Privacy policy

We collect the minimum we need to get a parcel to you, and we do not sell your data to anyone. This page describes exactly what is collected, in the technical detail that is easy to omit and hard to defend later.

Who we are

DE-RANGER is a trading name of DE-APOK HEALTH GLOBAL SERVICES, a business registered in Nigeria. For any question about your data, or to exercise any of the rights below, contact us using the details on this page and we will deal with it.

What we collect, and why

• —Your name, phone number and an optional alternative phone number. We use these to confirm your order with you and to hand it to the delivery agent. Without a working phone number we cannot complete a pay-on-delivery order.
• —Your delivery address, city or local government area, and state. We need these to deliver the order.
• —Any delivery note you choose to add, such as a landmark or a preferred delivery time.
• —Your order: which package you chose, the quantity, the price, the total, and each status the order has reached with the date and time of each change.
• —The date and time you accepted these terms, recorded on the order itself.

We do not store your IP address. To prevent abuse and duplicate orders, we store a salted one-way hash of it. A hash cannot be reversed back into an IP address, and the salt means it cannot be matched against a list of known addresses.

Marketing and measurement, only where you have arrived from a campaign:

• —Campaign parameters such as the source, medium and campaign name, the page you landed on, and the referring site.
• —Meta (Facebook) click identifiers, if you arrived from a Meta advert.

We use these to find out which advertising is worth paying for. We use them to understand where orders come from, not to build a profile of you.

Who your data is shared with

• —Our delivery partner. They receive your name, phone number and delivery address, because that is the minimum a courier needs to complete a delivery.
• —Our email provider, to send you an order confirmation if your order needs one.
• —Our hosting and database provider, which stores the order data on our behalf.
• —Meta, only if you arrived from a Meta advert, so that advertising can be measured.

We do not sell your personal data, and we do not share it for anyone else’s marketing. We will disclose data if we are legally required to.

Cookies and browser storage

• —A session cookie that lasts one day, used to count visits and tell repeated visits apart.
• —An attribution cookie that lasts 30 days, holding the campaign details above so we know which advert brought you.
• —Session storage holding your own order reference on the confirmation page, so it can show you what you just ordered. It disappears when you close the tab.

We set no advertising cookies of our own. If Meta tracking is enabled, Meta may set its own cookies; you can block cookies in your browser, though measurement and some site features may then work less well.

When you look up an order on the tracking page, we check the order ID and the phone number together. Your order details are not saved in your browser after that lookup, and the phone number is never placed in the page address, so it cannot be picked up from your history or a shared link.

How long we keep it

We keep order records for as long as they are needed for accounting, tax and delivery purposes, and no longer than that. Order status history is retained with the order. The abuse-prevention hashes described above are used for rate limiting and are not used to build any profile of you.

Your rights

• —Ask what personal data we hold about you, and get a copy of it.
• —Ask us to correct anything that is wrong.
• —Ask us to delete your data, where we are not required to keep it for tax or accounting purposes.
• —Ask us to stop using your data for marketing measurement.
• —Object to how your data is being used.

We aim to respond within a reasonable time. Contact us with your order ID if you have one, as that lets us find your records immediately.

These rights exist under the Nigeria Data Protection Act 2023. You also have the right to complain to the Nigeria Data Protection Commission.

Security

Order data is held in an access-controlled database and is not exposed to other customers. The admin area is behind authentication, and this site is served over HTTPS. No system is perfectly secure, but we collect only what we need so that there is less to lose.

Children

This product is not intended for children, and we do not knowingly collect data from anyone under 18. If you believe a child has given us personal information, contact us and we will delete it.

If we change this policy in a way that affects how we use your data, we will update this page. Material changes will be reflected in the date at the top.