Privacy policy

Account: your name, your email address and your password. Your password is stored only as a scrambled one-way hash — no one at DrWaybill can read it.

Shipments: pickup and delivery addresses, landmarks, contact names and phone numbers for both ends, and the parcel details you enter — what it is, its size, weight and declared value.

Identity check (optional): if you choose to verify, a photo of your ID (NIN slip, NIN card or another government ID) and a selfie. They are stored privately and seen only by our verification team, who compare them with your account name. We keep the result — verified, when and by whom — and the photos until you delete your account.

Sender verification: where a carrier requires it (for example DHL within Nigeria), the sender’s National Identification Number (NIN). It is passed straight to our logistics partner for the carrier’s check. We do not store it.

Payments: the amount, its status and Paystack’s reference. We never receive or store your card number.

We do not run advertising trackers, and we never sell your data.

To price, book and track your shipment — the service you asked for. To confirm who you are before you send parcels through us, which protects you, the people you ship to, and us. To take payment and keep the records we need to reconcile and refund. To contact you about a shipment. To meet our tax and anti-fraud obligations.

The carrier you choose receives the pickup and delivery addresses, both contact names and phone numbers, and the parcel details — it cannot deliver without them. Each carrier handles that data under its own privacy policy.

Terminal Africa, the logistics platform we book through, processes the same shipment data on our behalf, including any NIN for sender verification and the details needed for insurance you choose to buy.

Our freight partner receives the shipment details for DrWaybill Cargo parcels.

Paystack processes your payment and receives your email and the amount.

Netlify hosts this site and stores identity-check photos privately on our behalf; Neon hosts our database.

Resend sends our emails: verification codes, password reset links, booking confirmations and invoices.

Google (Gemini): if you use the photo estimate, the photo and the contents you list are sent to Google’s Gemini service to estimate weight and size. Google may use them to improve its services. The estimate is optional; you can type the weight and size yourself instead.

International shipments go through carriers and customs authorities outside Nigeria, so shipment data crosses borders — that is part of sending a parcel abroad.

Account, shipment and payment records are kept while your account is open, and afterwards for as long as tax and dispute rules require. Verification codes and password reset links are deleted once used or expired, and are stored hashed, never readable.

Under the Nigeria Data Protection Act 2023 you may ask for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, or object to how we use it.

You can delete your account yourself from your settings. That removes your saved addresses, shipment history and identity photos. Payment records we are required by law to keep are retained, detached from your account and with your personal details removed.

For anything else, contact us and we will reply within 30 days.

One cookie, which keeps you signed in. No analytics or advertising cookies, so there is no consent banner to click through. Display preferences are kept in your own browser and never reach us.

Everything is encrypted in transit. Passwords are hashed with scrypt and salted per account. Repeated wrong sign-in attempts are slowed down. Card details never touch our servers. Tracking is limited to the account that booked the shipment, so a reference alone does not reveal anyone else’s parcel.