FAVGRAB LOGISTICS

PRIVACY POLICY

Effective Date: February 2026 Last Updated: February 2026

FavGrab Logistics ("FavGrab," "we," "us," "our") operates the FavGrab mobile application and website at www.favgrab.com (collectively, the "Platform"). We are committed to protecting your personal data and your right to privacy.

This Privacy Policy explains how we collect, use, store, share, and protect information about you when you use our Platform and services, including food delivery, mart and grocery delivery, pharmaceutical (OTC) delivery, ride-hailing, bill payment, wallet services, and our rewards programme.

By downloading, registering, or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your information as described herein. If you do not agree, please do not use the Platform.

This Privacy Policy complies with the Nigeria Data Protection Act 2023 (NDPA), the Nigeria Data Protection Regulation 2019 (NDPR), and applicable Google Play Store and Apple App Store developer policies.

1. INFORMATION WE COLLECT

1.1 Information You Provide Directly

When you create an account or use our Services, we may collect:

• Full name
• Email address
• Phone number
• Delivery address and location details
• Profile photo (optional)
• Payment information (processed and stored by our third-party payment processors; we do not store full card details)
• Government-issued identification, where required for identity verification
• Communications you send to us (e.g. support messages, complaints)

1.2 Information Collected Automatically

When you use the Platform, we automatically collect:

• Device information: device type, model, operating system, unique device identifiers
• Usage data: pages visited, features used, time and duration of sessions, in-app activity
• Location data: GPS coordinates, when you enable location services (used for delivery, ride-hailing, and service availability)
• Crash reports and diagnostic data

1.3 Information from Third Parties

We may receive information about you from:

• Payment processors, for transaction verification and fraud prevention
• Driver-partners and vendors, for order fulfilment and dispute resolution
• Analytics and advertising partners, in accordance with their own privacy policies

1.4 Sensitive Information

We do not intentionally collect sensitive personal data such as health records, biometric data, or financial account numbers beyond what is strictly necessary for payment processing. For pharmaceutical orders, we may process information about OTC products you purchase, but we do not collect or store medical prescriptions or health history.

2. HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes:

• Account creation and management: to register, authenticate, and maintain your account.
• Service delivery: to process orders, assign drivers, facilitate deliveries, and provide all Platform services.
• Payments and wallet: to process payments, manage wallet balances, and facilitate bill payments.
• Ride-hailing: to match you with available driver-partners and track ride progress.
• Rewards programme: to track, calculate, and apply rewards points and benefits.
• Communications: to send order confirmations, delivery updates, support responses, and security alerts via SMS, email, or push notifications.
• Marketing (with your consent): to send promotional offers, new features, and relevant updates. You may opt out at any time.
• Safety and fraud prevention: to detect, investigate, and prevent fraudulent transactions, abuse, or violations of our Terms.
• Legal compliance: to comply with applicable Nigerian laws and regulations, including the NDPA and CBN guidelines.
• Service improvement: to analyse usage trends, conduct research, and improve our Platform and services.
• Business transfers: in the event of a merger, acquisition, or asset sale, your data may be transferred as part of that transaction.

3. LEGAL BASIS FOR PROCESSING

We process your personal data on the following legal bases under the Nigeria Data Protection Act 2023:

• Contractual necessity: processing required to perform our contract with you (e.g. fulfilling orders, processing payments).
• Consent: where you have given explicit consent (e.g. marketing communications, location access).
• Legal obligation: where processing is required to comply with applicable law.
• Legitimate interests: where necessary for our legitimate business interests, provided these are not overridden by your rights (e.g. fraud prevention, service improvement).

4. LOCATION DATA

4.1 The Platform requests access to your device's location to enable core features including delivery address confirmation, driver matching for ride-hailing, and service availability checks.

4.2 Location access is requested only with your permission. You may grant or revoke location access at any time through your device settings. Revoking location access may limit the functionality of certain services.

4.3 For ride-hailing services, your approximate location is shared with your assigned driver-partner for the duration of the trip only.

4.4 We do not sell your location data to third parties.

5. SHARING YOUR INFORMATION

We do not sell your personal data. We may share your information only in the following circumstances:

5.1 Service Providers

We share data with trusted third-party service providers who assist us in operating the Platform, including payment processors, cloud hosting providers, SMS and push notification providers, analytics providers, and customer support tools. All service providers are contractually required to process your data only as instructed and to maintain appropriate security measures.

