Gostto information centre

Privacy Policy

This policy explains the personal information Gostto may collect, why it is used, when it is shared and the choices available to customers, merchants and riders.

Effective: 9 October 2026Last updated: 9 October 2026

Who this policy covers

This policy applies to the public website, the Gostto Customer and Merchant App, the Gostto Rider App, support interactions and related delivery and marketplace services.

Information we collect

The information collected depends on how you use the platform. We collect information you provide, information created while the service is used, and limited information from authorised providers.

  • Name, phone number, email address, profile details and account role
  • Delivery, pickup and saved addresses, delivery instructions and contact details
  • Precise or approximate location when permission is granted; rider location may be processed during an active delivery for dispatch, tracking and safety
  • Orders, items, merchant details, delivery events, cancellations, refunds and support records
  • Wallet balance, funding, refund, withdrawal and transaction records
  • Merchant business, menu, product, payout and operational information
  • Rider onboarding, availability, vehicle, delivery and safety information required for the service
  • Device type, operating system, app version, IP address, notification tokens, diagnostics and analytics events
  • Messages, feedback, reviews and files sent to support

Payments and wallet information

Customers can fund their Gostto Wallet and use the available wallet balance to pay for orders. Payments and bank withdrawals may be handled by secure third-party payment processors. Gostto may receive wallet balances, transaction references, payment or withdrawal status, method type and limited account details needed to reconcile a transaction. Gostto does not collect or store full payment-card numbers or security codes through this website.

How information is collected and used

Information may be collected when you create an account, place or fulfil an order, communicate with support, enable device permissions or use the website and apps. It is used to provide accounts and deliveries, connect customers with merchants and riders, process and reconcile payments, communicate service updates, prevent misuse, resolve disputes, improve reliability and meet legal obligations.

Consent and device permissions

Where processing relies on consent, you may withdraw that consent through device settings, in-app controls or by contacting us. You can disable location, notifications, camera or other permissions in your device settings, although a feature that depends on a permission may stop working. Withdrawal does not invalidate processing that occurred before withdrawal.

Sharing and service providers

Information is shared only as reasonably needed with the customer, merchant or rider involved in a transaction; with providers that support payments, OTP delivery, maps, hosting, notifications, analytics and customer care; with professional advisers; during a lawful business transfer; or where required for legal, fraud-prevention or safety reasons. Gostto does not sell personal information.

Storage, security and retention

We use proportionate organisational and technical safeguards, access controls and secure transmission where appropriate. No system can be guaranteed completely secure. Information is kept only as long as needed for the service, account administration, disputes, fraud prevention, safety, accounting and applicable legal obligations. Retention depends on the type of record, account status and any unresolved claim.

Your data-protection rights

Subject to applicable Nigerian data-protection law, you may request information about processing, access a copy, correct inaccurate information, request deletion or restriction, object to certain processing, withdraw consent, request portability where applicable, and complain to the Nigeria Data Protection Commission. We may verify identity and may lawfully decline or limit a request with an explanation.

International transfers

Some service providers may process information outside Nigeria. Where this occurs, Gostto will use an applicable legal mechanism and appropriate safeguards for the transfer.

Children’s privacy

The platform is not intended for children who cannot lawfully enter into these terms. Gostto does not knowingly invite children to create independent customer, merchant or rider accounts. If you believe a child has supplied personal information improperly, contact us so the matter can be reviewed and removed where appropriate.

Changes and complaints

Material changes will be posted here and, when appropriate, communicated in the apps. Privacy questions may be sent to hello@gostto.com. You may also make a complaint to the Nigeria Data Protection Commission.