LegendGo Privacy Policy
This Privacy Policy explains how Legend Supermarket ("LegendGo", "we", "us" or "our") collects, uses, stores, shares and protects personal information when you use the LegendGo mobile application, website, customer support channels and related grocery-ordering, delivery and loyalty services (together, the "Services").
By using the Services, you acknowledge that you have read this Privacy Policy. Where consent is the appropriate legal basis, we will ask for it separately and you may withdraw it as described below.
1. Who is responsible for your information?
Legend Supermarket, of 5 Salem Street, Lekki, Lagos, is the data controller responsible for the personal information described in this Policy. LegendGo may use affiliated companies and service providers, including its technology provider, payment processors, delivery partners, SMS providers and cloud-hosting providers, to process information on its behalf.
Privacy enquiries: [email protected]
General support: [email protected]
Website: https://sirclecompany.com
2. Information we collect
2.1 Information you provide
Account and identity information, such as your name, mobile number, email address, profile details and login or one-time-password verification information.
Delivery information, such as saved addresses, delivery instructions, landmarks, city, state and location coordinates when you choose to provide them.
Order and transaction information, including products ordered, quantities, prices, delivery fees, discounts, order status, payment references, refunds and purchase history.
Loyalty information, such as membership identifiers, points earned or redeemed, visits, offline purchase records and receipt references.
Communications you send to customer support, including complaints, feedback and any files or images you provide.
2.2 Information collected automatically
Device and technical information, such as device type, operating system, app version, IP address, language, time zone and diagnostic identifiers.
Usage and log information, such as screens viewed, actions taken, search activity, crashes, performance events and security logs.
Approximate or precise location information only where you grant permission or provide coordinates for delivery and address confirmation.
2.3 Information from other parties
Payment status and transaction confirmations from payment providers. We do not intend to store your complete card details; those are handled by the relevant payment provider.
Delivery quotations, rider assignment, delivery status and proof-of-delivery information from delivery partners.
Purchase or receipt information entered by authorised supermarket staff for in-store loyalty earning and reconciliation.
Fraud, identity, security or analytics signals supplied by vendors that help us operate and protect the Services.
3. How we use personal information
Create, verify, secure and administer your account.
Process your cart, payment, order, delivery, refund and customer-service requests.
Calculate delivery charges and determine whether an address is within a supported delivery area.
Operate the LegendGo loyalty programme, record eligible online and in-store purchases, calculate points and resolve discrepancies.
Send transactional communications, including OTPs, receipts, order updates, delivery updates and important service notices.
Personalise product listings, recommendations and promotions where permitted.
Detect, investigate and prevent fraud, unauthorised activity, abuse, security incidents and violations of our Terms.
Monitor app performance, troubleshoot problems, improve the Services and develop new features.
Comply with legal obligations, enforce agreements, establish or defend legal claims and respond to lawful requests.
4. Legal bases for processing
Depending on the context and applicable law, we process personal information because it is necessary to perform our contract with you, to comply with a legal obligation, for our legitimate interests or those of another person, to protect vital interests, for a task in the public interest where applicable, or with your consent. Our legitimate interests include operating and improving the Services, protecting customers and the business, preventing fraud and communicating relevant service information, provided those interests are not overridden by your rights.
5. How we share personal information
We do not sell your personal information. We may share only what is reasonably necessary with:
Legend supermarket personnel and authorised affiliates involved in fulfilling orders, customer support, loyalty operations, accounting and reconciliation.
Payment processors and financial institutions that initialise, verify, settle or refund transactions.
Delivery and logistics partners that quote, collect and deliver orders.
SMS, email, communications, analytics, cloud-hosting, database, security and technical service providers.
Professional advisers, auditors, insurers and potential transaction counterparties, subject to appropriate confidentiality safeguards.
Regulators, courts, law-enforcement agencies or other authorities where disclosure is required or permitted by law.
A successor or acquiring entity in connection with a merger, financing, reorganisation, sale of assets or similar business transaction.
Service providers are expected to use information only for the contracted purpose and to apply appropriate confidentiality and security measures.
6. Payments
Payments may be processed by third-party payment providers, including Paystack or another provider displayed at checkout. Their processing of payment information is governed by their own privacy notices and terms. LegendGo generally receives transaction references, payment status, amount, channel and limited card descriptors rather than complete payment-card credentials.
7. Location information
Location information is used to help you set a delivery address, calculate availability or delivery fees, and support delivery fulfilment. You may deny or withdraw device location permission in your device settings and enter an address manually, although some location-assisted features may be less accurate.
8. Marketing and notifications
We may send essential service messages without marketing consent, including security codes, payment notices and order updates. Promotional messages will be sent only where permitted. You may opt out through the unsubscribe method in the message, notification settings in the app, your device settings or by contacting us. Opting out of marketing will not stop essential service communications.
9. Data retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing the Services, keeping transaction and accounting records, resolving disputes, preventing fraud and meeting legal, tax, audit or regulatory obligations. Retention periods differ by data type. When information is no longer required, we will delete, anonymise or securely isolate it, subject to technical backup cycles and lawful retention requirements.
After account deletion, profile and authentication data will be deleted or irreversibly anonymised, except for information we must retain or reasonably need for lawful purposes. Order, payment, refund, fraud-prevention and accounting records may be retained in a restricted form where required for legal, tax, regulatory, reconciliation or dispute-resolution purposes.
10. International data transfers
Some service providers may process information outside Nigeria. Where personal information is transferred internationally, we will use a lawful transfer mechanism and appropriate safeguards as required by applicable data-protection law.
11. Security
We use reasonable administrative, technical and organisational safeguards designed to protect personal information, including access controls, authentication, encryption in transit where supported, logging, backups and restricted staff access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. You are responsible for protecting access to your phone, OTPs and account.
12. Your privacy rights
Subject to applicable law and relevant exemptions, you may have the right to:
ask whether we process your personal information and request access to it;
request correction of inaccurate or incomplete information;
request deletion of information in appropriate circumstances;
object to or request restriction of certain processing;
withdraw consent at any time where processing is based on consent;
request portability of information you provided in a structured, commonly used format where applicable;
object to certain direct marketing; and
complain to the Nigeria Data Protection Commission or another competent supervisory authority.
To exercise a right, contact [email protected]. We may need to verify your identity before acting on the request. Rights are not absolute and may be limited by legal, security, fraud-prevention, record-keeping or third-party considerations.
13. Children
The Services are intended for persons who are legally able to enter into a binding transaction. LegendGo is not directed to children under 18 and we do not knowingly permit children to create accounts without appropriate parental or guardian involvement. If you believe a child has provided personal information improperly, contact [email protected].
14. Third-party services and links
The Services may link to or integrate with third-party services. Their privacy practices are governed by their own notices. We encourage you to review those notices before providing information to them.
15. Changes to this Policy
We may update this Policy to reflect operational, legal or technical changes. We will publish the updated version with a new “Last updated” date and, where required, provide additional notice or obtain consent.
16. Contact and complaints
Contact us at [email protected] or 5 Salem Street, Lekki, Lagos. We will review and respond within a reasonable period. You may also lodge a complaint with the Nigeria Data Protection Commission where you believe your data-protection rights have been infringed.