Privacy notice

• ◆Your account — name, phone number and email; a password stored only as a one-way hash, or the account you signed in with at Google or Apple. One-time sign-in codes are stored hashed and expire. To keep you signed in, we record the device's browser or app name and IP address against each session.
• ◆Delivery addresses — recipient name and phone, state, LGA, area, street and landmark, and the map pin if you set one. We use them to price, route and deliver your orders.
• ◆The vehicle you shop for — make, model and year, kept with the search, cart or enquiry it was picked for. It is not filed against your account.
• ◆Photos you send — of the vehicle, the VIN plate, the engine bay or the old part, attached to an enquiry, order or return. We strip location data from them and keep them in private storage, opened only through short-lived links.
• ◆Orders and payments — what you bought, prices, delivery fees and VAT, invoices, refunds and your wallet balance. Card payments are handled by our licensed payment processor: we never see or store your card number, only the processor's reference for the payment and its token for the card.
• ◆Delivery records — confirmation that the delivery code was entered, and, if you were not reachable, the rider's photo and location at the drop-off.
• ◆Support — chat messages and attachments, tickets, and call recordings. Every support call is recorded, and you are told so when the call starts. We use recordings to resolve disputes and to check the quality of our service.
• ◆Searches — what you searched for, your state and the vehicle, so we can see which parts people cannot find and source them.

Your chosen vehicle, delivery state, colour theme and a random key for a guest cart are kept in your browser's storage, along with what keeps you signed in. If you use “Use my current location”, your browser's position is used on your device to suggest your state; only the state you pick is kept.

• ◆Suppliers never learn who you are. A supplier checking fitment sees the vehicle details and photos with your identity removed. A supplier delivering for us sees only your first name, the delivery address, a masked phone number and our order reference.
• ◆Our staff see what their role needs — support agents your orders and conversations, finance your payments and refunds — and every staff action is logged.
• ◆Service providers that run parts of the service for us: the payment processor, SMS, WhatsApp and email delivery, logistics partners for deliveries they carry, file storage, and the calling service that carries and records support calls.

We do not sell your data.

• ◆Orders, invoices and payment records: seven years.
• ◆Chat history and call recordings: two years.
• ◆Your account and addresses: while your account is open, unless you ask us to delete them sooner.

Under the Nigeria Data Protection Act 2023 you can ask us to:

• ◆give you a copy of the personal data we hold about you, in a form you can take elsewhere;
• ◆correct anything that is wrong or incomplete;
• ◆delete your data, where we are not required to keep it — order and payment records, for example, have to be kept for the period above;
• ◆stop or restrict a particular use of it, or object to it;
• ◆withdraw a consent you gave, such as for marketing messages.

To make a request, contact support — a ticket under “Account” is the clearest route. We may ask you to confirm it is you before we act. If you are not satisfied with our answer, you can complain to the Nigeria Data Protection Commission.

Everything travels over encrypted connections. Passwords are hashed, the most sensitive fields are encrypted in our database, and photos, documents and recordings are held in private storage.