IWMN Privacy Policy
I Want My Needs Ltd (RC 9967611) ("IWMN", "we", "us") · 7b Remibol Estate, Ikotun, Lagos Effective date: 27 October 2026 · Version: 1.0
This policy explains what personal data we collect when you use the IWMN app, website or WhatsApp line, why we collect it, who we share it with and the choices you have. We process personal data in line with the Nigeria Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Commission's General Application and Implementation Directive 2025 (GAID).
Data controller: I Want My Needs Ltd Data Protection Officer: Nicholas Ilechie · info@iwmn.ng
1. What we collect
| Who | Data | Where it comes from |
|---|---|---|
| Everyone | Name, phone number, city and area, sign-in codes, account settings | You |
| Buyers | Needs you post (descriptions, photos, budget range), offers you choose, orders, delivery addresses, messages with IWMN, reports and disputes, reliability rating and strikes | You and your use of IWMN |
| Payments | Payment reference, amount, method type, status, and the last 4 digits of a card. We do not see or store full card numbers or PINs. | Our payment provider (Paystack) |
| Agents | Government ID (type, number and photo), selfie for verification, date of birth, bank or payout account details, guarantor's name and contact details, signed agreement, offers, photos and invoices you upload, performance and earnings | The agent, the guarantor and our verification providers |
| Store | Orders, deliveries, returns, and photos you send with a return | You and our logistics partners |
| Devices | Device type, operating system, app version, IP address, crash logs, and approximate location (city level) when you allow it | Your device |
| Usage | Screens viewed, searches and taps, used to improve the app | Your device, through analytics tools |
We do not knowingly collect data from anyone under 18. If you think a child has given us data, contact us and we will delete it.
2. Why we use it, and our lawful basis
| Purpose | Lawful basis (NDPA s.25) |
|---|---|
| Create and run your account; post needs; match offers; process orders, payments, deliveries, returns and refunds | Performance of a contract with you |
| Hold and release payments (IWMN Assured), resolve disputes, prevent fraud and off-platform dealing | Contract and legitimate interests |
| Verify agents' identity and payout accounts; keep tax and accounting records; respond to lawful requests | Legal obligation and legitimate interests |
| Reliability rating and strikes | Contract and legitimate interests (see section 6) |
| Improve the app, fix errors, measure performance | Legitimate interests |
| Marketing messages about offers and the IWMN Store | Consent. You can withdraw it at any time. |
| Precise location, contacts or camera access on your phone | Consent, given through your phone's permission prompts |
3. Who we share it with
We share only what each party needs:
- Agents see your need, the target price (never your top budget) and your city. Your name, phone number and exact address are shared with the delivering party only after you pay.
- Sellers and agents in your deal get the delivery details needed to complete it.
- Payment providers (Paystack and, where used, other licensed providers) process payments and payouts.
- Logistics partners get your name, phone number, delivery address and order details to deliver or collect items.
- Identity and bank verification providers check agent identity and payout accounts.
- Technology providers host our systems and send messages: cloud hosting, database, SMS, WhatsApp, email, analytics and crash reporting.
- Professional advisers (lawyers, accountants and auditors), under confidentiality.
- Authorities, such as courts, regulators and law enforcement, when the law requires it or to protect people from harm or fraud.
- A buyer of our business, if IWMN is ever merged or sold, under the same protections.
We do not sell your personal data.
4. Transfers outside Nigeria
Some of our technology providers store or process data outside Nigeria. When we transfer personal data abroad, we do so only as Part VIII of the NDPA allows. That means the receiving country or provider must offer an adequate level of protection, through contract terms, a provider's binding commitments or another basis the NDPA recognises. You can ask our DPO for details.
5. How long we keep it
| Data | Kept for |
|---|---|
| Account data | While your account is open, then 2 years after closing |
| Orders, payments, invoices and ledger records | As long as tax and accounting laws require (6 years) |
| Agent verification data | While the agent is active, then 5 years after they leave |
| Messages and dispute evidence | 2 years after the deal or dispute closes |
| Analytics and crash data | Up to 13 months, then deleted or anonymised |
After these periods, we delete or anonymise the data, unless a legal claim or investigation requires us to keep it longer.
6. Automated decisions
Some decisions are made automatically by rules:
- Reliability strikes. Not deciding within 72 hours on in-budget, in-spec offers adds a strike.
- Request limits. The cap on open Standard requests is applied automatically.
- Stock holds. Items are held for you during checkout and released when the hold ends.
You can ask a member of our team to review any automated decision that affects you, and to explain it. Use Profile › Help and disputes or contact our DPO.
7. Your rights
Under the NDPA, you have the right to:
- Be informed about how we use your data (this policy)
- Access a copy of your personal data
- Correct inaccurate or incomplete data
- Ask us to delete your data, where we no longer need it or have no lawful basis to keep it
- Restrict or object to processing based on legitimate interests, including direct marketing
- Receive your data in a commonly used, machine-readable format (portability)
- Withdraw consent at any time, without affecting earlier processing
- Not be subject to a decision based solely on automated processing that significantly affects you, and ask for human review
- Complain to the Nigeria Data Protection Commission (NDPC)
To use these rights, contact our DPO at info@iwmn.ng or through the app. We may need to verify your identity first. We respond within 30 days.
8. Security
We protect personal data with:
- encryption in transit
- access controls limited to staff who need it
- audit logs
- masked contact details between buyers and agents
- regular reviews of our providers
If a personal data breach is likely to put your rights at risk, we will notify the NDPC within 72 hours of becoming aware of it. If the risk to you is high, we will also tell you without delay, with steps you can take to protect yourself.
9. Cookies and similar technologies
Our website uses essential cookies to keep you signed in and secure. We use analytics cookies, or similar technologies in the app, only with your consent where the law requires it. You can change your choice in the cookie banner or in Profile › Privacy at any time.
10. Changes to this policy
We may update this policy. We will tell you about important changes in the app or by SMS before they take effect. The effective date at the top shows the latest version.
11. Contact
- Data Protection Officer: Nicholas Ilechie · info@iwmn.ng
- In the app: Profile › Help and disputes
- WhatsApp: 0913 695 9818
- Email: info@iwmn.ng
- Post: I Want My Needs Ltd, 7b Remibol Estate, Ikotun, Lagos