Requestam does not process marketplace payments or arrange delivery. Payment and delivery information shared directly between users remains their responsibility.
1. Scope and our role
This policy applies to the Requestam mobile applications, website, support channels, and related marketplace services. Requestam acts as a data controller when it decides why and how personal data is processed. Certain vendors act as processors on our instructions, while identity-verification providers or authorities may act under their own legal responsibilities.
This policy should be read with our Terms of Use. It is designed around the Nigeria Data Protection Act 2023 and applicable guidance from the Nigeria Data Protection Commission. It does not replace rights given to you by law.
2. Information we collect
Account and profile information. This may include your name, email address, phone number, profile image, state or FCT, authentication identifiers, preferred theme, notification settings, and account status.
Seller information. Seller applications may include seller type, full legal name, business or store name, phone number, business address, CAC registration number, introduction, social links, product categories, seller location, buyer coverage, verification status, and approval history.
Marketplace content. We process request titles and details, category and location choices, up to two reference photos, offers, accepted prices, timestamps, conversations, quoted messages, message photos, delivery and read indicators, ratings, feedback tags, reports, blocks, appeals, and fulfilment outcomes.
Device and usage information. We may receive IP address, device and operating-system details, app version, language, session identifiers, push-notification tokens, crash and security logs, pages or screens viewed, interaction timestamps, and diagnostic events. The public website may use strictly necessary storage and limited analytics where configured.
Information from others. We may receive basic profile information from Google when you choose Google sign-in, verification results from identity or business-check providers, reports from other users, and information from public authorities where lawful. We do not receive your Google password.
3. Purposes and lawful bases
We process data when necessary to perform our agreement with you, comply with legal obligations, pursue legitimate interests that do not override your rights, protect vital interests where applicable, or act with your consent.
- Create accounts, authenticate sessions, provide buyer and seller modes, and respond to support requests.
- Publish requests, match them to eligible sellers, display offers, open accepted conversations, preserve agreed item prices, and record marketplace outcomes.
- Verify sellers, moderate content, investigate reports, prevent fraud and duplicate activity, enforce request and offer limits, and maintain audit records.
- Send security, marketplace, message, offer, outcome, and service notifications according to device permissions and account choices.
- Measure reliability, diagnose failures, protect infrastructure, improve usability, and understand aggregated marketplace performance.
- Establish, exercise, or defend legal claims and respond to lawful requests.
Matching uses categories, locations, coverage, seller approval, and request status. It does not by itself make a legal or financial decision about a user. Enforcement decisions may use automated signals, but material account actions should remain subject to authorised review where appropriate.
4. Identity and business verification
Individual sellers may submit a National Identification Number to a verification provider for an automated identity check. Business sellers may additionally provide a CAC registration number, business name, and address. CAC verification confirms registered business information and does not verify a physical address unless we expressly say so.
Requestam is designed not to retain raw NIN or other raw identification numbers after secure transmission for verification. We may retain the provider reference, match result, reason codes, timestamps, consent record, review decision, and evidence needed for fraud prevention, audit, dispute handling, or legal compliance.
Only a general Verified badge is displayed publicly. A badge means the stated verification process was completed at that time; it is not a guarantee of honesty, solvency, product quality, future conduct, or successful fulfilment.
6. International data transfers
Some providers may process data outside Nigeria. Where personal data is transferred internationally, we use a legally recognised transfer basis and appropriate safeguards, taking account of the destination, contractual protections, security measures, and the nature of the information.
7. Retention and security
We retain active account and marketplace data while needed to provide the service. Closed requests, accepted offers, transaction outcomes, moderation evidence, verification results, audit logs, and dispute records may be kept longer to protect users, prevent repeat abuse, meet legal obligations, and establish or defend claims. Data may persist temporarily in encrypted backups before scheduled deletion.
When an account-deletion request is completed, we delete or anonymise information that is no longer needed. We may retain limited records where required for safety, fraud prevention, legal compliance, unresolved disputes, or enforcement integrity.
We use role-based access, encrypted network connections, credential protection, monitoring, backups, and audit controls appropriate to the nature of the service. No online system is completely secure. You should protect your device and credentials and tell us promptly if you suspect unauthorised access.
8. Your rights and choices
Subject to applicable law, you may request access to your personal data, correction of inaccurate data, deletion, restriction, objection, portability, information about processing, or withdrawal of consent. Withdrawing consent does not affect processing already carried out lawfully and may prevent features that depend on that consent.
You can update permitted profile fields, change notification choices, block users, and initiate account deletion in the app. Personal names and seller or store names may be locked to protect marketplace integrity; a genuine correction can require identity review. We may ask for information to verify that a rights request concerns your account.
You can disable marketing or optional notifications without losing essential account, security, moderation, or transaction notices. Device-level notification permissions must also be managed in iOS or Android settings.
9. Children
Requestam is intended for adults aged 18 or older who can enter marketplace arrangements. We do not knowingly allow children to create seller accounts or transact through the service. If we learn that a child’s data was collected contrary to this rule, we will take reasonable steps to remove it.
10. Third-party services and external transactions
Links to social networks, external payment methods, delivery providers, or other third-party services are governed by those parties’ policies. Information you choose to exchange outside Requestam is not controlled by this policy. Avoid sending identification numbers, passwords, one-time codes, or unnecessary financial information in chat.
11. Changes to this policy
We may update this policy to reflect product, legal, or operational changes. The effective date will be updated, and material changes may be announced in the app or through another appropriate channel. Continued use after a change takes effect is subject to the updated policy, but we will seek consent where the law requires it.
12. Contact and complaints
For privacy questions, rights requests, or complaints, email support@requestam.com. You may also lodge a complaint with the Nigeria Data Protection Commission. We would appreciate the opportunity to address your concern first.