Privacy Policy

Washermann Africa Ltd ("Washermann", "we", "us") Effective date: September 1, 2026

1. Who we are

Washermann operates an on-demand laundry and dry-cleaning marketplace connecting customers with independent laundry vendors ("Washermen") and field representatives ("Reps"), accessible via our website (www.washermann.com) and mobile apps. Washermann Africa Ltd (RC: 9638703), 3202 Prayer Estate, Amuwo Odofin, Lagos, is the data controller for personal data described in this Policy. Washermann is registering as a Data Controller of Major Importance with the NDPC under s.44 NDPA 2023.

Data protection contact: info@washermann.com (Data Protection Officer: Richard Uzor).

2. The personal data we collect

You give us:

  • Identity & contact: name, phone number, email address, password (stored hashed).
  • Location: pickup/delivery address and GPS coordinates you provide when placing an order (used to match you to a service area and to route Reps).
  • Order content: items, garment counts, special instructions.
  • Vendor/Rep applicants: business name, KYC/identity documents (e.g. National ID, proof of address), photographs, shop photos, and bank account details (bank, account number, account name) for payouts.
  • Communications: messages you send to support, and (where you opt in) WhatsApp interactions.

We collect automatically:

  • Device and usage data, IP address, app/push tokens, cookies and similar technologies (see the Cookie Policy).
  • Transaction metadata (order references, WashPoints balances, timestamps).

We do not store full card/bank credentials for charges. Card and account payment data is handled by our payment processor (Paystack); we receive only transaction references and status.

3. Why we use it, and our lawful basis (NDPA)

Purpose

Lawful basis

Create and manage your account; provide the service

Performance of a contract

Match orders to areas/Reps/Vendors; route pickups/deliveries

Performance of a contract

Process payments, top-ups, WashPoints, payouts

Performance of a contract; legal obligation

Verify Vendors/Reps (KYC), prevent fraud/abuse

Legitimate interest; legal obligation

Send transactional messages (order status, OTP) via SMS/WhatsApp/email/push

Performance of a contract

Send marketing/promotional messages

Consent (see the

Marketing Consent Notice

)

Improve, secure, and analyse the service

Legitimate interest

Comply with law, respond to authorities

Legal obligation

4. Who we share it with (processors & third parties)

We share the minimum necessary with:

  • Vendors (Washermen) & Reps — your name, pickup address/coordinates, phone, and order details, so they can fulfil your order.
  • Paystack — payment processing (top-ups) and payouts.
  • Cloudinary — image/document storage (KYC docs, photos).
  • Resend — transactional & marketing email delivery.
  • Termii — SMS/OTP delivery.
  • Meta Platforms (WhatsApp Business/Cloud API) — WhatsApp messaging where you use that channel.
  • Google Firebase — push notifications.
  • Professional advisers, and authorities where legally required.

We do not sell your personal data. We put data-processing agreements in place with our processors, and some may store data outside Nigeria (see §5).

5. Cross-border transfers

Some processors store or process data outside Nigeria (e.g. the US/EU). Where we transfer personal data abroad we rely on the NDPA's transfer conditions (adequacy, appropriate safeguards, or your consent).

6. How long we keep it

We keep personal data only for as long as necessary for the purposes above or as required by law. Our standard retention periods are:

Data category

Retention period

Account & profile data

While your account is active, then

12 months

after closure, after which it is deleted or anonymised

Financial & payment records (orders, ledgers, payouts, WashPoints, invoices)

6 years

from the end of the relevant financial year, to meet tax and financial record-keeping obligations

KYC / anti-money-laundering records (Vendors/Reps)

5 years

after the end of the vendor/rep relationship

Support & dispute records

3 years

after the matter is closed

Marketing consent records

Until you withdraw consent, plus

12 months

to evidence the consent and its withdrawal

Audit and security logs

2 years

When a retention period ends we delete the data, or anonymise it where we must keep a financial or legal record (in which case the record is no longer linked to you as an identifiable person).

7. Your rights under the NDPA

You may, subject to law: access your data; correct it; request deletion; object to or restrict processing; withdraw consent (for marketing) at any time; request portability; and lodge a complaint with the Nigeria Data Protection Commission (NDPC). To exercise any right, contact info@washermann.com. We will respond within the statutory timeframe and may need to verify your identity.

8. Security

We use encryption in transit, hashed passwords, access controls, and signed webhooks. No system is perfectly secure; we maintain a breach-response process and will notify you and the NDPC of qualifying breaches as required by law.

9. Children

The service is not directed to persons under 18. We do not knowingly collect their data.

10. Changes

We may update this policy; material changes will be notified via the app/email and posted at www.washermann.com. Continued use after the effective date constitutes acceptance.

11. Contact

Washermann Africa Ltd, Amuwo Odofin, Lagos· info@washermann.com · 09049507121