This notice explains what personal data Lasalu Drop Logistics collects through the Drop Driver app, the Lasalu Drop customer app, our booking and tracking web pages, and our WhatsApp service — how we use it, who we share it with, and the rights you have over it. We process personal data in accordance with the Nigeria Data Protection Act 2023 (NDPA) and the directives of the Nigeria Data Protection Commission (NDPC).
1. WHO WE ARE
Lasalu Drop Logistics is operated by Lasalu Drop Logistics Limited, a company incorporated under the laws of the Federal Republic of Nigeria ("Lasalu Drop", "we", "our" or "us"). We are the data controller for the personal data described in this notice. Lasalu Drop Logistics Limited is a separate company from Lasalu Limited.
Lasalu Drop Logistics Limited, Port Harcourt, Rivers State, Nigeria
Privacy contact: privacy@lasaludrop.com
Phone / WhatsApp: 0707 118 0251
This notice covers three groups of people: Field Pilots (the independent riders who deliver through our platform), Customers (people and businesses who book deliveries), and Recipients (the people parcels are delivered to, whose details a customer gives us in order to complete a delivery).
2. WHAT WE COLLECT FROM FIELD PILOTS
Identity and contact — your phone number (how you sign in; we send a one-time code to it), first name and surname, date of birth, and profile photograph.
Right to work and vehicle documents — your driver's licence number and expiry date, a photograph of your licence, a selfie holding your licence (to confirm it belongs to you), your vehicle type, make, model, colour, year and number plate, vehicle registration expiry, and photographs of your vehicle and its registration document.
Payment — your bank name, account number and account name, used only to pay you; your earnings, wallet balance, commission owed and payout history.
Location — see Section 4, which explains this in detail: your GPS position while you are ON DUTY (including with the app in the background or your phone locked); your GPS position while the app is open, even off duty, so dispatch is never working from a stale position the moment you go back online; and your GPS position when you press the emergency (SOS) button.
How you use the app — deliveries offered to you and whether you accepted, declined or let the offer lapse; deliveries completed, cancelled or reported as failed, with times and locations; your customer ratings and activity score; prices you offered when negotiating through the app; messages you exchange with customers through the app; voice calls placed through the app — who called whom, when, and for how long (we do not record or listen to the audio of your calls); and technical records used to diagnose faults, for example whether your phone received and sounded a job alert.
Your device — a notification token issued by Google that lets us send alerts to your phone, and basic device and app information (app version, Android version).
3. WHAT WE COLLECT FROM CUSTOMERS AND RECIPIENTS
Name and phone number; pickup and delivery addresses, including map coordinates; a description of the item being sent and any delivery instructions; payment method and payment records — for online payments, a reference from our payment provider (we never see or store your full card number); messages you exchange with us on WhatsApp or in the app; voice notes you send us on WhatsApp, which are converted to text automatically so we can read and answer them (the conversion is done by a service outside Nigeria — see Section 5); your delivery history, ratings and any referral or promotion codes; and, if you use our app, a notification token so we can tell you when your rider is on the way.
We collect a recipient's name and phone number from the customer who books the delivery, in order to deliver the parcel and to send the handover code that proves it reached the right person.
You may be chatting with an automated assistant. Messages you send us on WhatsApp are usually answered by Adanova, our automated assistant. To write those replies, the content of your conversation — which can include your name, addresses, phone number and order details — is sent to the artificial-intelligence providers named in Section 5, who are outside Nigeria. They process it to generate a reply and are not permitted to use it for their own purposes. You can ask to speak to a human at any time and a member of our team will take over the chat.
Our web pages. When you open our booking or tracking pages we automatically receive your IP address, browser and device type, and the pages you viewed, because that is how the internet delivers a page. We do not use advertising trackers, analytics pixels or third-party cookies on these pages.
What we do NOT collect: we do not record the audio of in-app calls; we do not access your photo gallery, contacts, messages or files, other than the specific photographs you choose to upload for verification; we do not track a rider's location when the app is closed and they are off duty; and we do not collect full card details — card payments are handled entirely by our payment provider on their own systems.
4. LOCATION — READ THIS SECTION
This is the most sensitive thing we collect, so it deserves plain words.
For riders: when you tap Go online, the Drop Driver app begins sending your GPS position to us roughly every 12 seconds. This continues while the app is minimised, while you are using other apps, and while your phone is locked — that is the only way dispatch can offer you the job nearest to you and show a waiting customer where their rider is. While this is happening, Android shows a permanent notification saying you are online. That notification is your assurance: while it is not showing, nothing is tracking you in the background.
