Privacy Policy

1. Data Controller

LenilabsX Limited is the data controller responsible for your personal data. For any questions regarding this Privacy Policy or our data protection practices, please contact us at support@hayya.com.ng.

2. Information We Collect

We may collect, use, and store different kinds of personal data about you, including:

• Identity Data: First name, last name, username, or similar identifier.
• Contact Data: Delivery addresses, email address, and telephone numbers.
• Financial Data: Payment details (processed securely by third-party payment gateways; we do not store full card numbers).
• Transaction Data: Details about payments to and from you, and order history.
• Technical Data: IP address, login data, browser type and version, time zone setting, location data, operating system and platform.
• Usage Data: Information about how you use our website and app.

3. Lawful Basis for Processing

Under the NDPR, we process your personal data on the following lawful bases:

• Consent: Where you have provided clear consent for us to process your personal data for a specific purpose (e.g., marketing).
• Contractual Necessity: Where processing is necessary for the performance of a contract to which you are a party (e.g., processing and delivering your orders).
• Legitimate Interests: Where processing is necessary for our legitimate interests (or those of a third party), provided your fundamental rights do not override those interests (e.g., fraud prevention, service improvement).
• Legal Obligation: Where we need to comply with a legal or regulatory obligation.

4. Information Sharing

We do not sell your personal data. We only share necessary information with our vendors and riders solely to fulfill your orders. We may also share data with third-party service providers (e.g., payment processors, hosting services) who assist us in operating our platform, subject to strict data processing agreements.

5. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. When we no longer need your data, we will securely delete or anonymize it.

6. Your Rights under NDPR

Under the Nigeria Data Protection Regulation, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of any inaccurate or incomplete data we hold about you.
• Right to Erasure: Request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected.
• Right to Restrict Processing: Request the suspension of processing your personal data under certain scenarios.
• Right to Data Portability: Request the transfer of your personal data to you or a third party in a structured, commonly used, machine-readable format.
• Right to Object: Object to processing where we are relying on a legitimate interest and you feel it impacts your fundamental rights.

To exercise any of these rights, please contact us at support@hayya.com.ng.

7. Data Security

We implement appropriate technical and organizational measures designed to secure your personal data from accidental loss, unauthorized access, use, alteration, and disclosure.