Privacy Policy

1. Our Commitment to Privacy

We respect your privacy and process personal data in strict compliance with the Nigeria Data Protection Act (NDPA 2023) and international data protection standards (GDPR). We employ a privacy-by-design architecture with zero third-party tracking scripts.

2. Information We Collect

We collect only the minimum necessary information required to operate our services:

• Account Identifiers: Name, verified email address, and hashed credentials (Argon2id).
• Financial Ledger Records: Transaction references, timestamps, and Kobo amounts processed securely via Paystack. We do not store raw card numbers or CVVs.
• First-Party Engagement Telemetry: Ephemeral, one-way cryptographically hashed visitor identifiers (SHA-256 with daily salts). We never store raw IP addresses or cross-site tracking cookies.

3. Lawful Basis for Processing

We process your personal information under contractual necessity (delivering requested web services), statutory compliance (tax and financial auditing obligations under Nigerian law), and legitimate interest (defending against brute-force attacks and site abuse).

4. Data Retention Schedules

Data is stored according to tiered retention policies:

• Web Analytics & Telemetry: Automatically purged or rolled up after 90 days.
• Financial Transactions: Retained for 7 years in accordance with statutory accounting requirements.
• Account Profiles: Retained until self-service account erasure is triggered.

5. Your Statutory Rights

Under Section 34 of the NDPA 2023 and GDPR Article 17, you maintain the right to:

• Request access to and a portable export of all personal data held.
• Request rectification of inaccurate or incomplete records.
• Request complete and irreversible erasure of your profile and personal identifiers.

6. Data Protection Inquiries

For inquiries regarding data privacy or to exercise your statutory erasure rights, contact our Data Protection Officer at dpo@domain.ng.