Privacy policy

This policy explains what personal data we handle when you use our website or a WhatsApp service we run for a business, why we handle it, and what you can ask us to do with it.

Who we are

Company: Nidhaam Technologies Ltd
Registration: RC 9721040, Corporate Affairs Commission, Nigeria
Contact: hello@nidhaam.tech

In this policy, "we", "us" and "Nidhaam" mean Nidhaam Technologies Ltd.

What this policy covers

Our WhatsApp services. We build and run WhatsApp ordering and messaging services for businesses. When you message one of those businesses on WhatsApp, our software receives and answers your messages for them.
Our website and messages you send us directly.

Our other products, such as EduHisab, have their own privacy policies.

Who is responsible for your data

When you order from a business through one of our WhatsApp services, that business decides what happens with your order and is responsible for your data. We handle your data on the business's behalf and only to run the service for them. Questions about your order are best sent to the business; we will help them answer any privacy request.

For our website and for messages you send to Nidhaam directly, we are responsible for your data.

What we collect

If you message a business that uses our WhatsApp service

Your WhatsApp phone number and the profile name WhatsApp shares with businesses.
The messages you send to the business, including the buttons and list options you choose.
Location pins you share for delivery, and any address details you type, such as a building or floor.
Your orders: items, quantities, prices, delivery or pickup, the time you chose, any note you add, and each change in the order's status.
Your language choice (Arabic or English).
Technical records from WhatsApp, such as message IDs, times and whether a message was delivered or read.

If you work for a business that uses our service

Your WhatsApp phone number, your name, your role, and the actions you take, such as accepting an order. Other staff at the same business can see who handled each order.
Product details and photos you add.

We do not ask for payment card details. Orders through our WhatsApp services are paid in cash to the business.

How we use it

To take your order, pass it to the business, and send you updates until it's delivered or collected.
To let the business's staff see and manage orders.
To check a delivery location is within the business's delivery area.
To remember your language and last delivery location, so ordering again is quicker.
To keep the service working: preventing duplicate orders, finding and fixing faults, and keeping it secure.

We do not sell personal data, use it for advertising, or use your messages to train AI models.

We rely on these legal grounds: performing the order you asked for, the business's legitimate interest in running its orders, and complying with the law. Where a law requires your consent for something, we will ask for it.

The business you order from and its staff.
Meta (WhatsApp), which delivers messages between you and the business. Meta's handling of your data is covered by WhatsApp's own terms and privacy policy.
Our hosting provider, which stores the data on our behalf under a contract.
Authorities, only when the law requires it.

We do not share your data with any other business that uses our service.

How long we keep it

Chat messages: 90 days, then deleted.
Orders and saved locations: 24 months after your last order, then deleted or made anonymous, unless the business must keep its records longer by law.
Staff details: while the person works with the business, plus 90 days.
Messages you send us directly: as long as needed to answer them, and no more than 24 months.

How we protect it

Data travels over encrypted connections. Each business's data is stored separately from every other business's. Access tokens are encrypted, and only the people who run the service can reach the servers. If a breach affects your data, we will tell the business and, where the law requires, you and the regulator.

Your rights

You can ask to see the data we hold about you, correct it, delete it, or object to how it's used. You can also ask us to stop sending you messages, and you can block the business's number in WhatsApp at any time.

To make a request, follow the steps on our data deletion page or email hello@nidhaam.tech. We reply within 30 days. If you're not satisfied, you can complain to the data protection authority where you live: in Nigeria, the Nigeria Data Protection Commission.

We handle personal data in line with the Nigeria Data Protection Act 2023 and, where they apply, the data protection laws of the countries where the businesses we serve operate, such as Saudi Arabia's Personal Data Protection Law.

Where your data is stored

Our servers and Meta's may be in a different country from yours. When data moves between countries, we protect it as this policy describes and as the law requires.

Children

Our services are not meant for children under 13. If you believe a child has given us personal data, contact us and we will delete it.

Our website

Our website does not use cookies, analytics or tracking. Our host keeps standard server logs, such as IP addresses, for security, for a short time. If you email us, we use your message only to reply.

Changes to this policy

When we change this policy, we update the date at the top of the page. If a change affects how we use your data in a significant way, we will make it clear on this page before it takes effect.

Contact

Nidhaam Technologies Ltd, Lagos, Nigeria · hello@nidhaam.tech