Last Updated: June 2026
At INIDETO Wash, a product of INIDETO Works, we respect your privacy. This policy explains how we collect, use, and protect your personal information in compliance with the Nigeria Data Protection Act (NDPA) 2023.
When you book a service we collect: your full name, WhatsApp phone number, email address (if provided), location zone and area, vehicle type, booking code, service selected, and payment confirmation details. When you pay by card, bank transfer, or USSD through our checkout, your card number, expiry date, CVV, and bank PIN are entered directly into Paystack's secure payment interface. This data goes to Paystack, not to us, and is never transmitted to or stored on our servers. We only receive and retain the transaction reference, payment status, and amount paid. During live tracking, we collect approximate location coordinates to display washer proximity on the map. Washer partners upload photo proof of completed jobs which is stored on our servers. If you submit a rating, we store your star score, selected tags, and any written comment linked to your booking code.
Our platform uses analytics tools to understand how visitors use the site and improve our service. These tools may use cookies or similar tracking technologies. We use Google (Google LLC) for traffic analysis and PostHog for product analytics, including session replay to see how the booking flow is actually used. Neither tool loads until you choose "Accept" on the cookie banner shown on your first visit; choosing "Essential only" keeps them off. You can change your choice at any time via "Cookie Preferences" in the footer, or by clearing your browser's local storage for this site.
Under Section 25 of the NDPA, we process your data based on Contractual Necessity: to verify your booking, process and verify your payment, assign a washer, navigate to your location, and deliver our service. Analytics data is processed on the basis of Legitimate Interest to improve platform performance.
We use your information to: process and confirm your booking; assign and navigate a washer to your location; send booking updates and receipts by email, and confirm appointment details by phone; verify payment and release funds to your washer; maintain your booking history; and improve platform reliability through anonymised analytics.
To operate this platform, we share limited data with the following trusted providers: Paystack (card, bank transfer, and USSD payment processing); Supabase (database and backend hosting); Brevo (transactional email delivery); Netlify (website hosting); Google Analytics (traffic analytics); PostHog (product analytics); OpenStreetMap via Leaflet (mapping). None of these providers are permitted to use your data for their own marketing purposes.
Payments (Paystack): All card, bank transfer, and USSD payments made through our checkout are processed by Paystack Payments Limited, a Central Bank of Nigeria (CBN)-licensed Payment Solution Service Provider and PCI DSS Level 1 certified payment processor. In line with the data minimisation principle under the NDPA, we do not collect, transmit, or store your card number, expiry date, CVV, or bank PIN. That information is captured directly within Paystack's own secure checkout and held on Paystack's infrastructure, not ours. What we receive back and store is limited to the transaction reference, payment status, and amount paid, which we use solely to confirm your booking and reconcile your account. For this transaction, Paystack processes your payment data as our data processor, acting on our instructions. Paystack separately acts as an independent data controller for its own regulatory obligations as a licensed payment provider, including identity verification and the fraud and anti-money-laundering checks it is required to carry out under Central Bank of Nigeria rules. This relationship is governed by the merchant agreement between INIDETO Works and Paystack, together with Paystack's own privacy policy, available at paystack.com/privacy. Direct bank transfers you initiate yourself outside the Paystack checkout (to our Kuda account) are reconciled manually by our team using the transfer reference from your own bank, and are not processed by Paystack.
Some of these service providers are located outside Nigeria, including in the United States (Supabase, Netlify, Google, PostHog) and France (Brevo). By using this platform, you consent to your data being transferred to and processed in these countries. We ensure such transfers are made only to providers who maintain adequate technical and organisational security measures consistent with the Nigeria Data Protection Act 2023.
We do not sell or rent your personal data to any third party. Your name, phone number, and location are shared only with the Washer assigned to your booking and only for the purpose of completing your service.
We keep your booking records and personal data only as long as needed for customer history, dispute resolution, and our accounting obligations under Nigerian law. In practice: your profile is automatically anonymised (name, phone and email removed; anonymised booking and payment records are kept for accounting) after 24 months of no new bookings. Abandoned in-progress bookings are cleared after 14 days. Security and login logs are kept for 90 days. Analytics data is retained per the respective provider's policy. You may request deletion sooner at any time, subject to our legal retention obligations. See Section 8.
In the event of a data breach that is likely to result in risk to your rights and freedoms, we will notify you and the Nigeria Data Protection Commission (NDPC) within 72 hours of becoming aware, as required under the NDPA.
Under the NDPA, you have the right to: access your personal data; request corrections; request deletion (subject to legal retention obligations); object to processing; and data portability. To exercise any of these rights, contact us at support@inidetowash.com.
If we fail to resolve your complaint within a reasonable time, you have the right to lodge a formal complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.