Privacy Policy

Last updated: March 2026

1. Introduction

Chariot ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you use our website, applications, and services. By using Chariot, you consent to the practices described in this policy. We operate in compliance with the Nigeria Data Protection Regulation (NDPR) and other applicable data protection laws.

2. Information We Collect

We collect information you provide directly when creating an account, including your full name, email address, and Nigerian phone number. When you make a booking, we collect trip details such as your selected route, departure date, and seat preference. We also automatically collect technical data such as your IP address, browser type, device information, and usage patterns through cookies and similar technologies to improve our Service.

3. How We Use Your Information

We use your personal information to process bookings and facilitate interstate travel, send booking confirmations and trip reminders via email and SMS, manage your account and wallet balance, provide customer support, improve our platform and user experience, and communicate service updates or promotional offers (with your consent). We do not sell your personal information to third parties.

4. Payment Information

All payment transactions are processed through Paystack, a PCI-DSS Level 1 compliant payment processor. We do not store your full card number, CVV, or PIN on our servers. Paystack handles all sensitive payment data in accordance with international security standards. We retain only a transaction reference and the last four digits of your card for your booking history. For bank transfers, we receive confirmation of payment from Paystack without access to your bank account credentials.

5. Data Storage & Security

Your data is stored on secure, encrypted servers. We implement industry-standard security measures including HTTPS encryption, hashed passwords, and access controls to protect your information from unauthorised access, alteration, or disclosure. While we take reasonable steps to safeguard your data, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Third-Party Services

We use trusted third-party services to operate our platform. Paystack processes all payment transactions and may collect payment information in accordance with their own privacy policy. Resend powers our transactional email delivery, including booking confirmations, password resets, and trip reminders — they process your email address and message content solely for delivery purposes. These providers are contractually obligated to handle your data securely and only for the purposes we specify.

7. Your Rights

Under the Nigeria Data Protection Regulation (NDPR), you have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion of your data (subject to legal obligations), object to processing of your data for marketing purposes, and receive your data in a portable format. To exercise any of these rights, please contact us at hello@chariot.ng. We will respond to your request within 30 days.

8. Data Retention

We retain your account information for as long as your account is active. Booking and transaction records are retained for a minimum of 6 years to comply with Nigerian tax and financial regulations. If you request account deletion, we will remove your personal profile data but may retain anonymised booking records as required by law. Inactive accounts with no bookings may be automatically deleted after 24 months.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of significant changes by posting a notice on our website and updating the "Last updated" date. Your continued use of the Service after any changes indicates your acceptance of the updated policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy or how your data is handled, please contact us at hello@chariot.ng or through the Contact page on our website.