Privacy Policy & Data Protection
Covad Swift Logistics Ltd (RC 9429700) • Governed under the Nigeria Data Protection Act (NDPA) 2023 • Last Revised: October 2026
Statutory Privacy Notice (Nigeria Data Protection Commission - NDPC)
This Privacy Policy details how Covad Swift Logistics Ltd collects, processes, secures, and retains personal data across our on-demand food delivery, point-to-point courier, and multi-portal logistics ecosystem. We operate strictly in compliance with the Nigeria Data Protection Act (NDPA) 2023 and the General Application and Implementation Directive (GAID) issued by the NDPC.
1. Identity of the Data Controller
Under the Nigeria Data Protection Act (NDPA) 2023, Covad Swift Logistics Ltd is the primary Data Controller responsible for your personal information.
Corporate Entity: Covad Swift Logistics Ltd
Registration Number: RC 9429700
Registered Headquarters: Sultan Plaza, 2b Ikosi Road, Ketu, Lagos 105102, Nigeria
Data Protection Officer (DPO): dpo@covadswift.com | privacy@covadswift.com
2. Lawful Bases for Data Processing (Sections 24 & 25 NDPA)
We only process personal data when supported by an explicit lawful basis recognized under Nigerian law:
- Contractual Necessity (Section 25(1)(b)): Processing necessary to execute delivery orders, calculate route distances, dispatch nearby riders, and remit store disbursements.
- Legal & Regulatory Obligation (Section 25(1)(c)): Compliance with statutory demands from the Nigeria Data Protection Commission (NDPC), Federal Competition and Consumer Protection Commission (FCCPC), Corporate Affairs Commission (CAC), and Nigerian tax authorities (FIRS/LIRS).
- Legitimate Interests (Section 25(1)(d)): Preventing marketplace fraud, investigating damaged or stolen goods, securing rider and customer safety, and system performance telemetry.
- Consent (Section 25(1)(a)): Given explicitly by users for non-essential cookies, opt-in marketing broadcasts, and optional surveys.
3. Third-Party Sub-Processors & Data Sharing Protocol
We do not sell personal information to brokers or third parties. Information is only transferred to licensed sub-processors under formal Data Processing Agreements (DPAs):
Paystack Payments Ltd
Licensed by CBN, PCI-DSS Level 1 certified. Handles card tokenization, direct bank transfers, and wallet debits without Covad Swift storing card numbers.
Identity Verification Partners
NIMC-licensed data partners validating National Identification Numbers (NIN) and driver’s licenses for courier onboarding.
Cloud Infrastructure (AWS / GCP)
Encrypted cloud compute and databases meeting international ISO 27001 standards and NDPA cross-border adequacy requirements.
Order Multi-Party Sharing
Riders receive drop-off addresses and phone numbers solely during active transit. Direct contact outside active delivery is strictly prohibited.