To be completely straight with you, there are two other times we read your position, and neither involves background tracking: while the app is open (even off duty), your position is sent so dispatch is current the moment you go online — close the app and this stops; and when you press the emergency button, so help can find you.
Background collection stops when you tap Go offline, when you sign out, and when you uninstall the app.
We use rider location to offer you deliveries near you and rank riders fairly by distance; to show the customer of your current delivery where their parcel is; to show you where other riders are, so you can see busy areas; and to send help if you press the emergency button. We do not track riders who are off duty with the app closed. We do not sell location data. We do not share your live position with anyone except the customer of the delivery you are currently carrying, and our own dispatch team.
For customers: if you use our map to book, we use the location you select — and, if you allow it, your device's position to centre the map. We use the delivery addresses to route the rider and calculate the fare.
Emergency alerts: if a rider presses the SOS button, that rider's name, phone number and exact location are sent to our office and to other riders within about 5 kilometres, so someone can reach them quickly. We do this to protect life.
5. WHO WE SHARE IT WITH
Between the people in a delivery: the customer sees the rider's first name, photograph, vehicle description and number plate, and the rider's live position while the delivery is in progress. The rider sees the pickup and delivery addresses, and the name and phone number of the sender and, once the parcel is collected, the recipient. In-app chat lets the two sides message without either seeing the other's phone number. In-app calling works the same way: when you choose to call over the internet, the app uses your device's microphone to carry the call and neither side sees the other's number. We do not record or store that audio — it travels between the two phones and is gone when the call ends. You can also choose to call over the phone network instead, and if you do, your number is visible to the person you are calling.
Service providers who process data on our behalf, and may only use it to perform their service for us:
- Supabase — hosts our database and stores uploaded documents (outside Nigeria)
- Google (Firebase Cloud Messaging) — delivers notifications to your phone (outside Nigeria)
- Google Maps Platform — maps, address lookup, routes and distances (outside Nigeria)
- Groq — runs the automated assistant that answers WhatsApp chats, and converts voice notes to text (outside Nigeria)
- Google (Gemini) — backup provider for the automated assistant (outside Nigeria)
- Paystack — processes card and online payments, and rider payouts (Nigeria)
- Termii — sends SMS one-time codes (Nigeria)
- WhatsApp (Meta) — carries our chat messages to customers who contact us there (outside Nigeria)
- Render — hosts our messaging and web booking service (outside Nigeria)
Others: our own staff and authorised managers, to run dispatch, support and payouts; law enforcement, regulators or courts, where we are legally required to disclose or where necessary to establish or defend a legal claim; and a buyer or successor if the business is sold or reorganised, with notice to you.
We do not sell your personal data. We do not use it for advertising by third parties.
Sending data outside Nigeria: some providers above store data outside Nigeria. Where that happens we rely on the transfer conditions permitted by the NDPA, including contractual protections requiring the provider to protect your data to a comparable standard. You may ask us for details of these safeguards.
6. WHY WE USE IT, AND OUR LAWFUL BASIS
Under the NDPA we must have a lawful basis for each use. Ours are:
- Signing you in with a one-time code — performance of a contract
- Verifying licence, vehicle and identity documents — legal obligation, and our legitimate interest in safety
- Offering you deliveries near you, and showing customers a live map of their rider — performance of a contract
- Calculating fares, commission, wallet balances and payouts — performance of a contract
- Sending job alerts, delivery updates and emergency alerts — performance of a contract
- Ratings and activity scores — legitimate interest in service quality
- Investigating complaints, disputes, incidents and suspected fraud — legitimate interest; legal claims
- Emergency (SOS) alerts to nearby riders and our office — vital interests (protection of life)
- Keeping records of deliveries, payments and tax — legal obligation
- Answering your chats with an automated assistant — performance of a contract; legitimate interest
- Sending offers and reminders about our service — consent, or legitimate interest (see Section 7)
- Using a recipient's details given to us by a customer — performance of a contract; legitimate interest
- Improving the service and fixing faults — legitimate interest
7. MARKETING MESSAGES
We may send you offers, discounts and reminders about our service on WhatsApp, based on your past deliveries.
