Privacy Policy

This Privacy Policy explains how Prelp (“Prelp”, “we”, “us”), a scheduled batched-delivery service operated by Stalwart Crest, collects, uses and protects your personal data when you use the Prelp mobile app and related services (the “Service”). By using Prelp, you agree to this policy.

1. Who we are

Prelp is a delivery service for customers in Nigeria. Stalwart Crest is the data controller responsible for your personal data. You can reach us about privacy or data-protection matters at support@stalwartcrest.com.

2. Information we collect

Information you give us

• Account details: your name, email address, phone number and password when you create an account.
• Delivery details: the delivery address (and the phone number a rider can reach you on) you provide so your order can be brought to you.
• Orders: the items you add, your cart and order history, and the 4-digit hand-off code generated for each order.
• Support messages: anything you send us when you contact support.

Information created as you use Prelp

• Wallet & transactions: your in-app wallet balance and a ledger of payments, refunds and wallet activity.
• Payment records: confirmation that a payment succeeded or was refunded, and the amount, so we can show your order and wallet status. Card and bank-account details are entered with our payment processor, not stored by Prelp (see below).
• Order contact snapshot: the name, phone number and delivery location for an order are saved with that order so it can be fulfilled correctly even if you later change your saved details.
• Operational logs: records we keep to run the service safely and resolve issues, such as a rider's attempts to call you about a delivery, and logs of privileged staff actions.
• Basic technical data: information needed to run the app reliably and keep your session secure.

Prelp does not include third-party advertising or behavioural-tracking SDKs, and we do not build advertising profiles about you.

3. Payments

Card and bank-transfer payments are processed by Paystack. When you pay, your card or bank details are handled by Paystack under their own terms and privacy policy; Prelp does not receive or store your full card number. We treat an order as paid only once Paystack confirms the payment to our servers.

4. How we use your information

• To create and manage your account and keep you signed in.
• To take, price, process and deliver your orders, including assigning a rider and confirming hand-off with your code.
• To process payments, issue wallet refunds, and keep accurate transaction records.
• To provide customer support and respond to your messages.
• To keep the Service secure, prevent fraud and abuse, and fix problems.
• To meet legal, tax and regulatory obligations.

5. Who we share it with

We share personal data only as needed to run the Service:

• Riders: the rider assigned to your order sees the details needed to deliver it (such as your name, delivery address, phone number and order contents) and confirms hand-off using your 4-digit code.
• Supabase: our cloud platform for authentication, database and server functions, which stores your account and order data on our behalf.
• Paystack: our payment processor, for card and bank-transfer payments.
• Authorities: where we are legally required to disclose information, or to protect our rights, users or the public.

We do not sell your personal data.

6. Where your data is stored

Your data is stored on servers operated by our cloud providers (Supabase and Paystack), which may be located outside Nigeria. Where data is transferred across borders, we rely on providers that apply appropriate safeguards to protect it.

7. How long we keep it

We keep your account and order data for as long as your account is active and as long as needed to provide the Service. We keep transaction and payment records for longer where the law requires (for example, tax and financial record-keeping). You can ask us to delete your account, and we will remove or anonymise your data except where we must retain it by law. For your protection, account deletion can't be completed while you still hold unspent wallet store credit or have an order in progress (awaiting payment, paid, out for delivery, at a pickup point, or pending a refund), please spend or clear those first, then delete.

8. Your rights

Under the Nigeria Data Protection Act, you have the right to:

• access the personal data we hold about you;
• ask us to correct it if it's inaccurate or incomplete;
• ask us to delete it (subject to the limits in section 7);
• object to, or ask us to restrict, certain processing;
• data portability: receive your data in a structured, commonly used format;
• withdraw your consent at any time where our processing relies on consent (this won't affect processing already carried out);
• lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you're unhappy with how we handle your data.

To exercise any of these rights, email support@stalwartcrest.com.

9. Security

We protect your data with measures including encryption in transit, server-side enforcement of who can do what, and confirming payments on the server rather than trusting the app. Your 4-digit hand-off code lives only in your app and is checked at delivery, and it is never written on the bag. No system is perfectly secure, but we work to keep your information safe.

10. Data breaches

If a personal-data breach occurs, we will assess it promptly and, where the Nigeria Data Protection Act requires, notify the Nigeria Data Protection Commission and any affected users within the timeframes the law sets.

11. Children

Prelp is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. When we do, we'll change the “last updated” date above, and we'll let you know of significant changes through the app where appropriate.

13. Contact us

Questions about your privacy or this policy? Email support@stalwartcrest.com.