PRIVACY POLICY
Introduction
Infinity Online Stores Limited operates the INFINITI24 marketplace through the website daily.infiniti24.com and the mobile applications iDaily, iDaily Vendor, and iDaily Rider.
This Privacy Policy explains how we collect, use, store, share, and protect personal data when you use the Platform.
By using the Platform, you agree to this Privacy Policy.
If you do not agree, do not use the Platform.
Scope
This Privacy Policy applies to all users, including Buyers, Vendors, and Riders.
It covers data collected through the website, mobile apps, customer support channels, and related services.
It does not apply to third party websites or services not controlled by INFINITI24.
Applicable law
We process personal data in accordance with the Nigeria Data Protection Act 2023, applicable regulations and directives issued by the Nigeria Data Protection Commission, and other applicable Nigerian laws.
Personal data we collect
We may collect the following categories of personal data.
1. Account and identity data
• Full name
• Email address
• Phone number
• Password in encrypted form
• Profile photo where provided
• Date of birth where required for verification
2. Contact and delivery data
• Residential or business address
• Delivery addresses
• Location data needed for delivery and service availability
3. Transaction and payment data
• Orders and purchase history
• Payment method details through secure payment partners
• Wallet transactions and balances
• Cash on Delivery confirmation records
4. Vendor and Rider data
• Business name and registration details
• Bank account details for settlement
• Identity verification documents
• Vehicle and license details for Riders
• Performance and delivery history
5. Technical, usage and personalisation data
• Device information
• IP address
• App usage logs
• Product, vendor and content views, taps, clicks and other interactions
• Order and browsing activity used to personalise the home page and recommendations
• Reels views, likes and related interactions
• Cookies and similar technologies on the website
6. User content and communications
• Messages sent through in-app chat
• Questions, prompts and responses submitted through the AI Chat Assistant
• Customer support requests and related communications
• Photos, videos and other files uploaded through chat, reviews, disputes, refunds or order support
• Order notes, reviews and other content submitted by users
• Call logs related to deliveries and customer support
How we collect data
We collect personal data when you:
• Create, sign in to, verify or update an account
• Add or change a delivery address or location
• Browse, search for, view or interact with products, Vendors, Reels and other Platform content
• Place, pay for, receive, cancel, repeat or review an Order
• Use wallet, payment or Cash on Delivery features
• Send messages through in-app chat
• Use the AI Chat Assistant or contact customer support
• Upload photos, videos, files or other attachments
• Submit reviews, ratings, Order notes, complaints, disputes or refund requests
• Enable notifications or use delivery and location features
• Otherwise interact with the website, mobile applications or related services
We may also collect certain device, technical and usage information automatically when you use the Platform, and may receive information from Vendors, Riders and service providers where necessary to provide, secure and improve the services.
How we use personal data
We use personal data to:
• Create, verify and manage user accounts
• Process Orders, payments, wallet transactions and Cash on Delivery records
• Determine service availability and support location-based delivery
• Connect Buyers, Vendors and Riders and enable in-app communication
• Provide customer support, including through the AI Chat Assistant
• Personalise the home page, recommendations and reorder options using browsing and Order activity
• Display, measure and improve Reels and other content interactions
• Process photos, videos, files, reviews, notes and other content submitted through the Platform
• Resolve complaints, disputes, cancellations and refunds
• Prevent fraud, abuse, unauthorised access and security incidents
• Verify identity and regulatory compliance where required
• Improve Platform features, reliability and performance
• Send transactional messages, service updates and important notices
• Comply with legal, accounting, tax and regulatory obligations
We do not sell personal data to third parties.
Legal basis for processing
We process personal data based on one or more of the following:
• Performance of a contract with you
• Your consent where required
• Compliance with legal obligations
• Legitimate interests such as fraud prevention and Platform security
Sharing of personal data
We may share personal data only where necessary.
1. With Vendors and Riders
• Buyer delivery details are shared with Vendors and Riders to fulfill Orders
• Vendors may access Buyer data only to fulfill Orders and provide support
2. With service providers
We may share personal data with service providers where necessary to operate, secure and improve the Platform, including:
• Payment processors and financial service providers
• Cloud hosting, database and storage providers
• Mapping, geolocation and address-service providers
• Authentication and account-sign-in providers
• Push-notification, messaging and communications providers
• Customer-support and complaint-management providers
• Analytics, crash-reporting, security and fraud-prevention providers
• Logistics and delivery partners
• Artificial-intelligence service providers supporting the AI Chat Assistant, where applicable
These providers may process personal data only for the services they perform for INFINITI24, subject to applicable contractual, confidentiality, security and legal requirements.
Where information entered into the AI Chat Assistant may be transmitted to a third-party artificial-intelligence provider, we will provide appropriate notice and obtain permission where required before transmitting personal data.
We do not authorise service providers to sell personal data or use it for their own unrelated advertising purposes.
3. Legal and regulatory disclosures
We may disclose data where required by law, court order, or regulatory request.
