Privacy Policies

GOTRUCK NIGERIA LIMITED ("Gotruck", "we", "our", or "us") is committed to protecting personal data in compliance with the Nigeria Data Protection Act 2023 and the GAID 2025 issued by the Nigeria Data Protection Commission (NDPC).

This Privacy Policy explains how we collect, process, store, transfer, and protect personal data in the course of providing haulage, logistics coordination, freight management, fleet operations, and digital logistics platform services.

This Policy applies to: Customers (individual and corporate), Drivers and fleet partners, Employees and contractors, Vendors and service providers, Website and platform users, and Visitors to our premises.

A. Customer Data: Full name, Email address, Phone number, Company details, Delivery location, Payment details, GPS/location data, Transaction history.

B. Driver / Fleet Partner Data: Full name, National Identification Number (NIN), Driver's License details, Vehicle registration information, Bank account details, Biometric verification (where required by law), Real-time location tracking data.

C. Employee Data: Employment records, Payroll information, Health and safety records, Background check data.

Under NDP Act 2023, we process data based on: Performance of contract, Legal obligation, Consent, Legitimate interest, Vital interest, and Public interest (where applicable).

Personal data is processed to: Facilitate haulage and logistics operations, Track cargo and vehicles, Process payments, Conduct KYC and regulatory compliance checks, Ensure fleet safety and monitoring, Provide customer support, Prevent fraud and cargo theft, and Comply with regulatory requirements.

Gotruck uses GPS tracking systems, route optimization software, and automated fleet monitoring tools.

Where automated decisions significantly affect individuals, safeguards in line with NDP Act 2023 are implemented.

We may share personal data with: Regulatory authorities (NDPC, law enforcement, etc.), Payment processors, Insurance companies, Cloud service providers, and Fleet technology vendors.

All third-party processors are bound by Data Processing Agreements compliant with NDP Act 2023 and GAID 2025.

Where personal data is transferred outside Nigeria: an adequacy assessment is conducted, standard contractual clauses are used, and explicit consent is obtained where required.

Data is retained only as long as necessary: Transaction records — Minimum 6 years; Driver compliance records — As required by transport regulations; Employment records — In line with labour laws.

After retention periods, data is securely deleted or anonymized.

Under NDP Act 2023, data subjects have the right to: Access personal data, Rectify inaccurate data, Erase data (where applicable), Restrict processing, Object to processing, Withdraw consent, Data portability, and Lodge a complaint with NDPC.

Requests may be sent to: info@gotruck.io

We implement: Encryption, Access controls, Multi-factor authentication, Secure cloud hosting, CCTV monitoring, Incident response plan, and Regular risk assessments.

In the event of a breach: an internal assessment is conducted immediately, the NDPC is notified within the statutory timeframe, and affected data subjects are notified where required.

Complaints may be sent to info@gotruck.io. Unresolved complaints may be escalated to the Nigeria Data Protection Commission.

This policy may be updated periodically to reflect regulatory or operational changes.

If you have any questions or concerns regarding this SLA, please contact us at support@gotruck.io or write us at