MoveQuicka Privacy Policy

Effective Date: 1 January 2025 · Last Updated: 1 May 2026

MoveQuicka ("we", "our", or "us") is committed to protecting your privacy and handling your personal data in an open and transparent manner. This Privacy Policy explains how we collect, use, share, and protect your information when you use our platform, and sets out your rights under the General Data Protection Regulation (GDPR) and applicable Nigerian data protection law.

1. Information We Collect

Personal Identification: Full name, email address, phone number, and profile photo.
Account Credentials: Encrypted password hash (we never store plaintext passwords).
Location Data: Pickup and delivery addresses you enter; approximate device location (only with explicit consent) to match nearby vendors.
Move Details: Items listed, floor levels, dates, time slots, and move notes.
Payment Information: Transaction references and escrow records. We do not store raw card numbers — payments are processed by PCI-DSS compliant third-party processors.
Device & Usage Data: IP address, device type, OS version, app version, pages visited, features used, and crash reports.
Communications: Support tickets, in-app messages, and ratings/reviews.

2. How We Use Your Data

Service Delivery: To process move requests, connect customers with vendors, and facilitate escrow payments.
Account Management: To create and maintain your account, verify identity, and authenticate logins.
Safety & Security: To detect fraud, prevent unauthorised access, and enforce our Terms of Service.
Customer Support: To respond to your enquiries and resolve disputes.
Product Improvement: To analyse usage patterns and improve the platform (using anonymised/aggregated data where possible).
Communications: To send transactional notifications (booking confirmations, payment updates, OTPs) and, with your consent, marketing messages.
Legal Compliance: To meet our obligations under Nigerian law and applicable international regulations.

3. Legal Basis for Processing (GDPR)

Contract Performance: Processing necessary to deliver the services you request.
Legal Obligation: Processing required to comply with Nigerian law, tax regulations, or court orders.
Legitimate Interests: Fraud prevention, network security, and platform analytics — balanced against your privacy rights.
Consent: Location access, marketing emails, and optional personalisation features — you may withdraw consent at any time.

4. Data Sharing

Vendors: We share your pickup/delivery addresses, move details, and first name with vendors you choose to engage.
Payment Processors: We share transaction references with our payment partners solely to process payments.
Service Providers: We use vetted third-party providers for cloud hosting, analytics, and customer support tools. All are bound by data processing agreements.
Law Enforcement: We disclose data only when legally required or to protect the safety of users and the public.
We never sell your personal data to third parties for advertising purposes.

5. Data Retention

Active account data is retained for as long as your account is open.
Closed account data is retained for 7 years to meet Nigerian financial and tax obligations.
Location data and move history are anonymised after 2 years.
Support communications are retained for 3 years.
You may request deletion of your data at any time (see Section 6).

6. Your Rights (GDPR & NDPR)

Right of Access: Request a copy of all personal data we hold about you.
Right to Rectification: Correct inaccurate or incomplete data.
Right to Erasure ("Right to be Forgotten"): Request deletion of your data, subject to legal retention obligations.
Right to Restrict Processing: Ask us to limit how we use your data.
Right to Data Portability: Receive your data in a machine-readable format.
Right to Object: Object to processing based on legitimate interests or for direct marketing.
Rights Related to Automated Decision-Making: Request human review of any automated decisions that significantly affect you.
To exercise any right, contact us at privacy@movequicka.com. We will respond within 30 days.

7. Data Security

All data is transmitted over TLS 1.3 encrypted connections.
Sensitive credentials are stored using industry-standard hashing (bcrypt).
Access to personal data is restricted to employees who need it to perform their duties.
We undergo periodic security audits and penetration testing.
In the event of a data breach affecting your rights, we will notify you and the relevant supervisory authority within 72 hours as required by GDPR.

8. Cookies & Tracking

Our mobile app does not use browser cookies.
We use anonymous analytics SDKs to understand how features are used. You may opt out in Settings → Privacy.
Push notification tokens are stored to deliver transactional alerts you have consented to receive.

9. Children's Privacy

MoveQuicka is not directed at children under 18.
We do not knowingly collect personal data from minors.
If you believe a minor has registered, contact us at privacy@movequicka.com and we will delete the account promptly.

10. International Transfers

Your data may be processed in countries outside Nigeria, including EU/EEA member states.
All cross-border transfers are protected by Standard Contractual Clauses (SCCs) or equivalent safeguards approved under GDPR.

11. Changes to This Policy

We will notify you of material changes via in-app notification and email at least 14 days before they take effect.
Continued use of MoveQuicka after the effective date constitutes acceptance of the updated policy.

12. Contact Us

Data Controller: MoveQuicka Global Limited.
Address: Plot 14, Technology Drive, Lekki, Lagos, Nigeria.
Email: privacy@movequicka.com
Phone: +234 800 MOVEQUICKA
For GDPR enquiries or to lodge a complaint with a supervisory authority, you may also contact the Nigerian Data Protection Bureau (NDPB) at ndpb.gov.ng.