Last Updated: March 30, 2026
1. Introduction
BlackBoxNG Logistics ("BlackBoxNG", "we", "us", or "our") takes the privacy of every person who interacts with our services seriously. We recognise that the personal information you share with us when you use our website, application, or delivery services is yours, and we are committed to handling it responsibly, transparently, and securely.
This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, who we may share it with, and the rights you have in relation to it. It covers all interactions with BlackBoxNG — including your use of the website at www.blackboxng.com, our application at app.blackboxng.com, and all delivery and logistics services we provide.
Our data practices are designed to comply with the Nigeria Data Protection Act 2023 (NDPA) and the regulations issued under it by the Nigeria Data Protection Commission (NDPC). By accessing our website, creating an account, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and accept the practices described herein. If you do not agree with any part of this policy, please discontinue use of our services.
2. Who We Are (Data Controller)
BlackBoxNG Logistics is the Data Controller in respect of all personal data collected through our website, application, and delivery operations. As the Data Controller, we determine the purposes for which your personal data is processed and the manner in which that processing takes place.
If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how your personal data is handled, you can reach us through the following channels:
For a full description of how BlackBoxNG meets its obligations under the NDPA 2023, including our data protection principles, impact assessments, and sub-processor arrangements, please refer to our Data Protection Policy.
3. Information We Collect
Depending on how you interact with our services, we may collect and process the following categories of personal information:
- Identity Information — Your full name, date of birth, gender, and government-issued identification details collected as part of our Know Your Customer (KYC) verification process for account holders.
- Contact Information — Your billing address, delivery address, email address, and phone number. These are essential for processing bookings and communicating with you about your deliveries.
- Financial & Transaction Information — Payment method details used when completing a transaction, your transaction history with us, subscription billing records, and delivery fees charged. We do not store full card details — see Section 8 for details on payment processors.
- Location Information — Pick-up and drop-off addresses associated with each booking. During active deliveries, we collect real-time geo-location data from the assigned Rider's device solely for the purposes of dispatch, routing, and live delivery status updates.
- Technical Information — Your IP address, device type, browser type and version, operating system, access timestamps, and referring URLs. This information is collected automatically when you access our website or application.
- Usage Information — Information about how you navigate and interact with our platform, including features you use, pages you visit, booking history, and search queries entered on the platform. This helps us understand how our services are used and where we can improve.
- Delivery & Operational Information — Package descriptions and declared values provided at the time of booking, pick-up and drop-off confirmation photographs taken by Riders, and CCTV footage captured at our facilities where relevant to an operational incident or security matter.
- Marketing & Communications Information — Your stated preferences for receiving promotional messages from us, and data about your engagement with our marketing communications (such as whether an email was opened or a link was clicked).
We do not intentionally collect sensitive personal data — such as information about your race or ethnic origin, religion or beliefs, health, biometric identifiers, or political opinions — unless we are required to do so by applicable law or regulatory requirement.
4. How We Collect Your Information
We collect personal information through the following methods:
- Direct interactions — When you create an account, place a delivery booking, complete a KYC verification, fill in a form on our platform, or contact our support team, you directly provide us with personal information.
- Automated technologies — When you visit our website or use our application, we automatically collect technical and usage information through cookies and similar tracking technologies. For a detailed explanation of the cookies we use and how to manage your preferences, please see our Cookie Policy.
- Third parties — We may receive information about you from trusted third parties including payment processors (who provide transaction confirmation data), identity verification providers (who assist with KYC checks), and analytics partners (who provide aggregated insights about platform usage).
5. Legal Basis for Processing (NDPA 2023)
We only process your personal data where we have a valid legal basis to do so under the Nigeria Data Protection Act 2023. The legal bases we rely on are:
- Contractual necessity — Processing that is necessary to perform the contract we have entered into with you or to take steps at your request before entering into a contract. This includes managing your account, processing bookings, dispatching Riders, and completing deliveries.
- Legal obligation — Where we are required to process your data to comply with Nigerian laws and regulations, including tax obligations, anti-money laundering rules, and any applicable regulatory requirements.
- Legitimate interests — Where processing is necessary for our legitimate business interests, such as preventing fraud, detecting abuse, improving our services, and producing internal performance reports — provided those interests are not overridden by your rights and interests. We conduct a balancing assessment to ensure this basis is applied appropriately.
- Consent — Where you have freely given us specific, informed, and unambiguous consent to process your data for a particular purpose, such as sending you marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing that took place before withdrawal.
6. How We Use Your Information
We use the personal information we collect for the following purposes:
- Creating and managing your BlackBoxNG account, including identity verification.
- Processing, dispatching, and tracking your delivery bookings from pick-up through to delivery completion.
- Communicating with you about the status of your bookings, failed delivery attempts, and support queries.
- Processing payments, issuing invoices, and managing subscription billing.
- Conducting KYC identity verification as required by our compliance obligations.
- Detecting, investigating, and preventing fraudulent transactions, abuse of our services, and other unlawful activities.
- Personalising your experience on the platform based on your booking history and preferences.
- Sending you service notifications and, where you have opted in, promotional communications about our offers and services.
- Complying with applicable legal and regulatory obligations.
- Enforcing our Terms of Service and protecting the rights and safety of BlackBoxNG, our Riders, and our users.
7. Location Data & Delivery Tracking
Location data is a core part of how our delivery service operates. When you place a booking, the pick-up address and drop-off address you provide are recorded as location data associated with that booking. This information is used to assign an appropriate Rider, calculate delivery fees, and route the delivery efficiently.
During an active delivery, the geo-location of the assigned Rider's device is tracked in real-time. This serves three specific purposes: confirming the Rider has reached the correct pick-up point, providing live status updates visible to the sender, and supporting our dispatch team in managing operational flow. Where available, you may receive a tracking link that lets you follow the progress of your delivery.
