Privacy Policy
This policy explains what personal data Wells247 collects, why, who it is shared with, how long it is kept and your rights. Wells247 Limited (RC 8969513), of Okpanam RD by Obiolum Castle, Asaba, Delta State, Nigeria, is the data controller under the Nigeria Data Protection Act 2023 ("NDPA"). Our Data Protection Officer can be reached at [email protected].
In short: we collect what we need to run rides, errands, deliveries and payments safely. We never sell your data. Advertisers never receive it. Your phone number is shown only to the other person on a job, and only while the job is on.
1. What we collect
| Data | Whose | Why we need it |
|---|---|---|
| Name, mobile number, email address | Everyone | To create your account, sign you in by SMS code, recover your account and send security notices |
| Pickup and drop-off places, routes, times, fares | Customers, drivers | To arrange and complete trips, errands and deliveries, and to settle disputes |
| Live location | Drivers and couriers while online or on a job; customers while booking or on a trip, and when they choose to share it | To match you with nearby drivers, show progress, keep you safe and handle SOS |
| Orders, items, receipts, ratings and reviews | Customers, sellers | To deliver orders, handle refunds and keep quality up |
| Messages and photos sent in a job chat | Customers, drivers | To let you coordinate the job; read by support only for an SOS, complaint or dispute |
| NIN, date of birth, driver's licence, selfie and short live video, vehicle papers, home address | Drivers, sellers | To confirm identity and eligibility, prevent fraud and keep customers safe |
| CAC number, business address and business bank account | Verified businesses | To confirm the business and pay it |
| Bank account for payouts or refunds | Drivers, sellers, customers who ask for a refund | To pay earnings, payouts and refunds |
| Card and payment details | Anyone paying by card | Handled by Flutterwave; we never see or store full card numbers |
| Device type, app version, crash logs, IP address | Everyone | To keep the apps secure and working |
NIN, licence number and date of birth are stored encrypted, and only the staff whose role needs them can see them. Every look is logged.
2. Our lawful basis
- Contract: to provide the Services you ask for, take payments and pay drivers and sellers. This includes tracking drivers' location while they are online or on a job, which the Services cannot work without.
- Legal obligation: tax, accounting, anti-fraud and law-enforcement requests made under the law.
- Legitimate interests: safety, preventing fraud, improving the apps, and keeping records for disputes, always balanced against your rights.
- Consent: for the live video check, which uses your face and is sensitive data, and for any marketing. You can withdraw consent at any time in the app, though some Services cannot work without it.
3. Who we share it with
We share only what each party needs:
- The other person on your job: your first name, photo, rating, pickup point and, during the job only, your mobile number. Drivers' plate numbers and vehicle details are shown to customers.
- Service providers working for us under contract: Amazon Web Services (servers, London), Flutterwave (payments), Google (maps and app notifications), Dojah (identity checks), our SMS provider, Resend (account emails) and Cloudflare (our website and email routing). They may use the data only to provide their service to us.
- Authorities: the police, courts or regulators, only where the law requires it, after review and approval by the founder, and with a court order where the law requires one.
- A buyer of the business: if Wells247 is sold or merged, under the same protections.
We never sell personal data. Advertisers and brands never receive personal data. Ads are chosen only by app, screen position and city. We work out your city from your account and your most recent trip, errand or order. To count how many people saw an ad without counting anyone twice, we store a coded viewer number that changes every day and is deleted the next day; it cannot be used to identify you and is never shared.
4. Data stored outside Nigeria
Our servers are in London, United Kingdom, and some providers process data in other countries. We transfer data abroad only on a basis allowed by Part VIII of the NDPA: to countries or providers with adequate protection, under binding contract clauses that give the protection the NDPA requires, or otherwise as the Act permits, and we protect it with encryption in transit and at rest.
5. How long we keep it
| Data | How long |
|---|---|
| Your account while it is open | As long as you use Wells247 |
| After you delete your account | Locked for 2 years for fraud, disputes and legal claims, then erased. Trip and payment records stay in our accounts with the names removed. If you later open a new account with the same phone number, our staff can see that it is linked to the old one |
| Accounting and tax records | 6 years, as the law requires |
| Sign-in codes | Deleted after 2 days |
| App notifications | Deleted after 30 days |
| Detailed trip routes | 90 days, then only the start and end points are kept |
| A banned driver's NIN | Kept only as a one-way code so the person cannot return under a new account |
6. Your rights
Under the NDPA you may:
- ask what data we hold about you and get a copy
- correct data that is wrong
- delete your account and data (in Account settings, or by asking us)
- get your data in a portable format
- object to processing based on legitimate interests, and withdraw consent
- not be subject to a decision made only by automated means that has a legal or similarly serious effect on you, without a person reviewing it
- complain to the Nigeria Data Protection Commission
Email [email protected] or use Help in the app. We reply within 30 days, and may ask you to confirm your identity first.
7. Security
We use encryption, strict staff access by role, two-step sign-in for staff, audit logs and regular reviews. If a breach puts your rights at risk, we will tell the Commission within 72 hours and tell you without delay.
8. Children
Wells247 accounts are for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has an account, tell us and we will close it.
9. Website
wells247.com uses no cookies and no trackers. Our hosting provider keeps standard server logs for security.
10. Changes
We will tell you in the app and by email at least 14 days before any important change to this policy.
Contact: Data Protection Officer, Wells247 Limited, Okpanam RD by Obiolum Castle, Asaba, Delta State, Nigeria · [email protected]
More about this website
This website does not use cookies, analytics or trackers. The contact form does not send anything to us by itself: it opens your own email app with your message, and you choose whether to send it.
Questions about your data or these terms? Email [email protected] or see Contact support.