Privacy Policy
1. Introduction
[Platform Name] (“we,” “our,” or “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy outlines how we collect, process, and protect your information when you visit our website, register an account, or use our business directory and marketplace services. We act as the Data Controller in accordance with the Nigeria Data Protection Act (NDPA) 2023 and the regulations set by the Nigeria Data Protection Commission (NDPC).
2. The Data We Collect
We collect and process different types of personal and business data to operate effectively:
- Identity & Corporate Data: Full name, username, business name, Corporate Affairs Commission (RC/BN) numbers, and photographic identity documents for verification.
- Contact Data: Email addresses, billing addresses, physical operating locations, and telephone numbers.
- Listing & Profile Data: Service descriptions, portfolio images, environment amenity features offered by your business, and operational hours.
- Technical & Usage Data: IP addresses, browser types, device information, and analytics on how you interact with our platform (such as time spent viewing specific service listing cards, UI navigation paths, and search queries).
- Financial Data: Partial payment card details and transaction history (Note: Full payment details are securely processed by our CBN-licensed third-party payment gateways, not stored on our servers).
3. How We Use Your Data
We will only use your personal data when the law allows us to. Most commonly, we use your data to:
- Register you as a new platform user (business owner or consumer).
- Publish and display your business directory listings to potential clients.
- Analyze user interaction to optimize technical specifications, UI layouts, and overall visual design for a better browsing experience.
- Manage our relationship with you, including notifying you of changes to our terms or policy.
- Ensure platform security, prevent fraud, and verify the authenticity of service providers.
4. Data Sharing and Third Parties
We do not sell your personal data. However, we may share your information with:
- Consumers: Information you explicitly provide for your public business listing will be visible to all platform visitors.
- Service Providers: IT and system administration providers, and licensed payment processors (e.g., Paystack, Flutterwave) facilitating platform transactions.
- Legal & Regulatory Authorities: Law enforcement or government bodies (such as the NDPC or FCCPA) if required by Nigerian law to report suspected illegal activities.
5. Data Security and Retention
We have implemented appropriate security measures, including SSL encryption and secure server hosting, to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way.
We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements under Nigerian law.
6. Your Legal Rights (NDPA 2023)
Under the NDPA, you have specific rights regarding your personal data:
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of incomplete or inaccurate data.
- Right to Erasure: Ask us to delete or remove personal data where there is no good reason for us continuing to process it.
- Right to Object/Restrict: Object to our processing of your data or request restriction of processing under certain circumstances.
- Right to Data Portability: Request the transfer of your automated personal data to yourself or a third party in a structured, commonly used format.
7. Contact Details & Data Protection Officer
If you have any questions about this Privacy Policy or wish to exercise your legal rights, please contact our Data Protection Officer (DPO):
- Email: [DPO Email Address]
- Physical Address: [Company Registered Address in Nigeria]
You also have the right to lodge a complaint at any time with the Nigeria Data Protection Commission (NDPC) if you believe your data has been mishandled.
Note: Just like the Terms and Conditions, ensure a Nigerian legal professional reviews this template to verify it covers your exact data flow and any specific third-party integrations you use.