Ogaranya Merchant Privacy Policy

1. Introduction

Protecting your privacy is important to Ogaranya Technology Solutions Limited (“Ogaranya”, “we”, “us”, or “our”). This Privacy Notice explains how we collect, use, store, disclose, and protect personal data obtained through our website at https://www.ogaranya.com, in accordance with the Nigeria Data Protection Act (NDPA). We may update this Privacy Notice from time to time, and we encourage you to review it periodically to stay informed of our data protection practices.

2. PERSONAL DATA WE COLLECT

We collect personal data that you voluntarily provide to us, which may include:

1. Name
2. Email address
3. Phone number

We also automatically collect certain information when you visit our website through cookies and similar technologies, including:

1. Internet Protocol (IP) address
2. Browser type
3. Device information
4. Website usage data

3. PURPOSES OF PROCESSING

We process personal data for the following purposes:

1. To respond to enquiries and provide requested information
2. To deliver and improve our services
3. To perform analytics and website performance monitoring
4. To facilitate merchant-initiated or authorized transactions
5. To comply with applicable legal and regulatory obligations
6. To prevent fraud and ensure platform security

4. LAWFUL BASES FOR PROCESSING

In accordance with the NDPA, we rely on the following lawful bases when processing personal data:

1. Consent – where you have given clear consent for us to process your personal data for specific purposes, which you may withdraw at any time.
2. Legitimate Interest – where processing is necessary for our legitimate business interests, provided such interests do not override your fundamental rights and freedoms.

5. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar technologies to enhance user experience, analyze website traffic, and improve our services. You may control or disable cookies through your browser settings; however, some website features may not function properly as a result.

6. DATA RETENTION

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulatory obligations. Once retention is no longer required, personal data is securely deleted or anonymized.

7. DATA SHARING AND DISCLOSURE

We do not sell or rent personal data. Personal data may be shared only with trusted third-party service providers who support our operations, subject to appropriate confidentiality and data protection obligations.

8. CROSS-BORDER DATA TRANSFERS

Ogaranya does not transfer personal data outside the Federal Republic of Nigeria. All personal data processing activities are conducted within Nigeria.

9. CHILDREN’S PERSONAL DATA

Our services are not directed at children, and we do not knowingly collect or process personal data relating to children under the age of 18.

10. DATA SECURITY

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include access controls, encryption, secure systems, and periodic security reviews.

11. DATA SUBJECT RIGHTS

Under the NDPA, you have the right to:

1. Request access to your personal data
2. Request rectification of inaccurate or incomplete data
3. Request erasure of your personal data in certain circumstances
4. Restrict or object to processing in certain situations
5. Request data portability where applicable
6. Withdraw consent at any time

Requests can be made at no cost, and we will respond within one month of receipt.

12. CONTACT DETAILS

To exercise your rights or make enquiries regarding this Privacy Notice, please contact:

Data Protection Officer (DPO)
Email: data@ogaranya.com

You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you are dissatisfied with how your personal data is handled.

13. SUPERVISORY AUTHORITY

Nigeria Data Protection Commission (NDPC)
No. 12 Clement Isong Street,
Asokoro, Abuja, Nigeria
Email: info@ndpc.gov.ng
Tel: +234 (0) 916 061 5551
Website: https://ndpc.gov.ng

14. GOVERNING LAW

This Privacy Notice is governed by and interpreted in accordance with the Nigeria Data Protection Act (NDPA) and other applicable laws of the Federal Republic of Nigeria.