Tosi delivers food, groceries, pharmacy items, and local essentials across Ogbomosho. To connect customers with kitchens, markets, and dispatch riders, we handle personal data with strict standards of confidentiality, security, and integrity under the Nigeria Data Protection Act (NDPA).
We never sell, rent, or trade your personal numbers, addresses, or purchase history to advertisers.
GPS coordinates are only processed to route riders to pick-up spots and deliver to your doorstep in Ogbomosho.
Payments are handled through PCI-DSS certified payment switches. We never store credit or debit card CVVs.
Under the NDPA, you have the right to inspect, correct, export, or permanently delete your profile records anytime.
Tosi delivers food, groceries, pharmacy items, and local essentials across Ogbomosho. To connect customers with kitchens, markets, and dispatch riders, we handle personal data with strict standards of confidentiality, security, and integrity under the Nigeria Data Protection Act (NDPA).
We never sell, rent, or trade your personal numbers, addresses, or purchase history to advertisers.
GPS coordinates are only processed to route riders to pick-up spots and deliver to your doorstep in Ogbomosho.
Payments are handled through PCI-DSS certified payment switches. We never store credit or debit card CVVs.
Under the NDPA, you have the right to inspect, correct, export, or permanently delete your profile records anytime.
Have questions about how your delivery history or address data is managed? Speak directly with our support team.
This Privacy Policy applies to all services offered by Tosi Technologies Ltd ("Tosi", "we", "our", or "us"), an on-demand logistics, delivery, and commerce technology platform operating in Ogbomosho, Oyo State, Nigeria.
When you place orders, register as a merchant vendor, apply as a dispatch rider, or access our web platform and applications, Tosi serves as the Data Controller responsible for determining the lawful bases and methods under which your personal data is collected and processed, in strict accordance with the Nigeria Data Protection Act, 2023 (NDPA) and regulations overseen by the Nigeria Data Protection Commission (NDPC).
We collect personal information depending on how you interact with Tosi across our different platform roles:
We process personal data only when lawful bases exist under the NDPA (such as contract fulfillment, compliance with legal obligations, protecting vital interests, or legitimate business interests):
Order Fulfillment & Logistics
Transmitting items to vendors, calculating fair distance-based delivery fees, and assigning the closest rider for rapid delivery in ~30 minutes.
Account Security & Passwordless Login
Authenticating your session securely via SMS/WhatsApp one-time security codes without vulnerable static passwords.
Automated Settlements & Auditing
Accurately disbursing order payouts to local vendors and trip earnings to riders with transparent itemised deduction logs.
Customer Support & Quality Assurance
Assisting you with order updates, missing items, refunds, or address changes through our dedicated Ogbomosho support desk.
Precise location data is essential to our on-demand delivery ecosystem in Ogbomosho:
Specific Rules for Geolocation
All customer digital payments (debit cards, bank transfers, USSD) are securely processed through licensed and PCI-DSS Level 1 compliant Nigerian payment service providers (e.g. Paystack, Flutterwave).
We never receive or store your complete 16-digit card number, your card PIN, or card CVV/CVC security codes on our servers. We only receive a secure transaction token and payment confirmation reference from the payment gateway.
For vendor and rider earnings payouts, bank account numbers and bank codes are validated via the Nigeria Inter-Bank Settlement System (NIBSS) solely to remit lawful earnings.
Tosi does not sell, rent, or monetize your personal data. Information is shared strictly on a need-to-know basis to fulfill your requests:
When an order is confirmed, the vendor receives the customer's first name, order details, and special instructions. The dispatch rider receives the customer's delivery name, drop-off address/pin, and a temporary contact phone number exclusively active for the duration of the delivery journey.
Trusted vendors who support our technical infrastructure (secure cloud hosting, SMS OTP delivery gateways, and geocoding mapping services) under strict data protection agreements.
When required by Nigerian law enforcement authorities, court subpoenas, or statutory bodies (such as the NDPC or FCCPC) in accordance with due legal process.
We employ modern industry-standard security measures to safeguard your personal data:
All web traffic is strictly encrypted using modern Transport Layer Security (TLS 1.3), and critical database fields are encrypted at rest.
Access to user and rider profiles is restricted to authorized Tosi operational staff members on a principle-of-least-privilege basis.
Administrative actions, status adjustments, and record accesses are permanently timestamped and logged in our immutable audit journal.
Active account data is maintained for the life of your profile. Financial receipts and settlement journals are held for 6 years in conformity with Nigerian financial and tax retention obligations, after which they are securely purged or anonymized.
As a data subject in Nigeria, you possess full statutory rights under Part VI of the NDPA 2023:
To exercise any of these statutory rights, please email our Data Protection Officer at privacy@tosi.ng. We respond to all verified requests within 30 days.
Right to Access
Obtain confirmation of whether we process your data and receive an electronic copy.
Right to Rectification
Request immediate correction of inaccurate, incomplete, or out-of-date records.
Right to Erasure ("Forgotten")
Request the permanent deletion of your profile where no statutory retention obligations apply.
Right to Object & Restrict
Opt out of promotional communications or restrict processing during dispute resolutions.
Right to Data Portability
Receive your personal records in a commonly used, structured, machine-readable format.
Right to Lodge a Complaint
Escalate any unresolved grievance directly to the Nigeria Data Protection Commission (NDPC).
We use functional, strictly necessary cookies and local browser storage to keep you signed in, preserve items in your shopping basket as you browse different kitchens, and protect forms against Cross-Site Request Forgery (CSRF).
We do not use intrusive third-party cross-site advertising cookies. You can manage or disable cookies via your browser settings, though disabling necessary session cookies may prevent you from placing orders.
Our platform is directed toward individuals of legal age (18 years and above in Nigeria) capable of entering binding contracts. We do not knowingly collect personal data from children under 18 years without verifiable parental consent. If you believe a child has provided us personal data without consent, please contact us immediately to have the data removed.
We may periodically update this policy to reflect changes in our operational procedures, expansion of delivery zones in Oyo State, or changes to Nigerian data protection laws. When significant changes occur, we will post a prominent notification on our website, send an in-app notice, and update the "Last Updated" date at the top of this document.
If you have questions, comments, or concerns about this policy, or if you wish to exercise your rights under the NDPA, contact our designated Data Protection Officer via:
Support Desk Phone & WhatsApp
0800 000 8674Available daily during local delivery hours in Ogbomosho.
Physical Operating Office
Tosi Technologies Ltd
Ogbomosho, Oyo State, Nigeria.
