Privacy Policy

In short: We collect the information we need to run deliveries, pay riders and keep people safe. We do not sell your personal data. We share it with the service providers that host and operate Mulaport, and with the other person in a delivery where that is necessary. You have rights under the Nigeria Data Protection Act 2023, and you can contact us about them at any time.

1. Who we are and what this policy covers

Mulaport is an online delivery marketplace in Nigeria. For the purposes of the Nigeria Data Protection Act 2023 (NDPA), the data controller is Mulaport Enterprise (BN 9878338), a business name registered in Nigeria with the Corporate Affairs Commission, whose principal place of business is 08 Agwantivi Street, SCC Junction, Ushafa, Bwari, FCT Abuja, Nigeria.

You can reach us about privacy at hello@mulaport.com. General enquiries can go to hello@mulaport.com.

This policy explains how we handle personal data when you visit our website, use our app, book a delivery or apply to ride with us. Personal data means information that identifies you, or that can be linked to you, whether on its own or with other information we hold.

It should be read together with our Terms of Service, which explain the rules of the service.

2. The personal data we collect

We collect information you give us, information created when you use the service, and information from the providers that help us run it. What we collect depends on your role.

We collect only what we need to run the service. If you give us another person's name and phone number as a stop contact, you must have their permission, and you should tell them that a rider may call them about the delivery.

Everyone

• Your phone number, which is how you sign in.
• Your name and the role you choose, client or rider.
• Session and device data, such as your IP address and browser, which we use for security.
• Your account status, including any suspension and the reason recorded for it.

Clients

• Pickup and drop-off places and their coordinates.
• Contact names and phone numbers for each stop. These often belong to other people, so you must have their permission before you give them to us.
• Landmark notes you choose to add.
• Your order history and payment records.

We do not see or store full card details. Our payment partner handles card data. We receive the information needed to confirm that a payment was made and to keep our records.

Riders

• Your date of birth, address, vehicle type and vehicle details.
• The eight identity and vehicle documents you submit: passport photo, selfie, national ID (NIN slip or card), driver's licence, rider's permit, vehicle registration, insurance and utility bill. These are images and PDFs.
• Your guarantor's name, phone number and relationship to you.
• Your bank account name, account number and bank, for payouts.
• Your online status.
• Your location while you are online: one reading when you go online, then about every 5 minutes while the app is open, and about every 15 seconds during a job.
• Delivery photos taken at drop-off.
• Your earnings and payout records.

Communications

• The one-time codes we send by SMS so you can sign in.
• Support messages, if you send any.

3. Why we use your data, and our lawful basis

Under section 25 of the NDPA, we must have a lawful basis for using personal data. We rely on the following bases:

Where we rely on legitimate interests, we balance our need against your rights and expectations. We use personal data only for the purposes we collected it for, or for purposes that are compatible with them. We do not use your data for unrelated advertising.

You do not have to give us every item of data we ask for. But if you do not give us the data a delivery needs, we may not be able to create the order, verify a rider or complete a payout.

We keep the data we use to what is necessary for each purpose. We do not add unrelated data to your profile, and we do not use one part of the service to build a picture of you for another purpose without a lawful basis.

4. Who we share your data with

We share personal data with the providers that help us run Mulaport, and with other people where a delivery requires it. These providers act on our instructions and are bound to protect the data they handle.

Each provider receives only the data it needs to perform its part of the service. They may not use your data for their own marketing. For example, our payment partner receives the amount and the payment details needed to process the transaction, while we receive confirmation and the records we need, not your full card details.

We also share data in these situations:

• Between users. A client sees the rider's first name and vehicle type, and the rider's live position during an active job. A rider sees the pickup and drop-off areas and what they will earn before accepting, and the full addresses, contact names, phone numbers and notes after accepting.
• Our admin staff. Staff see what they need for support, safety and disputes. They never see the handover codes.
• Authorities. We share data when the law requires it, or when we need to report a serious safety or criminal matter.

We do not sell personal data. We do not rent it, and we do not trade it for advertising.

