Privacy Policy for Red Star Express Plc
1. We care about your privacy
This Privacy Policy outlines how Red Star Express Plc, a leading logistics and courier company in Nigeria, collects, uses, processes, and protects your personal data. We are committed to ensuring that your privacy is respected and protected in accordance with the Nigeria Data Protection Act 2023 (NDPA).
By using our services, you consent to the collection and use of your personal data in accordance with this policy.
2. Who We Are
– Company Name: Red Star Express Plc
– Registered Office: 70, International Airport Road, Lagos, Nigeria
– Contact Information: +234(0) 700REDSTAR, dataprotection@redstarplc.com
3. Types of Personal Data We Collect
In the course of providing our logistics services, we collect various types of personal data, including but not limited to:
- Personal Identification Information: Name, address, phone number, email address.
- Payment Information: Debit card details, bank account numbers, payment history.
- Delivery Information: Delivery address, contact information, shipping details.
- Location Data: GPS data for tracking and delivering packages.
- Communication Data: Email communications, chat records, and any customer support interactions.
- Business Information (for corporate clients): Company name, registration number, VAT number.
4. How We Use Your Personal Data
We use the personal data we collect for the following purposes:
- Providing Logistics Services: To manage the delivery and logistics of goods, process orders, and communicate with customers.
- Payment Processing: To handle billing, payment confirmations, and invoicing.
- Customer Support: To respond to queries, process returns or complaints, and provide ongoing support.
- Marketing: To offer promotions, advertisements, and marketing communications (with your consent).
- Legal Compliance: To comply with applicable laws, including tax and customs regulations.
- Operational Purposes: To optimize our services, including analysis of delivery routes, performance, and efficiency.
5. Legal Basis for Processing Personal Data
Under the NDPA 2023, we can only process personal data when we have a valid legal basis for doing so. The legal bases we rely on include:
- Consent: When you provide explicit consent for us to collect and use your data.
- Contractual Necessity: To fulfill our contractual obligations with you, such as processing orders, deliveries, and payments.
- Legal Obligation: To comply with legal requirements such as tax laws and regulatory obligations.
- Legitimate Interests: For business purposes such as improving our services and customer experience, provided that these interests do not override your rights and freedoms.
6. How We Share Your Personal Data
We may share your personal data with third parties in the following situations:
- Service Providers: We may share your data with third-party service providers, such as payment processors, delivery partners, and IT support services, who assist us in providing our services.
- Legal Obligations: We may disclose your personal data if required to do so by law or in response to valid requests from public authorities.
- Business Transfers: In the event of a business transfer (e.g., merger, acquisition, or asset sale), your personal data may be part of the assets transferred.
We ensure that any third party with whom we share your data is subject to strict confidentiality and data protection agreements.
7. Data Retention
We retain your personal data for as long as necessary to fulfill the purposes for which it was collected or as required by law. The retention period may vary depending on the nature of the data and the legal requirements applicable to our business.
Transaction Records: We keep payment and transaction records for a minimum of 10 years as required by Nigerian tax and financial regulations.
Customer Profiles: Data collected for customer support or marketing purposes may be retained for as long as you remain a customer, or until you request deletion
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These measures include encryption, secure servers, and access control protocols.
9. Your Rights Under NDPA
Under the NDPA, you have the following rights regarding your personal data:
- Right to Access: You can request access to the personal data we hold about you.
- Right to Rectification: You can request that we correct any inaccurate or incomplete data.
- Right to Erasure: You can request the deletion of your personal data, subject to certain conditions.
- Right to Restrict Processing: You can request that we limit how we use your data under certain circumstances.
- Right to Data Portability: You can request a copy of your data in a machine-readable format for transfer to another service.
- Right to Object: You can object to the processing of your personal data in certain circumstances, such as for marketing purposes.
To exercise any of these rights, please contact our Data Protection Officer at dataprotection@redstarplc.com
10. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience when using our website, mobile application and other online products and services. Cookies help us understand how users interact with our services and improve functionality.
For more information about the cookies we use and how to manage them, please refer to our Cookie Policy.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any material changes will be communicated to you, and the revised policy will be posted on our website. Please review this policy periodically to stay informed about how we protect your data.
