Privacy Policy

Company contact

Prefrpay is operated by Prefr Solutions Limited. Company contact: Alimosho, Lagos Nigeria. Phone: +2348065057787. Email: solutions@prefrpay.com.

Data Protection Lead (DPO contact)

Prefr Solutions Limited has designated David Omotayo as Data Protection Lead (DPO contact) for Nigeria Data Protection Act (NDPA) and Nigeria Data Protection Regulation (NDPR) inquiries, data-subject requests, and cooperation with the Nigeria Data Protection Commission (NDPC).

Contact: solutions@prefrpay.com. We aim to respond to verified requests within 30 days.

Information we collect

We collect information necessary to coordinate transactions and operate the platform:

• Phone numbers (vendors, buyers where provided, riders) in E.164 format
• Transaction metadata: product descriptions, amounts, order codes, payment and delivery status
• Vendor KYC data submitted during verification (name, bank account details, identity references)
• WhatsApp message content processed to create orders when vendors use our agent
• Device and log data: IP address, browser type, timestamps, and error diagnostics
• Ops and support communications when you contact us

Non-custodial — what we do not collect

Prefrpay does not collect or store buyer card numbers, bank login credentials, or custodial wallet balances. Payment credentials are entered directly with Flutterwave. Prefrpay is a software intermediary — we do not hold vendor or buyer money. All payments and settlements are processed and held by Flutterwave.

How we use information

We use collected information to:

• Generate and manage one-time payment and delivery links
• Send OTP codes for vendor and operator authentication
• Coordinate escrow state and notify parties of payment and delivery milestones
• Verify vendor identity and payout bank accounts — identity is verified by Prembly
• Detect fraud, abuse, and operational anomalies
• Improve platform reliability and comply with lawful requests

Third-party processors

We use vetted service providers to operate the platform — for example payment processing, identity verification, messaging, hosting, and security monitoring. These providers receive only the data needed to perform their role and are bound by contractual confidentiality and data-protection obligations.

A sub-processor register is maintained internally and shared with regulators or partners on request via solutions@prefrpay.com.

Retention

We retain transaction and account records for as long as needed to operate the service, resolve disputes, meet legal obligations, and prevent fraud. Completed ghost-link pages are deactivated and PII exposure is minimized per our zero-leak policy.

Vendors may request account deletion from the vendor Settings page. We then hold the account for 30 days for compliance review (orders and escrow cannot start during that hold). You may cancel the request during the hold. After 30 days we automatically anonymize personal data on the seller profile while retaining order and payment records needed for financial and fraud compliance.

Your rights

Depending on applicable law (including NDPR/NDPA), you may request access to, correction of, or deletion of personal data we hold about you. Vendors can start deletion in Settings (30-day hold, then automated purge). Buyers and riders without accounts may contact solutions@prefrpay.com with their phone number and request details. We may retain certain records where required by law or for legitimate business purposes.

Grievance redress

If you are dissatisfied with how we handle your data or an escrow-related issue, contact us via the Buyer support page (/support), WhatsApp SUPPORT, or solutions@prefrpay.com. Buyers may open disputes on the pay board when eligible. Unresolved privacy grievances are escalated to our Data Protection Lead within five business days.

Cookies and analytics

Essential cookies: we use HTTP-only session cookies so vendors and internal operators can log in securely. These are strictly necessary and do not require consent.

Analytics cookies: with your permission (Agree on the cookie banner), we load privacy-friendly analytics to understand site usage. If you choose No, only essential session cookies are used. You may change your choice by clearing site data or contacting us.

International use

Prefrpay supports social commerce globally. Vendors with international phone numbers may register; data may be processed in jurisdictions where our service providers operate. By using Prefrpay you consent to this processing where permitted by law.

Security

We work to keep your information safe and use trusted partners for payments and identity checks. Funds are protected by Flutterwave. Identity is verified by Prembly. Payment details are entered with Flutterwave, not stored on Prefrpay. Security incidents are handled under our internal incident response plan. If you notice anything suspicious, contact solutions@prefrpay.com.

Changes and contact

We may update this Privacy Policy from time to time. Material changes will be reflected in the updated date above. Questions: solutions@prefrpay.com.