Privacy Policy

Motsands is a technology-enabled haulage platform operated by Motenda Ltd., a company registered in Nigeria. We connect customers who need sand, granite, laterite and other construction aggregates with vetted suppliers and a branded fleet of trucks.

When this policy says "Motsands", "we", "us" or "our", it means Motenda Ltd. and the Motsands platform. When it says "you" or "your", it means you — whether you are a customer, a business account, a staff member, a driver or a partner.

We collect information you give us directly and information generated by your use of the platform.

Information you give us
- Name, phone number and email address when you create an account or place an order
- Delivery address and site coordinates
- Business name and CAC registration number (for business accounts)
- National Identification Number (NIN) for staff, drivers and partners
- Bank account details for payout recipients
- Payment card details — processed directly by Paystack; we never store raw card numbers

Information generated automatically
- Order history, delivery records and inspection reports linked to your account
- Device type, browser, IP address and approximate location when you use the platform
- Communications you send through our messaging and support channels

Information from third parties
- Payment status and transaction references from Paystack
- Bank account verification from NUBAN
- Mapping and distance data from Google Maps

We use your information to:

- Process, fulfil and track your orders from placement to delivery
- Verify your identity and prevent fraud
- Send you SMS, WhatsApp and email notifications about your orders and account
- Assign, schedule and pay drivers, inspectors and partners
- Generate invoices, receipts and VAT documentation
- Provide customer support and resolve disputes
- Improve the platform — pricing accuracy, route efficiency, inspection quality
- Comply with Nigerian law, including FIRS tax obligations and CAC requirements
- Detect and prevent misuse, abuse and security incidents

We do not sell your personal data to third parties.

We process your data on the following grounds under the Nigeria Data Protection Act 2023 (NDPA):

- Contract performance — processing your order, managing deliveries and processing payments
- Legitimate interests — fraud prevention, platform security, service improvement
- Legal obligation — tax records, audit trails and regulatory compliance
- Consent — marketing communications (you can withdraw consent at any time)

We share your information only where necessary:

- Paystack — to process and verify payments
- Supabase — our database and authentication provider
- Amazon Web Services (AWS) — secure media and document storage
- Google Maps — to calculate delivery routes and display maps
- Termii — to send SMS and WhatsApp notifications
- Resend / SendGrid — to send transactional emails
- Xero — our accounting software; order and payment data is shared for financial reconciliation
- NUBAN — to verify bank accounts for payout recipients
- Assigned drivers and inspectors — your delivery address and order details, as needed to complete your order
- Law enforcement or regulators — where required by law or court order

All third-party providers are required to process your data only as instructed and in compliance with applicable law.

We retain your data for as long as your account is active or as needed to provide services. After account closure:

- Order and payment records: 7 years (FIRS tax compliance)
- Identity documents (NIN, CAC): 5 years
- Communications and support logs: 2 years
- Delivery GPS traces: 90 days

We delete or anonymise data that is no longer required.

Under the Nigeria Data Protection Act 2023, you have the right to:

- Access — request a copy of the personal data we hold about you
- Correction — ask us to correct inaccurate or incomplete data
- Deletion — ask us to delete your data (subject to legal retention obligations)
- Restriction — ask us to pause processing in certain circumstances
- Portability — receive your data in a structured, machine-readable format
- Object — object to processing based on legitimate interests
- Withdraw consent — for any processing based on your consent, at any time

To exercise any of these rights, contact us at hello@motsands.com. We will respond within 30 days.

We take security seriously. Your data is protected by:

- Encrypted connections (HTTPS/TLS) on all pages
- Passwords and sensitive credentials stored using industry-standard hashing
- Role-based access controls — staff only access data relevant to their function
- Regular security reviews and dependency updates
- Supabase Row Level Security on all database tables

No system is perfectly secure. If you believe your account has been compromised, contact us immediately at hello@motsands.com.

We use essential cookies to keep you signed in and remember your session. We do not use advertising or tracking cookies.

You can disable cookies in your browser settings, but some features (including staying logged in) will not work without them.

The Motsands platform is not directed at children under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, contact us at hello@motsands.com and we will delete it promptly.

We may update this policy from time to time. We will notify you of material changes by email or a notice on the platform. The "Last updated" date at the top of this page always reflects the current version.

Continued use of the platform after changes take effect constitutes acceptance of the updated policy.

For privacy questions, data requests or complaints, contact our Data Protection Officer:

Motenda Ltd. — Data Protection
Email: hello@motsands.com
Address: Lagos, Nigeria

If you are not satisfied with our response, you may lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.