This Privacy Policy explains how NovaData ("we", "us", "our") collects, uses, shares and protects your personal data when you use our website at https://novadata.com.ng, our mobile app and our services for airtime, data, cable TV, electricity, exam pins and wallet payments (together, the "Services"). It also explains your rights and how to contact us.
We process personal data in line with the Nigeria Data Protection Act 2023 (NDPA) and other applicable laws. By using the Services you acknowledge that you have read this policy.
1. Who we are
NovaData is the data controller for the personal data described in this policy. You can reach us at meek2010@gmail.com or +2348130804458.
2. Information we collect
Information you give us:
- Account details — your name, email address, phone number, username, password (stored only in encrypted, hashed form) and transaction PIN (also hashed).
- Identity verification (KYC) — where required to unlock features or higher limits: your Bank Verification Number (BVN) or National Identification Number (NIN), date of birth, and any ID document or selfie you upload. BVN and NIN are encrypted at rest.
- Transaction details — the phone numbers, meter numbers, smart-card numbers, exam types and amounts you enter, and the beneficiaries you save.
- Funding details — records of bank transfers, card payments or manual funding requests, including receipts you upload. We do not store full card numbers; card payments are handled by our licensed payment partners.
- Support communications — messages, tickets and attachments you send us.
Information we collect automatically:
- Device and log data — IP address, device type and model, operating system, app version, browser type, pages viewed, and the date and time of requests.
- Security signals — sign-in attempts, devices used on your account and activity we use to detect fraud.
- Push notification tokens — if you allow notifications in the app.
Information from others: verification results from identity-verification partners, payment confirmations from banks and payment processors, delivery status from network operators and service providers, and details of who referred you, if anyone did.
3. How we use your information
- To create and manage your account and wallet.
- To process your purchases and deliver airtime, data, tokens, pins and subscriptions to the recipients you choose.
- To credit wallet funding, issue refunds for failed transactions and keep accurate records.
- To verify your identity and apply transaction limits.
- To detect, prevent and investigate fraud, abuse, money laundering and security incidents.
- To send receipts, service messages, security alerts and one-time passwords (OTPs).
- To provide customer support and resolve disputes.
- To pay referral and agent commissions where applicable.
- To improve and secure the Services, including analytics on how features are used.
- To send marketing messages, only where you have agreed, and you can opt out at any time.
- To comply with legal, regulatory and tax obligations and lawful requests from authorities.
4. Our legal bases
We rely on one or more of the following: performance of a contract (to provide the Services you ask for); legal obligation (record keeping, anti-fraud and anti-money-laundering duties, tax); legitimate interests (keeping the Services secure, preventing fraud, improving our products) where these are not overridden by your rights; and consent (for example marketing and optional notifications), which you may withdraw at any time.
5. How we share your information
We do not sell your personal data. We share it only as needed to run the Services, with:
- Service providers and network partners who fulfil your purchases — the recipient number, meter or card number and amount, as required to deliver.
- Banks and payment processors who handle funding, virtual accounts, card payments and settlements.
- Identity-verification partners who confirm BVN/NIN details you submit.
- Communication providers who send our emails, SMS and push notifications.
- Hosting, storage and security providers who keep the Services running and protected.
- Professional advisers such as auditors and lawyers, under confidentiality.
- Authorities — regulators, law enforcement or courts, where the law requires it or to protect our users and the public.
- A buyer or successor if our business is merged, sold or reorganised, under the same protections.
Everyone we share data with must protect it and use it only for the purpose we gave them.
6. International transfers
Some of our providers may store or process data outside Nigeria. When that happens we make sure an adequate level of protection applies, as the NDPA requires — for example through contractual safeguards.
7. How long we keep your information
We keep personal data only as long as needed for the purposes above. Account information is kept while your account is open. Transaction and financial records are kept for the period required by law (generally at least five years after the transaction) to meet audit, tax and anti-money-laundering obligations. When data is no longer needed we delete or anonymise it.
8. How we protect your information
We use technical and organisational measures appropriate to the risk, including encrypted connections (HTTPS), hashing of passwords and PINs, encryption of sensitive identifiers, access controls, activity logging and fraud monitoring. No system is completely secure, so please keep your password and PIN private, use a strong password, and tell us at once if you suspect unauthorised use of your account.
9. Your rights
Subject to the law, you have the right to:
- be informed about how we use your data (this policy);
- access a copy of your personal data;
- ask us to correct inaccurate or incomplete data;
- ask us to delete your data, where we are not required to keep it;
- object to or restrict certain processing, including direct marketing;
- withdraw consent at any time, without affecting earlier processing;
- receive your data in a portable format; and
- complain to the Nigeria Data Protection Commission (NDPC).
To use any of these rights, contact us at meek2010@gmail.com. We may need to verify your identity first and will respond within the time the law allows. You can also delete your account from your profile settings in the app.
10. Cookies and similar technologies
Our website uses cookies that are necessary to sign you in, keep your session secure and remember your preferences. We may also use analytics to understand how the Services are used. You can control cookies in your browser settings; blocking necessary cookies may stop parts of the website from working.
11. Notifications and marketing
We send service messages such as receipts, OTPs and security alerts because they are part of the Services. Promotional messages are optional — you can turn them off in your settings, through the unsubscribe link in an email, or by contacting us.
12. Children
The Services are not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.
13. Links to other services
The Services may link to websites or apps run by others, such as payment pages. Their privacy practices are their own, so please read their policies.
14. Changes to this policy
We may update this policy from time to time. The "last updated" date shows the latest version. If a change is significant we will tell you through the Services or by email before it takes effect.
15. Contact us
For questions or requests about your personal data, email meek2010@gmail.com, call +2348130804458.