Privacy Policy

1. Data Controller

MyLaundry ("we", "us", "our") is the data controller responsible for your personal data processed through this mobile application and website (collectively, the "Service"). This Privacy Policy has been prepared in accordance with the Nigeria Data Protection Act 2023 (NDPA), the Nigeria Data Protection Regulation (NDPR) 2019, and applicable international data protection best practices.

Our Data Protection Officer (DPO) can be reached at:

• Email: support@mylaundry.live
• Phone: +2347030643332
• Address: No 5 Poulty Road, Egbekodo Itsekiri Delta State

2. Legal Basis for Processing

Under Section 25 of the NDPA, we process your personal data based on the following lawful grounds:

• Consent: You provide consent when you register an account, upload your profile picture, or opt in to promotional notifications.
• Performance of a Contract: Processing your name, email, phone number, and delivery addresses is necessary to facilitate laundry service orders between you and vendors.
• Compliance with Legal Obligations: Retaining transaction records as required by Nigerian tax and financial laws (e.g., FIRS requirements).
• Legitimate Interest: Collecting crash logs and anonymous analytics to improve service stability and user experience, provided this does not override your fundamental rights.

3. Information We Collect

We collect information to provide a seamless and premium laundry service marketplace experience. This includes:

3.1 Personal Data (Mandatory)

The following data is required to provide the Service:

• Name: To identify you as a user or vendor.
• Email Address: For authentication, order confirmation, and essential updates.
• Phone Number: Verified via OTP for account security and order coordination.
• Physical Address: For laundry pickup and delivery coordinates.

3.2 Personal Data (Optional)

• Profile Photo: If you choose to upload a profile picture.
• Referral Username: If you choose to participate in our referral programme.

3.3 Vendor Verification (KYC) Documents

For registered vendors, we collect:

• Corporate Affairs Commission (CAC) certificates
• Government-issued Photo IDs (NIN, International Passport, Driver's Licence, Voter's Card)
• Proof of store address (utility bills/lease agreements)
• NUBAN bank account details for automated payout settlement

These documents are processed solely for identity verification and regulatory compliance.

3.4 Location Data

The mobile application collects and uses precise location data (GPS) to assist you in setting your pickup/delivery address on our maps. This data is used solely for address selection and courier coordination. We do not track your location in the background when the app is closed.

3.5 Payment Information

All customer payments and vendor earnings settlements are processed securely through Paystack. We do not store or collect payment card details on our servers. Transactions are split directly by Paystack at checkout: platform fees are retained by MyLaundry, and vendor earnings are settled directly into the vendor's verified bank account.

3.6 Device and Log Data

We automatically collect certain information from your device:

• FCM Token: Device identifier to send you push notifications about order status.
• Crash Logs: Sent to Firebase Crashlytics to monitor stability and fix bugs.
• Analytics: Anonymous usage patterns sent to Firebase Analytics to help us improve the app.

4. How We Use Your Information

We use the collected data for the following purposes:

• To provide, maintain, and improve the Service.
• To manage your account registration and authenticate your login.
• To process transactions, manage payments, and handle order pickups and deliveries.
• To verify vendor identity, business registration, and bank details for automated payout settlement.
• To send you transactional notifications regarding your orders.
• To detect, prevent, and address technical issues or bugs.
• To comply with legal and regulatory obligations.

5. Data Sharing and Third-Party Processors

We do not sell, rent, or trade your personal data. We share information only with trusted third parties necessary to deliver the Service:

Third Party	Purpose	Data Shared	Location
Firebase (Google)	Authentication, push notifications, crash reporting, analytics	Email, name, FCM token, crash logs	United States
Paystack	Payment processing, bank verification, split settlements	Transaction amounts, NUBAN details	Nigeria
Google Maps API	Geocoding and map display	GPS coordinates	United States
Cloudinary	Image hosting and delivery	Profile pictures, KYC document images	United States

5.1 Cross-Border Data Transfers

Certain data is transferred to servers located outside Nigeria (specifically the United States) as indicated in the table above. These transfers are carried out in compliance with Section 34 of the NDPA and are protected by the respective service providers' data processing agreements and security certifications (e.g., SOC 2, ISO 27001).

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy:

• Active accounts: Data is retained while your account remains active.
• Deleted accounts: Upon confirmed deletion, your account enters a 30-day grace period. After this period, all personal data is permanently erased from our active databases.
• Transaction records: Anonymised financial records are retained for up to 7 years to comply with Nigerian tax and financial regulations (FIRS, CAMA 2020).
• KYC documents: Retained for the duration of the vendor relationship plus any period required by CBN and regulatory guidelines.
• Crash logs and analytics: Retained for up to 90 days, then automatically purged.

7. Your Rights Under the NDPA

As a data subject, you have the following rights under the Nigeria Data Protection Act 2023:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data (see Section 8 below for the process).
• Right to Restrict Processing: Request that we limit how we use your data.
• Right to Data Portability: Request your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interest or for direct marketing.
• Right to Withdraw Consent: Withdraw your consent at any time (e.g., disabling location permissions or push notifications in device settings).
• Right to Lodge a Complaint: File a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your rights have been violated. Contact: https://ndpc.gov.ng

To exercise any of these rights, contact our DPO at support@mylaundry.live. We will respond within 30 days.

8. Account Deletion & Data Removal

You may request permanent deletion of your account and all associated personal data at any time. The deletion process follows a secure, verified workflow:

Step 1 — Request Deletion

• In-App: Go to Profile → Delete Account and confirm your request.
• Web Portal: Visit https://mylaundry.live/delete-account and log in with your credentials.

Step 2 — Email Confirmation

A confirmation email will be sent to your registered email address. You must click the confirmation link to verify the deletion request. This protects against unauthorised deletion of your account.

Step 3 — 30-Day Grace Period

After confirmation, your account enters a 30-day grace period. During this time:

• Your account is deactivated and you will not be able to place new orders.
• You may cancel the deletion by logging back in to the app and tapping "Cancel Deletion".

Step 4 — Permanent Erasure

After the grace period, the following data is permanently deleted:

• Name, email address, phone numbers, and profile photo
• Saved addresses and delivery preferences
• Authentication credentials and FCM tokens
• KYC documents (for vendors)

The following data is retained in anonymised form as required by law:

• Financial transaction records (up to 7 years per Nigerian tax law)

9. Cookies and Tracking Technologies

Our website does not use cookies for tracking or advertising purposes. The mobile application uses:

• Firebase Analytics: Anonymous usage events to understand feature adoption.
• Firebase Crashlytics: Crash reports to diagnose and fix technical issues.

You can disable analytics data collection through your device's privacy settings.

10. Security of Data

We use industry-standard security measures to protect your personal data, including:

• HTTPS/TLS transport encryption for all data in transit.
• Secure local storage on your device for authentication tokens.
• Password hashing using bcrypt with per-user salts.
• Role-based access control on our backend systems.

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your data to the highest practical standard.

11. Children's Privacy

Our Service is not directed to anyone under the age of 16. We do not knowingly collect personally identifiable information from children under 16, in accordance with the NDPA provisions on the processing of data relating to minors. If we discover that a child under 16 has provided us with personal data, we will immediately delete it from our servers.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page, updating the "Last Updated" date, and where practicable, sending a notification via email or in-app alert.

13. Contact Us & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us:

You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at https://ndpc.gov.ng.