Privacy notice
In short. Axis Fuel runs on WhatsApp. We keep what we need to deliver your fuel and take payment:
- No BVN, NIN, ID documents or other KYC data from customers.
- Our message log keeps a fingerprint (hash) of each WhatsApp message, not its text. We do keep text you give us as part of an order, such as an address, a landmark or a note.
- We don't sell your data or use it for third party advertising.
Who we are
Axis Fuel is a fuel delivery service in Lagos, Nigeria, ordered through WhatsApp. Axis Fuel is operated by HOET ENTERPRISES ("we", "us"), which is the data controller for the personal data described here. See Contact for how to reach us.
What we collect and why
| Data | Why |
|---|---|
| Your WhatsApp number, the profile name WhatsApp shares with us, and the time of your last message | To identify you and reply to you. Your number links your orders, wallet and addresses. |
| Delivery addresses: the address text you typed or the place you searched for, the location pin you sent or set on our map, a label (Home, Work), house or flat details and directions you give, and map coordinates | To find stations near you, quote delivery and send the rider to the right place. Addresses you search for on our map page are sent to Google to find them. |
| Where the rider handed over your order | Stored with the order and, when close to your saved address, used to guide the next rider to the same spot. |
| Conversation state: which step of an order you are on and the choices you made, such as station, litres or an address you typed but did not confirm | To continue the chat where you left off. |
| Message log: message ID, type, time and a hash of the message, not its text | To process each WhatsApp message once and to investigate problems. |
| Orders: station, product, litres, price quoted and when it was reported, fees, total, a copy of the delivery address, status, timestamps, cancellation reason, the assigned rider and the handover point | To fulfil the order, show you what you paid for, handle refunds and keep financial records. |
| Delivery code, stored as a hash. Pickup code used between the rider and the station, stored as is | To confirm hand over to you and collection at the station. |
| Payments: amounts, the transfer account reference created for your payment, status, and a hash of each bank notification | To confirm payments with the bank and avoid double processing. |
| Wallet: balance and a ledger of deposits, order payments, refunds and adjustments | To run the Axis Fuel wallet accurately. |
| Price alerts you ask for | To message you when a station price changes. |
| Riders: name, WhatsApp number, verification and availability status, vehicle type and plate, location while you are active (from location pins or the tracking page), a route sample while you are on a job, delivery offers and responses, earnings, withdrawals and the bank account you give us | To verify riders, offer nearby deliveries, show customers where their rider is, track who carried each order and pay you. |
| Station staff: name, WhatsApp number, role and station; prices you report; pickup codes you enter; the station's balance, withdrawals and bank account | To update prices and confirm pickups over WhatsApp, show customers how recent each price is, and pay stations for fuel collected. |
| Website sign ups: name, WhatsApp number, role, area, business name, optional message, and a salted hash of your IP address, not the IP itself | To contact you about joining, and to limit abuse of the form. |
| Server logs: request details, customer ID and WhatsApp message ID, without message text | To keep the service running and fix faults. |
We do not ask customers for BVN, NIN, date of birth, ID documents or card details. You pay by bank transfer from your own bank, or from your Axis Fuel wallet.
Legal bases
Under the Nigeria Data Protection Act 2023 we rely on: contract (to take and deliver your order, run your wallet and pay riders and stations), legitimate interests (preventing fraud and abuse, keeping the service working, improving coverage), legal obligation (keeping financial records), and consent where we ask for it (for example price alerts, rider location tracking, or contacting you after a website sign up). You can withdraw consent at any time.
Who receives your data
- Meta (WhatsApp Business Platform) carries messages between you and Axis Fuel. Meta's own terms and privacy policy apply to your use of WhatsApp.
- Safe Haven Microfinance Bank provides the transfer accounts and confirms payments.
- Google: Google Maps Platform turns addresses into map coordinates, finds addresses you search for, estimates arrival times and shows the rider's map on the tracking page. Google Fonts serves the fonts on our web pages.
- Map page services: our address page loads its map library from unpkg.com and map tiles from OpenFreeMap, built on OpenStreetMap data. Your browser contacts them directly, as with any website.
- Hosting: Render (application hosting, Frankfurt, EU), Vercel (this website) and Supabase (database, Stockholm, EU).
- The station you choose receives the product and litres. The assigned rider receives the delivery address and directions, your first name and your WhatsApp number so they can reach you.
Some of these providers process data outside Nigeria; where they do, we rely on the safeguards the Act allows.
How long we keep it
- Orders, payments, wallet and earnings records: kept as financial records for accounting, tax and disputes.
- Rider route samples: deleted automatically after 30 days. Otherwise only a rider's latest location is kept.
- Saved addresses: removing an address hides it from your list; the record is kept until you ask us to delete your data.
- Conversation state, WhatsApp session records, message log hashes and price alerts: kept with your account until you ask us to delete your data. A price alert you turn off stops but its record stays.
- Rider and station staff details: while they work with us, and afterwards as long as the order records they are linked to.
- Website sign ups: until you ask us to delete them.
- Server logs: kept by our hosting provider for its log retention period.
Your rights
Under the Nigeria Data Protection Act 2023 you can ask us to tell you what data we hold about you and give you a copy, correct it, delete it (except records we must keep, such as financial records), restrict or object to certain processing, and move it to another provider. You can also withdraw consent you have given. To use these rights, email dake@velonsecure.xyz. See Data deletion for how deletion works and how we confirm a request is yours. If you are unhappy with how we handle your data you can complain to the Nigeria Data Protection Commission.
Security
Our website and servers use encrypted HTTPS connections. Delivery codes are stored as hashes, our message log stores hashes rather than message text, and website IP addresses are stored as salted hashes. Payments are confirmed directly with the bank.
Children
Axis Fuel is not intended for people under 18.
Changes
If we change this notice we will update the date above, and tell you on WhatsApp if the change is significant.