Ordelo Manager — Privacy Policy

Effective date: 01 July 2026 Last updated: 01 July 2026

Ordelo Manager ("Ordelo", "the app", "we", "us", "our") is operated by Noddit Technology Limited (RC 7761794), a company registered in Nigeria with its office at De Law House, Airport Road, Warri, Delta State, Nigeria. This Privacy Policy explains how we collect, use, share, store and protect personal data when you use the Ordelo Manager app and related services.

We are committed to processing personal data in line with the Nigeria Data Protection Act, 2023 (NDPA), the Nigeria Data Protection Regulation, 2019 (NDPR) and any guidance or framework issued by the Nigeria Data Protection Commission (NDPC).

1. Who this policy applies to

• Merchants and their staff who create and use an Ordelo Manager account (store owners, managers, invited team members). For your account and business data, we are the data controller.
• Your customers (buyers) whose details you record or capture in the app (names, phone numbers, delivery addresses, orders). For this data, you (the merchant) are the data controller and we act as a data processor on your behalf. You are responsible for having a lawful basis to collect it and for giving your customers their own privacy notice.

2. Our roles

• Controller: for merchant account, business, billing and app-usage data, we decide why and how the data is processed.
• Processor: for the customer, order and payment data you enter or capture, we process it only on your instructions and to provide the service to you.

3. Data Protection Officer / contact

Questions, requests or complaints about this policy or your data:

• Email: privacy@getnoddit.com
• Data Protection Officer: Oghenejakpor Odafe James
• Address: De Law House, Airport Road, Warri, Delta State, Nigeria

4. Personal data we collect

a. Account and identity data

• First name, surname, email address, phone number.
• Password credentials (handled by our identity provider; we do not store your password in plain text).
• Role and permissions within a business.

b. Business and financial data

• Business name, legal business name, store details and addresses.
• Bank account details you provide for payouts (for example account number).
• Subscription plan, billing status and payment references.

c. Customer and order data (processed on the merchant's behalf)

• Customer names, phone numbers, email addresses and delivery addresses.
• Order contents, prices, charges, payment status and history.

d. Order-capture content

• Voice recordings you make to capture an order.
• Photos of sales books or order notes you upload.
• Text from chat or WhatsApp order capture. These are processed to draft an order for your review and are handled as described in section 8.

e. Location data

• Store location and delivery addresses, including coordinates resolved through mapping services when you search or pick an address.
• Device location, only where you enable "use my location" and grant permission.

f. Device and technical data

• Device model, operating system, app version and language.
• Push notification tokens, so we can send order and account alerts.
• IP address, log data and general usage of features.

g. Diagnostics

• Crash reports and error diagnostics to keep the app stable.

We do not intentionally collect special-category or sensitive personal data through the app. Please do not enter such data into free-text fields.

5. How we collect data

• Directly from you when you sign up, set up your store, invite team members, create orders or contact support.
• Automatically as you use the app (device, usage, diagnostics, push tokens).
• From service providers acting for us, such as our identity, payment, mapping, messaging and analytics partners.

6. Why we process data and our lawful basis

Under the NDPA and NDPR we rely on one or more of the following lawful bases:

Where we rely on consent, you may withdraw it at any time (see section 12). This does not affect processing carried out before you withdrew.

7. How we use data

• Run the order board, point of sale, kitchen, inventory and reporting features.
• Match a captured order to an existing customer and prepare a draft for your review.
• Take payment, generate receipts and record sales and payouts.
• Send you real-time order alerts and account messages.
• Provide support, prevent fraud and abuse, and keep the service secure.
• Meet our legal, tax and regulatory obligations.

8. Order-capture (AI) content

When you use voice, photo or chat capture, the recording, image or text is sent to our order-processing service to read the items and prepare a draft order. Nothing is created until you confirm it. The original recording or image is used to produce the draft and is deleted once the draft is resolved (confirmed or discarded). We do not sell this content or use it for advertising.

9. Sharing your data

We share personal data only as needed to run the service, and with parties bound by confidentiality and data protection obligations:

• Payment providers to process payments and payouts.
• Cloud hosting and infrastructure providers that store and run the service.
• Identity and authentication provider for sign-in and account security.
• Mapping and geocoding provider to resolve store and delivery addresses.
• Messaging providers for push notifications and, where you enable it, WhatsApp order capture.
• Analytics and crash-reporting providers to keep the app reliable.
• Professional advisers, auditors and regulators where required.
• Authorities, where disclosure is required by law or to protect rights, safety or property.

We do not sell your personal data.

A list of our current processors is available on request from the contact in section 3.

10. International transfers

Some of our service providers store or process data outside Nigeria. Where we transfer personal data abroad, we do so in line with the NDPA cross-border transfer rules, and we rely on one or more of: an adequacy decision or instrument recognised by the NDPC, appropriate contractual safeguards, or your consent. You may request information about the safeguards we use.

11. Data retention

We keep personal data only for as long as necessary for the purposes above, then delete or anonymise it. Typical periods:

• Account and business data: for the life of your account and for a reasonable period after closure to meet legal and audit duties.
• Order, payment and financial records: as required by tax and accounting law (commonly at least six years).
• Order-capture recordings and images: deleted once the draft is resolved.
• Diagnostics and logs: short retention, then deleted or aggregated.

12. Your rights

Subject to the NDPA and NDPR, you have the right to:

• Be informed about how your data is processed.
• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data where the law allows.
• Restrict or object to certain processing.
• Request portability of data you provided, in a usable format.
• Withdraw consent at any time, where processing is based on consent.
• Not be subject to a decision based solely on automated processing that has a legal or similarly significant effect, without safeguards.

To exercise a right, contact us using section 3. We will respond within the time the law allows. We may need to verify your identity first. These rights are free in most cases. If your request is about data you entered as a merchant's customer, we may refer you to the relevant merchant, who is the controller of that data.

13. Security

We use technical and organisational measures to protect personal data, including encryption in transit, access controls, authentication, and monitoring. No system is perfectly secure, so we cannot guarantee absolute security, but we work to protect your data and to notify you and the NDPC of a breach where the law requires.

14. Children

Ordelo Manager is a business tool and is not directed at children. We do not knowingly collect data from anyone under 18. If you believe a child has provided us data, contact us and we will delete it.

15. Cookies and similar technologies

Our web app and website may use cookies and similar technologies for sign-in, security, preferences and basic analytics. You can control cookies through your browser settings. Disabling some cookies may affect how the app works.

16. Changes to this policy

We may update this policy from time to time. We will post the new version with an updated date, and where changes are significant we will notify you in the app or by email. Continued use of the app after an update means you accept the revised policy.

17. Complaints

If you have a concern, please contact us first using section 3 so we can try to resolve it. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.

*Ordelo Manager is a Noddit product. getnoddit.com*