Stopping them is one word: reply STOP to any of our messages and we will stop sending marketing to that number. We check this at the moment of sending, so it takes effect immediately. Stopping marketing does not stop the messages you need — delivery updates, payment confirmations and replies to your questions still come through.
8. DECISIONS MADE AUTOMATICALLY
Some things happen without a person deciding: which rider is offered a delivery (calculated from distance, vehicle type and availability); your rider activity score and rating average; being set offline automatically if delivery offers ring out unanswered; and being blocked from taking new jobs while you owe commission above a set limit.
You can always ask a human to look again. If an automatic decision affects your ability to earn — being set offline, suspended, or blocked — contact us and a member of our team will review it personally. You have this right under section 37 of the NDPA.
9. HOW LONG WE KEEP IT
- Rider account, licence and vehicle documents — while you are active, and for 6 years after your last delivery, for tax, insurance and legal-claim purposes
- Delivery records and payment records — 6 years, as required by tax and accounting law
- Rider live location — we keep only your latest position, not a trail; each new reading replaces the last, and the record is deleted with your account. The pickup and delivery coordinates of a completed job are part of that delivery's record
- Chat messages between riders and customers — 12 months
- WhatsApp conversations with customers, and voice notes and their transcripts — 24 months
- Customer account, saved addresses and delivery preferences — while the account is active, then 24 months
- Emergency (SOS) records — 12 months
- Call records (who, when, how long — never audio) — 12 months
- One-time sign-in codes — minutes; deleted as soon as they are used or expire
- Notification tokens — until you sign out, uninstall, or the token stops working
- Bank details — while you are active, then as required for payment records
When a period ends we delete the data or make it permanently anonymous.
10. HOW WE PROTECT IT
All traffic between the apps and our servers is encrypted in transit. Uploaded documents are held in private storage — not publicly reachable, with access only through short-lived links to authorised staff. Sign-in is by one-time code sent to your phone, so there is no password to be stolen or guessed. Access to customer and rider data is limited to staff who need it for their work.
No system is perfectly secure. If a breach occurs that is likely to result in risk to your rights and freedoms, we will notify the NDPC and affected individuals as the NDPA requires.
11. CHILDREN
Our services are not for anyone under 18. Field Pilots must be adults and legally entitled to ride or drive. We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.
12. YOUR RIGHTS
Under the NDPA you have the right to: be told what personal data we hold about you and why; access a copy of it; correct data that is wrong or incomplete; delete your data where we no longer have a lawful reason to keep it (we must keep delivery and payment records for the periods in Section 9 even after an account closes, and we cannot close an account while money is outstanding on it or a dispute is unresolved); restrict or object to certain processing; receive your data in a portable, machine-readable format; withdraw consent at any time where we relied on it (for example by turning off location or notification permissions); and complain to the Nigeria Data Protection Commission (ndpc.gov.ng) if you believe we have handled your data unlawfully.
Closing your account, which erases what we hold about you: you can do this yourself, in either app, without asking us. In the customer app it is Account → Delete my account; in the Drop Driver app it is Settings → Close my account. Both show you exactly what will be removed and what we have to keep before you confirm, and both take effect immediately. If you no longer have the app installed, use lasaludrop.com/delete-account and we will do it for you.
How to exercise your other rights: write to privacy@lasaludrop.com or message us on 0707 118 0251. Our WhatsApp line is normally answered by an automated assistant — privacy requests are passed to a person; say "privacy request" or "delete my data" and a member of the team will handle it. We will respond within 30 days; if a request is complex we may need longer, and we will tell you within those 30 days why, and when to expect our answer. We may ask you to confirm your identity first, so nobody else can obtain or delete your data.
13. TURNING THINGS OFF
You are in control of the permissions the app uses. In your phone's Settings you can turn off:
- Location — but a rider cannot receive deliveries without it, because dispatch works by distance
- Notifications — but you will stop hearing job offers, which is how you get work
- Microphone — you will not be able to make in-app calls, but you can still call by phone
- Display over other apps — the full-screen job card will stop appearing; alerts arrive as ordinary notifications instead
14. CHANGES TO THIS NOTICE
We review this notice at least once a year and may update it at other times. If a change materially affects your rights we will tell you through the app, by WhatsApp, or by email at least 15 days before it takes effect, unless the law requires us to act sooner. The version at the top always shows which notice is current.
This notice is governed by the laws of the Federal Republic of Nigeria. If you are not satisfied with our response to a privacy request, you may complain to the Nigeria Data Protection Commission.