5.2 Vendors and Driver-Partners

To fulfil your orders or rides, we share relevant order details (such as your name, delivery address, and phone number) with the applicable vendor or driver-partner. They are not permitted to use this information for any purpose other than fulfilling your order.

5.3 Legal Requirements

We may disclose your information to law enforcement agencies, regulators, or courts where required by applicable Nigerian law or in response to a valid legal process.

5.4 Business Transfers

If FavGrab is involved in a merger, acquisition, or sale of assets, your personal data may be transferred. We will provide notice before such transfer and inform you of any change to this Privacy Policy.

5.5 With Your Consent

We may share your data for any other purpose with your explicit consent.

6. DATA RETENTION

6.1 We retain your personal data for as long as your account is active or as necessary to provide our services.

6.2 Upon account deletion, we will delete or anonymise your personal data within a reasonable timeframe, except where we are required to retain it to comply with legal obligations, resolve disputes, or enforce our agreements.

6.3 Transaction records, including wallet and payment history, may be retained briefly in accordance with Nigerian financial record-keeping requirements.

6.4 Usage data and analytics data are generally retained for shorter periods unless required for security or legal purposes.

7. DATA SECURITY

7.1 We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include encryption, access controls, and secure server infrastructure.

7.2 No method of transmission over the internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

7.3 You are responsible for keeping your account credentials confidential. If you believe your account has been compromised, please contact us immediately at favour@favgrab.com.

8. YOUR RIGHTS

Under the Nigeria Data Protection Act 2023, you have the following rights in relation to your personal data:

• Right of access: to request a copy of the personal data we hold about you.
• Right to rectification: to request correction of inaccurate or incomplete data.
• Right to erasure: to request deletion of your personal data, subject to legal retention obligations.
• Right to restrict processing: to request that we limit how we use your data in certain circumstances.
• Right to data portability: to receive your data in a structured, commonly used format.
• Right to object: to object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at favor@favgrab.com. We will respond within 3 days. We may need to verify your identity before processing your request.

9. CHILDREN'S PRIVACY

9.1 The Platform is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from minors.

9.2 If you are a parent or guardian and believe your child has provided us with personal data without your consent, please contact us at [email protected] and we will take prompt steps to delete such information.

10. COOKIES AND TRACKING TECHNOLOGIES

10.1 Our website uses cookies and similar tracking technologies (including web beacons and pixel tags) to enhance your browsing experience, analyse Platform usage, and support marketing activities.

10.2 Types of cookies we use:

• Essential cookies: necessary for the Platform to function. Cannot be disabled.
• Functionality cookies: remember your preferences and login details.
• Analytics cookies: help us understand how users interact with the Platform.

10.3 You can control or disable cookies through your browser settings. Disabling essential cookies may affect the functionality of the Platform.

11. PUSH NOTIFICATIONS

11.1 We may send push notifications to your device for order updates, promotions, and service alerts.

11.2 You can manage push notification preferences at any time through your device settings or within the Platform. You can accept or reject this function.

12. THIRD-PARTY LINKS AND SERVICES

12.1 The Platform may contain links to third-party websites or integrate third-party services (e.g. payment processors). This Privacy Policy does not apply to those third-party services.

12.2 We encourage you to review the privacy policies of any third-party services you access through our Platform. FavGrab is not responsible for the privacy practices of third parties.

13. INTERNATIONAL DATA TRANSFERS

13.1 FavGrab operates primarily in Nigeria. Where your data is processed or stored outside Nigeria (for example, on cloud servers), we ensure that adequate safeguards are in place to protect your data in accordance with the NDPA and applicable international standards.

14. CHANGES TO THIS PRIVACY POLICY

14.1 We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements.

14.2 When we make material changes, we will notify you via email, in-app notification, or a prominent notice on the Platform prior to the change becoming effective, and update the "Last Updated" date at the top of this policy.

14.3 Your continued use of the Platform after any update constitutes your acceptance of the revised Privacy Policy.

15. CONTACT US

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us:

FavGrab Logistics Umez Eronini Street, Owerri, 460281, Imo State, Nigeria Phone / WhatsApp: +234 8026455628 Email: [email protected] Website: www.favgrab.com

We are committed to resolving any complaints or concerns about our privacy practices promptly and transparently.

By using the FavGrab Platform, you confirm that you have read, understood, and agreed to this Privacy Policy.