4. Business transfers
If INFINITI24 is involved in a merger, acquisition, or asset transfer, personal data may be transferred subject to this Privacy Policy.
International data transfers
Some service providers used by INFINITI24 may process or store personal data outside Nigeria.
Where personal data is transferred outside Nigeria, we will take reasonable steps to ensure that the transfer is permitted under applicable Nigerian data protection law and that appropriate safeguards are in place.
These safeguards may include:
• Transferring data to a country or recipient that provides an adequate level of protection
• Using contractual, technical and organisational safeguards
• Obtaining consent where legally required
• Relying on another lawful basis permitted under applicable law
Users may contact us for more information about the safeguards applied to international data transfers.
Cash on Delivery data
Where Cash on Delivery is used, we may collect confirmation details, delivery evidence, and reconciliation records to prevent fraud and resolve disputes.
Cookies and tracking
We use cookies and similar technologies on the website, and technical identifiers and analytics tools in the mobile applications, to:
• Maintain sessions and keep users signed in
• Remember preferences and service locations
• Measure app and website usage
• Diagnose crashes, errors and performance problems
• Improve security, reliability and user experience
• Personalise content and recommendations based on activity within the INFINITI24 Platform
We do not use personal data to track users across applications or websites owned by other companies for targeted advertising or advertising measurement.
If we introduce any feature that constitutes tracking under applicable law or platform rules, we will provide the required notice and obtain consent before enabling it.
You may control website cookies through your browser settings. Disabling certain cookies may affect Platform functionality.
Data retention
We retain personal data only for as long as reasonably necessary to:
• Provide and maintain the Platform and user accounts
• Complete Orders, deliveries, payments, settlements and wallet transactions
• Maintain accounting, tax and regulatory records
• Prevent fraud, investigate security incidents and enforce Platform rules
• Resolve complaints, disputes, cancellations, chargebacks and refunds
• Establish, exercise or defend legal claims
• Comply with applicable legal and regulatory obligations
Retention periods may vary depending on the type of data, the purpose for which it was collected and applicable legal requirements.
Users may initiate deletion of their account from within the iDaily application by:
1. Opening the Menu tab
2. Selecting Edit Profile
3. Tapping the three-dot menu at the top-right
4. Selecting Delete Account
5. Confirming the deletion request
Users may also request deletion or withdraw consent by contacting admin@infiniti24.com.
When an account is deleted, we will delete or anonymise personal data associated with the account that we are not legally required or otherwise lawfully permitted to retain.
Certain transaction, payment, settlement, fraud-prevention, dispute and compliance records may be retained after account deletion where required by law or necessary for legitimate legal and regulatory purposes.
Residual copies may remain temporarily in secure backups until those backups are overwritten or deleted in accordance with our backup and retention procedures.
Data security
We implement reasonable technical and organizational measures to protect personal data.
These include encryption, access controls, and monitoring.
No system is completely secure. You are responsible for keeping your login details confidential.
Your rights
Subject to applicable law, you may have the right to:
• Be informed about how and why we process your personal data
• Request access to your personal data and obtain a copy
• Request correction of inaccurate or incomplete personal data
• Request deletion of personal data where legally permitted
• Request restriction of certain processing activities
• Object to processing based on legitimate interests or direct marketing
• Withdraw consent at any time where processing is based on consent
• Request the transfer of personal data in a structured, commonly used and machine-readable format where applicable
• Request appropriate human review where a decision producing legal or similarly significant effects is based solely on automated processing
• Lodge a complaint with the Nigeria Data Protection Commission
• Seek any other remedy available under applicable law
Requests may be submitted to admin@infiniti24.com.
We may request information reasonably necessary to verify your identity before acting on a request.
We will respond within the period required by applicable law. Certain rights may be restricted where processing is required for legal compliance, fraud prevention, accounting, tax, dispute resolution, public-interest purposes or the protection of another person’s rights.
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
Vendor and Rider responsibilities
Vendors and Riders must:
• Use personal data only for Platform purposes
• Protect Buyer data from unauthorized access
• Not use Buyer data for external marketing without consent
Vendors and Riders are responsible for any misuse of data they access.
Children’s data
The Platform is not intended for persons under 18 years of age.
Persons under 18 should not create an account, place Orders or submit personal data through the Platform.
We do not knowingly collect personal data from children. If we become aware that personal data has been collected from a child without valid legal authorisation, we will take reasonable steps to delete, anonymise or restrict that data, except where retention is required or permitted by law.
A parent or legal guardian who believes that a child has provided personal data through the Platform may contact admin@infiniti24.com to request review and appropriate action.
Where processing a child’s personal data becomes necessary and legally permitted, we will obtain the consent of the parent or legal guardian and apply appropriate mechanisms to verify age and consent as required by applicable law.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time.
Updates take effect when published on the Platform.
Continued use of the Platform means acceptance of the updated Privacy Policy.
Contact and data requests
Infinity Online Stores Limited
No. 4 Monguro Road, Behind Total Filling Station, Maiduguri, Borno State, Nigeria.
Email: admin@infiniti24.com
Phone: +2349071086647