Please review this policy periodically to stay informed about how we protect your data.
12. Contact Us
If you have any questions or concerns about this Privacy Policy or how your personal data is being handled, please contact us at dataprotection@redstarplc.com
13. Complaints
If you believe that your personal data has been mishandled or that your privacy rights have been violated, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).