5. Transfers outside Nigeria

Some of our providers store or process personal data outside Nigeria, for example in the United States and the European Union. Where that happens, we rely on the safeguards set out in the NDPA, including sections 41 to 43. These include transfers to countries with adequate protection, contractual protections, and the other lawful bases the Act provides.

You can ask us for more information about the safeguards that apply to a particular transfer by contacting the privacy email above.

6. How long we keep your data

We keep account data while your account is active. If you close your account, we delete or anonymise what we no longer need.

We keep orders, payments and ledger records for as long as tax and accounting law requires. Our target is typically six years, subject to those legal requirements.

We keep location trails and delivery photos for a limited period so they are available for disputes and safety reviews. After that, we delete them.

We delete the documents of rejected rider applicants after a limited period. We keep approved riders' documents while they are active on the platform and for as long as we need them for legal and safety reasons.

If a problem is reported, we keep the records connected to that order while the review is open and for as long as we need them to answer a later claim.

When we no longer need personal data, we delete it or turn it into information that can no longer identify you.

7. How we protect your data

We use encryption in transit, private storage, short-lived signed links for documents and photos, and role-based access. Access to rider documents is limited to the staff who review applications and handle safety issues. Sign-in uses one-time codes, and we keep a record of key staff actions such as rider approvals, suspensions and payout holds.

These measures reduce risk, but no system is perfect. If you believe your account or data has been compromised, contact us straight away at hello@mulaport.com.

8. Your rights under the NDPA

You have the right to:

• access the personal data we hold about you, and be told how we use it;
• have inaccurate or incomplete data corrected;
• ask us to delete data we no longer need to keep;
• ask us to restrict how we use your data;
• object to processing based on legitimate interests;
• receive your data in a portable form;
• withdraw consent at any time, where we rely on consent;
• not be subject to a decision based solely on automated processing that has a significant effect on you.

To use any of these rights, contact hello@mulaport.com. We may need to verify who you are before we act, usually by confirming control of your phone number. We will respond within the time the law requires.

Some rights have limits. For example, we may need to keep an order record for tax, or keep evidence while a dispute is open. If we cannot do what you ask, we will explain why. Withdrawing consent does not affect processing that already happened, and it may mean we can no longer provide part of the service.

You can also complain to the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng. We would appreciate the chance to resolve your concern first.

9. Automated decisions

Dispatch matching is automated: a paid order is offered to nearby available riders, one at a time, for 30 seconds each, and the first to accept gets the job. This decides who is offered a job, not who must take it. A rider is always free to decline.

Rider approval and suspensions are not automated. A member of our team reviews each rider application by hand and approves or rejects it with a reason. Suspensions are made by people, and a reason is recorded.

When a client reports a problem with a delivery, a person reviews it. The decision on whether to refund all or part of a fare is made case by case, not by an automated rule.

If we ever introduce a solely automated decision that has a significant effect on you, we will tell you, explain the logic in plain terms, and give you a way to ask for human review.

10. Children

Mulaport is not for anyone under 18. We do not knowingly collect personal data from children. If you believe a person under 18 has created an account, contact us at the privacy email and we will look into it and close the account.

11. Cookies and local storage

Our marketing website uses no tracking or advertising cookies. We do not build advertising profiles from your visit.

Our app uses essential cookies and local storage to keep you signed in and to remember the session and your role. These are needed for the service to work. We do not use them to follow you around other websites or to build an advertising profile. If you clear them or block them, you may be signed out and some features may not work.

Your browser settings let you control cookies and local storage. Blocking essential storage may stop you from using the app.

12. Changes to this policy

We may update this policy as the service changes or as the law requires. We will post the new version on this page and note the date at the top. For material changes, we will also tell users in the app.

13. Contact and complaints

For any question about this policy, or to exercise a right, contact hello@mulaport.com. You can also write to us at the address in section 1.

If you are not satisfied with our response, you can complain to the Nigeria Data Protection Commission at ndpc.gov.ng.