Privacy Policy & Data Notice
Issued in compliance with the Nigeria Data Protection Act (NDPA) 2023 and guidelines of the Nigeria Data Protection Commission (NDPC).
1. Regulatory Framework & Compliance
Esson Solutions ("we", "our", or "us") is dedicated to protecting the privacy, confidentiality, and security of all personal data collected in the course of providing nationwide logistics, warehousing, and e-commerce fulfillment services. We process all personal data in strict compliance with the Nigeria Data Protection Act (NDPA) 2023, subsidiary directives, and regulations enforced by the Nigeria Data Protection Commission (NDPC).
2. Lawful Bases for Processing (NDPA Section 25)
Under Section 25 of the NDPA 2023, we only process personal data where there is a valid lawful basis:
- Consent (Section 25(a)): When you register on our Merchant Portal, opt into communications, or allow analytics tracking.
- Performance of a Contract (Section 25(b)): To execute pickup, sorting, dispatch, transit, waybill generation, and final parcel delivery.
- Legal Obligation (Section 25(c)): Compliance with Nigerian tax laws, anti-money laundering regulations, transport regulatory reporting, and law enforcement directives.
- Legitimate Interests (Section 25(f)): Fraud prevention, securing network infrastructure, and improving logistics operations, provided your fundamental rights do not override these interests.
3. Categories of Personal Data We Process
We process the following categories of personal data:
- Merchant Account Information: Full name, verified business identity, email address, phone number, warehouse pickup location, and account credentials.
- Third-Party Consignee / Recipient Data: Recipient name, destination delivery address, contact phone number, and delivery notes supplied by merchants for fulfillment.
- Geographic & Telemetry Data: Real-time delivery coordinates, route telemetry, driver location, and IP address for security and route optimization.
- Financial & Payment Records: Billing history, invoices, and transaction references. Note: Full payment card details are tokenized and processed directly by certified payment gateways (e.g. Paystack); Esson does not store raw credit/debit card numbers.
4. Third-Party Consignee Data (Processor Role)
When merchants submit customer/recipient details to book a shipment via our portal or API, the merchant acts as the Data Controller, and Esson Solutions acts as the Data Processor. Merchants warrant under our Terms and the NDPA that they have obtained lawful consent or have contractual necessity to share recipient data with Esson Solutions solely for the execution of parcel delivery.
5. Data Disclosures & Cross-Border Cloud Transfers (NDPA Sections 41–43)
We share necessary delivery information exclusively with verified drivers, dispatch riders, and vetted courier partners. We do not sell, rent, or trade personal data to third parties for marketing purposes.
Our platform infrastructure utilizes secure cloud computing services (including Google Cloud Platform / Firebase). Where personal data is hosted on servers located outside Nigeria, we ensure compliance with Sections 41–43 of the NDPA by implementing standard contractual clauses, encryption in transit and at rest, and validating that host jurisdictions guarantee an adequate level of data protection.
6. Data Retention & Security Safeguards
We retain personal and shipment data for as long as necessary to fulfill logistics obligations, resolve claims (within the 10-day contractual claim window), and comply with Nigerian statutory record-keeping requirements (typically 6 years for financial and contractual audit trails). We employ role-based access controls, HTTPS TLS 1.3 encryption, and Firebase security rules to prevent unauthorized access, loss, or disclosure.
7. Your Statutory Rights (NDPA Sections 34–39)
As a data subject under the NDPA 2023, you are entitled to the following rights:
8. Data Protection Contacts & Regulatory Redress
If you have questions regarding this policy, wish to exercise any of your statutory data rights, or withdraw consent, contact our Data Protection desk:
Esson Data Protection Office
Email: info@essonsolutions.comPhone: +234 813 480 2627Address: The Waterside, 5 Admiralty Road, Lekki Phase 1, Lagos, Nigeria
National Regulator (NDPC)
You also have the statutory right under Section 45 of the NDPA to lodge a formal complaint with the Nigeria Data Protection Commission:
Nigeria Data Protection Commission (NDPC)
Website: ndpc.gov.ng
Email: info@ndpc.gov.ng