Last updated: 1 April 2026

Errand P LTD ("ErrandPay", "we", "our" or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, share and safeguard personal data when you interact with our website, partner platforms, POS terminals, mobile apps and dashboards (the "Services"). It is published in line with the Nigeria Data Protection Act 2023 (NDPA) and applicable regulations.

1. Information we collect

• Identity data: name, date of birth, gender, government-issued identification numbers (e.g. BVN, NIN).
• Contact data: email, phone number, postal address.
• Business data: company name, registration number, business type, beneficial ownership.
• Transaction data: details of transfers, cash-outs, purchases, bill payments and PayByTransfer events.
• Device and technical data: IP address, device identifiers, app version, operating system.
• Communications: records of correspondence with our team and support tickets.

2. How we use your information

• Provide, operate and maintain the Services.
• Onboard and verify partners, agents and merchants (KYC/KYB).
• Process transactions, settlements and reconciliations.
• Detect and prevent fraud, abuse and other harmful activity.
• Comply with legal, regulatory and reporting obligations.
• Improve product, support and partner experience.
• Send service notifications and (where you opt in) marketing communications.

3. Lawful basis for processing

We process personal data on the basis of contractual necessity, legal obligation, our legitimate business interests, and your consent (where applicable). You can withdraw consent at any time without affecting prior processing.

4. Sharing your information

We share personal data only as needed to operate the Services, including with:

• Partners and processing partners (PTSPs, switches, banks) involved in completing transactions.
• Identity-verification, fraud-detection and KYC/KYB providers.
• Cloud, communications and analytics providers acting on our instructions.
• Regulators, law-enforcement agencies and courts where required by law.

We do not sell personal data.

5. International transfers

Some service providers may be located outside Nigeria. Where personal data is transferred outside Nigeria, we put appropriate safeguards in place in line with the NDPA.

6. Data retention

We retain personal data for as long as necessary to provide the Services and to meet legal, regulatory and accounting requirements (typically a minimum of 7 years for financial-transaction records).

7. Security

We implement administrative, technical and physical safeguards designed to protect personal data, including encryption in transit, role-based access controls and continuous monitoring. No system is perfectly secure; please contact us immediately if you suspect any compromise.

8. Your rights

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of data, subject to legal retention requirements.
• Object to or restrict certain processing.
• Withdraw consent and lodge complaints with the Nigeria Data Protection Commission (NDPC).

9. Cookies

Our website uses essential cookies to operate and analytics cookies (where permitted) to improve performance. You can control cookies through your browser settings.

10. Children

The Services are not directed to individuals under 18. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Services or by email.

12. Contact

To exercise your rights or for any privacy questions, email our Data Protection Officer at hello@errandpay.com or write to Errand P LTD, 44b Ope-Ifa Crescent, Anthony Village, Lagos.