Privacy policy

Who we are

AmberStreams (“we”) runs amberstreams.com, the AmberStreams B2B directory at b2b.amberstreams.com, AmberStreams Courier and the Mammy Market Trade Fair (MMTF). This policy explains what personal information we collect, why, and your rights under the Nigeria Data Protection Act 2023. Contact us about privacy at webmaster@amberstreams.com.

What we collect

• Account and business details: your name, business name, email, phone and WhatsApp number, address and the services you use, when you sign up, order or list your business.
• Orders and payments: what you order, invoices, and bank transfer references you send us. We do not collect or store card details.
• Messages: what you send us on WhatsApp or by email, so we can reply and keep a record of your requests.
• Courier bookings: pickup and drop-off addresses, what is being sent, and the receiver’s phone number.
• Rider applications: identity, contact, guarantor, next-of-kin and payout details, and photos of documents you choose to upload.
• Website use: basic technical information (such as browser type) and, on our blog, a count of page views that does not identify you.

Why we use it

• To provide the services you ask for: listings, websites, domains, hosting, email, deliveries and event places.
• To send invoices and reminders, and to answer your questions.
• To check rider applicants’ identity and suitability, and to pay riders.
• To keep our services secure and to meet legal and accounting obligations.

We rely on the contract with you, your consent (for example, rider applications), our legitimate interest in running and improving our services, and legal obligations.

Our WhatsApp assistant

When you message our WhatsApp number, an AI assistant may reply first. It can look up our prices, take enquiries and courier bookings, and, only for the WhatsApp number on your account, tell you about your invoices and renewals. Messages are processed by our AI provider (Anthropic) to write replies and are not used to train its models under our agreement. You can ask for a person at any time, and our team can see and take over every conversation.

Who we share it with

We do not sell your information. We share it only with service providers who help us run AmberStreams, under contracts that protect it:

• Supabase (secure database and sign-in) and Cloudflare (website hosting and security).
• Meta (WhatsApp messaging), ZeptoMail (emails) and Anthropic (the AI assistant and blog drafting tools).
• Domain registries and our hosting infrastructure, when you buy a domain or hosting.
• Couriers’ details with the customer whose package they carry, and vice versa, only as needed for the delivery.

Some of these providers store information outside Nigeria. Where they do, we rely on safeguards permitted by the Nigeria Data Protection Act.

How long we keep it

We keep account, order and invoice records for as long as you are a client and for up to six years afterwards for accounting and legal reasons. Rider applicants who are not approved have their uploaded documents deleted. Messages are kept for up to two years unless they relate to an open matter.

Your rights

You can ask to see the information we hold about you, correct it, delete it, object to or restrict how we use it, or receive a copy. You can withdraw consent at any time. Email webmaster@amberstreams.com and we will reply within 30 days. If you are unhappy with our response, you can complain to the Nigeria Data Protection Commission.

Keeping it safe

Your information is stored in secured systems with access limited to authorised AmberStreams staff. Sensitive keys are encrypted, and rider documents are kept in private storage only staff can open.

Changes

We will post any changes here and update the date below. Last updated: November 2026.