Rider geo-location data collected during a delivery is used for basic dispatch and routing purposes and is not retained beyond the completion of the delivery and any applicable dispute resolution window. We do not use this data for precise or persistent navigation profiling.
8. Information Sharing
We do not sell your personal data to any third party. We share your information only in the circumstances described below, and only to the extent necessary for the stated purpose:
- Riders and delivery partners — The assigned Rider for your booking receives the pick-up address, drop-off address, your contact phone number, and relevant package details. This information is shared only with the Rider assigned to your specific booking.
- Payment processors — We share payment data with our payment processing partners to authorise and complete transactions. We do not store your full card details on our systems.
- Technology and service providers — We engage third-party providers for cloud hosting, analytics, identity verification, and customer support functions. These providers are contractually bound to process your data only on our instructions and may not use it for their own independent purposes.
- Professional advisers — We may share relevant personal data with our lawyers, auditors, and insurers where necessary for legal advice, compliance reviews, or insurance claims.
- Regulatory authorities — Where required by Nigerian law, a valid court order, or a lawful request from a government authority, we will disclose personal data as legally required.
- Business transfers — In the event of a merger, acquisition, or sale of all or part of our business, personal data may be transferred to the relevant parties as part of that transaction, subject to appropriate confidentiality and data protection safeguards.
9. Data Security
We take the security of your personal data seriously and have implemented a range of technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure:
- All data transmitted between your device and our platform is encrypted in transit using industry-standard protocols. Data stored on our systems is encrypted at rest.
- Access to personal data is restricted on a strict need-to-know basis. Staff and contractors who handle personal data are bound by confidentiality obligations.
- We maintain firewalls and intrusion detection systems to protect our infrastructure from unauthorised access.
- Multi-factor authentication is required for access to internal systems that hold personal data.
- We conduct regular security reviews and audits to identify and address potential vulnerabilities.
In the event of a personal data breach, we will notify the Nigeria Data Protection Commission (NDPC) within 72 hours of becoming aware of the breach, where that breach is likely to result in a risk to the rights and freedoms of affected individuals. We will also notify affected individuals without undue delay where the breach is likely to result in a high risk to their rights. If you believe your account has been compromised, please contact us immediately at info@blackboxng.com or +2347049117938.
10. Data Retention
We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Our retention periods are as follows:
- Active accounts: We retain your personal data for the duration of your account relationship with us and for a period of three (3) years following the closure of your account.
- Transaction and delivery records: Records relating to completed transactions and deliveries are retained for a minimum of six (6) years for the purposes of tax compliance, accounting, and dispute resolution.
- Marketing preferences: Your marketing consent and preference records are retained until you withdraw your consent.
- Security and fraud data: Data collected in connection with a security incident or fraud investigation is retained for the duration of that investigation and any resulting resolution process.
Where you request deletion of your account, we will delete or anonymise your personal data within five (5) business days of receiving your verified request, except where retention is required or permitted by applicable law.
11. Your Rights Under the NDPA
Under the Nigeria Data Protection Act 2023, you have the following rights in relation to your personal data:
- Right of Access — You may request a copy of the personal data we hold about you, together with information about how it is being processed.
- Right to Rectification — You may ask us to correct any personal data that is inaccurate or to complete data that is incomplete.
- Right to Erasure — You may request that we delete your personal data where we no longer have a lawful reason to retain it.
- Right to Restriction — In certain circumstances, you may ask us to pause or restrict the processing of your personal data, for example while we verify the accuracy of data you have disputed.
- Right to Data Portability — Where processing is based on your consent or a contract, and is carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format.
- Right to Object — You may object to processing of your personal data that is based on our legitimate interests, or to the use of your data for direct marketing purposes. We will cease that processing unless we have compelling legitimate grounds that override your interests.
- Right to Withdraw Consent — Where our processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out before the withdrawal.
- Right to Account Deletion — You may request full deletion of your BlackBoxNG account and associated personal data by emailing info@blackboxng.com with the subject line "Account Deletion Request".
To exercise any of the rights listed above, please contact us at info@blackboxng.com. We will respond to your request within 30 days. We may need to verify your identity before processing certain requests.
12. Children's Privacy
Our services are not directed at individuals under the age of 18, and we do not knowingly collect personal data from children. If you believe that a child has provided us with personal information without appropriate parental or guardian consent, please contact us at info@blackboxng.com and we will take prompt steps to delete that data from our records.
13. Marketing Communications
From time to time, we may send you promotional emails or messages about new services, offers, or updates from BlackBoxNG, where you have given us consent to do so. You can opt out of marketing communications at any time by clicking the unsubscribe link included in any marketing email we send, or by emailing info@blackboxng.com with the subject line "Unsubscribe".
Opting out of marketing communications will not affect transactional or booking-related communications, which we will continue to send as necessary to fulfil our service obligations to you.
14. Links to Other Platforms
Our website and application may contain links to third-party websites or platforms. These third-party sites operate independently and have their own privacy policies, which we have no control over. We are not responsible for the privacy practices of any third-party site. We encourage you to review the privacy policy of any external platform before sharing your personal information with it.
15. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the nature of our services. When we make changes, we will revise the "Last Updated" date at the top of this page. Where a change is material, we will notify you either by email to the address associated with your account or through a prominent notice on our platform. We encourage you to review this policy periodically to stay informed about how we protect your information.
16. Contact Us
If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:
- Email: info@blackboxng.com
- Phone: +2347049117938
- Address: 15 Oluwasanmi Cl, Mafoluku Oshodi, Lagos 102214, Lagos, Nigeria
- Support hours: Monday – Saturday, 9 AM – 5 PM (WAT)