Privacy policy.
What we store about you, why we need it, who else sees it, and how long we keep it. Written from the actual database, in plain language.
This is a working draft, written to describe what the service actually does, and it has not yet been reviewed by a lawyer. It is published so it can be checked — not because it is final. Nothing here overrides what we agree with you in writing. Queries to hello@waybridge.com.ng.
[01]Who we are
Waybridge is an import, clearing and delivery service operating from a hub in Ikeja, Lagos. This policy covers the Waybridge website, the tracking pages, and the WhatsApp messages we send you.
Our legal entity and registration number are being finalised and will be named here once they are. That is a gap in this document, and we would rather show it than paper over it.
[02]What we collect, and why
We collect what is needed to move an item to you and to tell you where it is. Nothing on this list exists for advertising, and none of it is sold.
- Your phone number
- Stored in international format. It is how we send you updates, and it is how you log in — there is no password to collect.
- Your name and delivery address
- Needed for the shipping label and for customs paperwork, which requires a real consignee.
- What you are importing
- Description, value, weight, and for buy-for-me the product link. Customs requires an accurate declaration; so do we.
- Messages between us
- The full WhatsApp thread for your shipment, including what we sent and when it was delivered and read. We keep the message as sent, so what you received cannot change later.
- Payment records
- Amount, currency, status, and the reference from our payment provider. We never see or store your card number or bank credentials — those go directly to the provider.
- Delivery photos
- A photo taken at handover, and the name of whoever received the item. Visible to you on your tracking page.
- Identity documents (travellers only)
- If you apply to carry items, a government ID, checked against your flight booking. Held for verification, never shown to senders.
- Technical records
- For staff accounts, an audit log of who changed what, with the IP address and browser used. This exists to hold our own team accountable, not to profile you.
[03]Verification codes
When you look up a shipment by phone number, we send a six-digit code first. We store only a hash of that code — not the code itself — along with when it expires and how many times it has been tried. Codes are single-use, expire in ten minutes, and lock out after five wrong attempts.
This is why we ask for a code before showing shipment details: without it, anyone who guessed your phone number could read where your parcel is and what you paid for it.
[04]Who it is shared with
Only with parties that have to act on it, and only with the part they need.
- Our freight and clearing partners
- Consignee name, address, phone, and the item declaration. They cannot proceed without it.
- The Nigeria Customs Service
- The declaration and supporting documents, as required by law.
- Our messaging provider
- Your phone number and the text of the message, to deliver it.
- Our payment provider
- The amount and a reference. You enter card details with them, not with us.
- Travellers (crowdshipping only)
- The recipient’s name, phone and delivery area — the minimum needed to hand an item over. Never your ID, your payment details, or the item’s value.
[05]How long we keep it
Shipment records, message history and payment records are kept for seven years, because tax and customs records have to be producible for that long.
Verification codes are deleted once used or expired. Traveller identity documents are deleted twelve months after the last trip, or immediately on request once no trip is in progress. Delivery photos are deleted after two years.
[06]Your rights
Under the Nigeria Data Protection Act 2023 you can ask us for a copy of what we hold about you, ask us to correct it, and ask us to delete it where we are not required to keep it. We will respond within thirty days and we will not charge you for it.
Write to hello@waybridge.com.ng, or message +234 814 508 0225 on WhatsApp. If you are asking us to delete something, we will tell you plainly what we cannot delete and which law requires us to keep it.
[07]Security
Staff accounts use individual passwords, stored hashed, with permissions limited by role — a delivery rider can advance a shipment’s stage and nothing else. Every staff action against a shipment is logged with the account that took it.
Identity documents and delivery photos are not served from public URLs; they are fetched through an authenticated route that checks the session on each request.
No system is perfect. If we ever have a breach that puts you at risk, we will tell you and the regulator rather than wait to be asked.
[08]Cookies
We set one cookie, and only after you log in: a session cookie that keeps you signed in. There is no analytics cookie, no advertising pixel, and no third-party tracker on this site. The marketing pages set nothing at all.
[09]Changes to this policy
If we change something material — a new category of data, a new third party — we will say so on this page and, where it affects an active shipment, in the WhatsApp thread for it. The date at the top of this page always reflects the last substantive change.