12. Contact Us
If you have any questions or concerns about this Privacy Policy or how your personal data is being handled, please contact us at dataprotection@redstarplc.com
13. Complaints
If you believe that your personal data has been mishandled or that your privacy rights have been violated, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).
RedSpeed Privacy Policy
Governing law
This Notice is made pursuant to the NDPA 2023 and all applicable data protection laws and regulations, in Nigeria. Where any provision of this Notice is deemed inconsistent with a law, regulation or convention, such provision shall be subject to the overriding law, regulation or convention.
This Notice applies to all Users of the Services provided by RedSpeed, and to anyone else who contacts RedSpeed or otherwise submits information to RedSpeed.
Collecting your personal information
We are committed to limiting the collection of personal information unless it’s relevant to facilitate the pick up , payment and delivery of your packages generated on the RedSpeed app.
We can get your personal information when you:
- Purchase a scheduled or on-demand delivery service from the app
- Register your business name, email and telephone number as a merchant, courier and or customer on the app
- Take part in our loyalty program or customer surveys
- Contact our customer service team with an inquiry or complaint
With your permission or consent and/or as permitted by law, we may also collect information about you from other organizations or third parties if this is appropriate and allowed by law. These include fraud-prevention agencies, business directories, and credit reference agencies.
Consent
You accept this policy when you download , register , use and pay for any of the delivery services on the RedSpeed Platform. You also consent to the collection and processing of your personal information (which includes but is not limited to your name, date of birth, email address, address, telephone number, etc), your order details, order history and any other information for the purpose of providing the RedSpeed Services.
If you decide to opt out or withdraw consent for the processing of your personal information, you can do so by reaching out to us at dataprotection@redstarplc.com. Please note that withdrawal of consent to procession of your personal data will limit your access to RedSpeed services.
Third Party Vendors
RedSpeed is designed to allow the on-boarding of third party logistics partners whose assets and complimentary technology offers pickup and delivery solutions on our platform. It is important to note that these third-party partners will come in contact of your personal data when picking up, processing payment and delivering your packages generated on the RedSpeed app.
Payments
A wallet system has been enabled on RedSpeed to collect payments for prepaid and on-demand delivery services. This service relies on third-party payment processors.
We will not store or collect our payment card details. That information is provided directly to our third-party payment processors who are governed by the Nigerian Data Protection Act 2023.
The payment processors adhere to the standards set by the Central Bank of Nigeria (CBN) and are PCI-DSS audited and certified in compliance with best practices in payment processing in Nigeria.
Changes to RedSpeed Privacy Policy
We will review this Privacy Policy annually to recognize any changes made to our delivery offerings, updates made to the RedSpeed technology or reviews made to national data protection laws.
You will be notified of any changes by posting and uploading updated versions on this website. We advice you to review this Privacy Policy periodically for any changes made in full compliance of the Nigerian Data Protection Act of 2023.
Feedback and Complaints
If you have any questions or concerns about this Privacy Policy or how your personal data is being handled, please contact us at dataprotection@redstarplc.com . If you believe that your personal data has been mishandled or that your privacy rights have been violated, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC
Storage and Security
Personal information is collected on servers in electronic databases which are cloudbased and managed by Microsoft ERP service partners We will ensure that your information is protected and that they only process your information in the way we have authorised them to. These organisations will not be entitled to use your personal information for their own purposes.
Personal information stored on servers are encrypted and stored through data isolation technology. Some of the safeguards we use are firewalls and data encryption, physical access controls to our physical servers, and information access authorization controls.
To prevent unauthorised access to your information, we have implemented strong controls and security safeguards at the technical and operational levels. Our Redspeed web version uses a Secure Sockets Layer (SSL) to ensure secure transmission of your Personal Data. There is also a padlock symbol in your URL address bar when browsing through our website. The URL address will also start with https:// depicting a secure webpage. SSL applies encryption between two points such as your PC and the connecting server. Any data transmitted during the session will be encrypted before transmission and decrypted at the receiving end. This is to ensure that data cannot be read during transmission.
We will never ask for your secure personal or account information by unsolicited means of communication. You are responsible for keeping your personal and account information secure and not sharing it with others. We shall not be liable for any unauthorised access or loss or personal information beyond our control.
Contact Us
If you have any questions or concerns about this Privacy Policy or how your personal data is being handled, please contact us at dataprotection@redstarplc.com