Errands® by Caldera — Privacy Policy
Version 2.4-draft — Effective 8 November 2026
Draft pending legal review. This text is a working placeholder. It has not been reviewed by a lawyer and is not final. Nothing in it removes rights you have under Nigerian law, including the Nigeria Data Protection Act 2023.
1. Who we are
Errands® by Caldera ("Errands", "we", "us") is a service marketplace operated by Caldera Technologies Limited. It connects customers with vetted service providers in Lagos, Nigeria. Caldera Technologies Limited is the data controller for the personal data described here.
This notice is given under the Nigeria Data Protection Act 2023 (NDPA). Where the GDPR applies to you, it is given under the GDPR too.
Contact: privacy@errandone.com
2. What we collect
2.1 Identity and contact
- Your name (first, middle and last), phone number, email address and WhatsApp number.
- For providers: business name, bank account details (encrypted), and the documents you send for checks.
- Proof of address (providers). A bank statement, a utility bill or an electricity receipt showing your name or your business name and the business address you gave us. It is read automatically through our verification partner PlatformXe and, where that is not enough, by a member of our team. We then delete the file and keep only these facts from it: who issued it, its reference or statement number, its date or period, the name and address as printed, and for a bank statement the last 4 digits of the account. We never keep balances, transactions or amounts, and you may cover them before you send a statement. A document nobody has checked within 30 days is deleted too.
- For services where a provider enters your home or travels with you: an identity check of your NIN with your date of birth, the number encrypted. If you have no NIN, a member of our team checks your passport instead. The person who attends your job is checked the same way. We never ask for or check your BVN.
- The photo of the person who attends. On a job inside a customer's home or travelling with them, the person who attends takes a photo of themselves when they are checked, and renews it within the period we set (180 days unless we set another, never more than two years). The customer of that job sees it with their name while the job is on, so they know who is coming, and so does the platform that booked the job for them, if one did; the Errands team who check photos see it too. To check it is them we may compare the face with the photo on their identity document through our verification partner PlatformXe: that is biometric data, which the Nigeria Data Protection Act 2023 treats as sensitive, and we do it only with their explicit consent, only to check who attends, and keep no face template of our own. Otherwise a member of our team looks at it, and the customer is told which was done. and it is removed from the job afterwards: the job's record keeps the name and role only. It is stored privately, shown only through a link that works for a few minutes, and never sent in a message. It is never the photo on an ID card or passport. We delete it when it expires or the person leaves the team. We cannot prevent a screenshot.
- Your security credentials: a password hash, or the public key of a passkey. Your fingerprint or face never leaves your device.
2.2 Where the service happens
- The service address you give us, with its map coordinates, to match you with a provider near you.
2.3 Live location during a job
- Providers: from the moment you start the journey to a job until that job ends, the app records your location. It is not recorded between jobs.
- Customers: while a provider is on the way, you can follow their progress. We do not track your location. Your device sends it only if you press "I need help".
2.4 Emergency contacts and safety alerts
- The emergency contact you name: their name and phone number, stored encrypted.
- The emergency alert. If someone presses "I need help", enters a duress PIN, or does not answer a safety check, we put together an alert: who raised it, the job reference, and the last known location. We send it to the Errands safety team and to the emergency contact of the person concerned, by WhatsApp, or by SMS where WhatsApp cannot reach them.
2.5 Records of each job
- The job sheet, changes, check-ins, photos, ratings, payments, payouts and any dispute or insurance claim.
- Your agreements and consents, with the version you accepted and when.
2.6 Collected automatically
- Your IP address and browser type, and what you do on the site, to keep it secure and working.
3. Why we use it
We use your data only to provide the service you asked for and to keep the records that reconcile it. Nothing else.
| Purpose | Data | Lawful basis (NDPA s. 25) |
|---|---|---|
| Your account, and contacting you about your jobs | Name, phone, email, WhatsApp | Contract |
| Matching a job to a provider | Service address and coordinates | Contract |
| Identity and business checks | NIN and date of birth, or a passport; documents | Legal obligation and legitimate interest (safety) |
| Live location during a job | Provider's location | Consent and legitimate interest (safety) |
| Emergency alerts | Name, job, last known location, emergency contact | Vital interest |
| Payments, payouts, refunds and disputes | Job records, payment records | Contract and legal obligation |
| WhatsApp messages from Errands | WhatsApp number | Consent, which you can withdraw |
| News and offers | Email, phone | Consent, which you can withdraw |
| Preventing fraud and keeping the service secure | IP address, sign-in records | Legitimate interest |
4. Who processes it for us
| Processor | What for |
|---|---|
| Termii | Phone codes by SMS |
| PlatformXe (Caldera Technologies), with its identity partners such as Prembly (IdentityPass), against NIMC | NIN checks |
| Flutterwave, Stripe | Card payments (we never hold your card number) |
| Meta (WhatsApp Cloud API) | WhatsApp messages |
| Google (Firebase, Maps) | App notifications; maps and travel times |
| Contabo | Database hosting |
| Vercel | Application hosting |
| Sentry | Error reports, with personal details removed |
| Our insurers | A claim, when there is one |
We do not sell your data, and we do not share it with advertisers.
5. How long we keep it
We keep data only while it serves the job it was collected for, or the records that reconcile it.
| Data | Kept |
|---|---|
| Payments, payouts, invoices and disputes | As financial and legal records, at least 7 years after your last business with us |
| Live location, check-ins, share links, emergency alerts and safety messages for a job | 7 years after the last business of everyone on that job, then deleted. Longer only while a dispute, claim, incident or safety report on that job is open |
| Your emergency contact | Until you ask us to erase it, or 7 years after your last business |
| Identity check results | As a record of the check, 7 years after your last business |
| A proof of address file | Deleted once it is checked (at most 30 days if it is not) |
| What we noted from a proof of address | As a record of the check, 7 years after your last business |
| The photo of the person who attends | Until it expires (the period we set) or the person leaves the team, then deleted; at once on a request to delete it |
| Your agreements and consents | 7 years after your last business |
| Your account | While you use it. When you ask us to delete it, see section 6 |
6. Your rights
Under the NDPA you have the right to:
- Access: get a copy of the data we hold about you.
- Erasure: ask us to delete your data. Data that is not part of a job's record (your emergency contact, the share links you made) is erased at once. Data a job's record needs is kept as section 5 says, then deleted. Nothing is erased while a job of yours is running.
- Correct data that is wrong, restrict or object to our use of it, and take it with you.
- Withdraw a consent at any time. It does not affect what was done before.
- Complain to the Nigeria Data Protection Commission (NDPC).
To use any of these rights, write to privacy@errandone.com.
7. Security
Identity numbers, bank details and emergency contacts are encrypted at rest. Data in transit uses TLS. Passwords are hashed. Staff see only what their role needs.
8. Transfers outside Nigeria
Some of our processors keep data outside Nigeria. We transfer it only with the safeguards the NDPA requires.
9. Changes
When this policy changes, we publish a new version and ask you to accept it the next time you use Errands.