Privacy Policy

Privacy Policy for Pump Express
Effective Date: 20 May 2025

Pump Express (“we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy describes how we collect, use, store, and share your personal data when you use our mobile application (the “App”). We comply with applicable laws such as the UK GDPR and the Nigerian Data Protection Regulation (NDPR).

By using the App, you consent to the practices described here.


1. Information We Collect

We collect the following categories of information to deliver, maintain, and improve our services:

a. Personal Information

  • Name

  • Mobile number

  • Email address

  • Payment information (processed via secure third-party services)

  • Vehicle details (optional)

b. Device & Usage Data

  • IP address

  • Device type, model, and operating system

  • App version

  • App usage details (screens visited, errors, features used)

  • Timestamps and log data


2. Legal Basis for Processing

Under UK GDPR and NDPR, we process personal data on the following legal grounds:

  • Performance of contract: To fulfill your requests (e.g. processing fuel purchases, locating stations)

  • Consent: For accessing and using location data or sending marketing messages

  • Legal obligation: To comply with statutes, taxation, audits, etc.

  • Legitimate interest: To maintain, improve, and secure our services

You may withdraw consent or object to certain processing (where applicable) as detailed below.


3. Location Data

Pump Express collects and uses location data only when the app is in active use (foreground), and only for essential features. We use precise location data for:

  • Displaying nearby fuel stations on the map

  • Facilitating navigation or directions to a selected station

  • Verifying your proximity when completing a fuel purchase to prevent fraud or misuse

We do not collect location data in the background (i.e. when the app is closed or not in use). We do not share your location data with third parties for purposes such as advertising or profiling.

When you first request to use location features, the app will present a prominent disclosure (dialog) explaining that “the app collects location data to power station discovery, routing, and purchase verification.” You must opt in to grant permission.

You can revoke or change location permission at any time via your device settings; however, doing so may restrict core functionality of the app.

Your Rights Regarding Location Data

Under UK GDPR / NDPR you have the right to:

  • Know how and why your location is being used

  • Withdraw your consent to location tracking

  • Request deletion of your stored location data

  • Restrict or limit processing of your location data


4. How We Use Your Information

We use collected data to:

  • Provide core services (fuel purchase, station discovery)

  • Process payments securely

  • Improve app performance, features, and reliability

  • Provide customer support

  • Send service-related updates (not marketing by default)

  • Fulfill legal or contractual obligations

We do not use your data for unsolicited marketing unless you expressly opt in.


5. Sharing and Disclosure of Information

We do not sell your data. We may share or disclose information with:

  • Fuel station partners — to confirm and complete transactions

  • Payment processors — to handle payment flows

  • IT service providers / cloud infrastructure — for hosting, analytics, and maintenance

  • Regulatory, law enforcement, or governmental bodies — where legally required

All third parties are bound by confidentiality and must process data only for authorized purposes.


6. Data Retention

We retain personal data only for as long as necessary to provide our services or satisfy legal obligations (e.g. accounting, audits). Location data is stored temporarily, just as long as needed to verify a transaction, and then deleted promptly.


7. Data Security

We apply robust safeguards including:

  • Encryption in transit (SSL/TLS)

  • Secure cloud infrastructure

  • Access control (role-based)

  • Regular security audits and vulnerability assessments

Though we strive for strong protection, no system is entirely secure. We urge you to keep your credentials safe.


8. Your Rights

As a user under UK GDPR / NDPR, you may:

  • Request access to your data

  • Correct or update your information

  • Request deletion (“right to be forgotten”)

  • Restrict or object to processing

  • Withdraw consent (e.g. for location or marketing)

  • Lodge complaints with supervisory authorities (UK ICO, Nigeria NITDA)

To act on these rights, contact us via the details below.


9. Children’s Privacy

Pump Express is not intended for children under 18. We do not knowingly collect personal data from minors. If we learn that we have collected data from a minor, we will promptly delete it.


10. Updates to This Policy

We may update this policy occasionally. We will notify you via in-app notice or via our website. Your continued use of the app after changes constitute acceptance of the revised policy.


11. Contact Us

For any questions, concerns, or data requests, reach us at:

Pump Express Support
Email: pumppaydev@gmail.com
Phone: +234 703 566 9139