This policy explains how AfrikCompare collects, uses, shares and protects your personal data, and the rights you have under the Nigeria Data Protection Act 2023 (NDPA) and the regulations of the Nigeria Data Protection Commission (NDPC).
1. Who we are
[Company legal name] (RC [RC number]), [Registered address], is the data controller for personal data processed through AfrikCompare. You can contact our Data Protection Officer at [dpo email address].
2. Personal data we collect
- Account details: your name, email address, phone number and password (stored only in encrypted, hashed form), plus a record of the terms and privacy policy versions you accepted.
- Verification data: one-time codes and the channel used (SMS or email) to verify your account.
- Comparison and purchase details: searches, saved comparisons, meter, smartcard and phone numbers you pay for, bookings and transaction records.
- Application details: when you apply for a product such as a loan, the information you give (for example date of birth, address, employment, income, expenses) and documents you upload (for example ID, payslips and bank statements).
- Technical data: device, browser, IP address and how you use our service, collected with cookies and similar technology (see our Cookie Policy).
3. How we use it and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Create and secure your account, including two-step verification | Contract |
| Show comparisons, quotes, eligibility estimates and saved progress | Contract |
| Process payments and deliver bills, data, airtime and bookings | Contract |
| Send your application and documents to the provider you choose | Contract and your consent |
| Identity checks, fraud prevention and anti-money-laundering duties | Legal obligation and legitimate interests |
| Improve and fix our service | Legitimate interests |
| Send deals, price alerts and product news | Consent (opt-in, withdraw anytime) |
4. Who we share it with
We do not sell your personal data. We share only what is needed, with:
- The provider you choose, when you buy, book or apply through us, so it can deliver the product or assess your application.
- Payment partners (currently Flutterwave) to process payments.
- Service providers who host our systems or send SMS and email for us, under contracts that require them to protect your data.
- Regulators, law enforcement and courts when the law requires it.
5. Estimates and automated decisions
Eligibility results, repayment estimates and value scores are calculated automatically from the details you give us. They help you choose but do not decide whether you get a product; the provider makes that decision. You can ask us to explain how an estimate was reached.
6. Transfers outside Nigeria
Some of our service providers may process data outside Nigeria. When that happens we transfer data only as permitted by Part VIII of the NDPA, for example to countries with adequate protection or under contractual safeguards approved by the NDPC.
7. How long we keep it
We keep personal data for as long as your account is open and as needed to provide the service. Transaction and application records are kept for the periods required by Nigerian financial, tax and anti-money-laundering law. One-time verification codes expire after 10 minutes. When data is no longer needed we delete or anonymise it.
8. How we protect it
We use encryption in transit, hashed passwords, two-step verification, access controls and monitoring. If a personal data breach is likely to put your rights at risk, we will notify the NDPC within 72 hours and tell you without undue delay where the risk is high.
9. Your rights
Under the NDPA you have the right to:
- be informed about and access the personal data we hold about you;
- correct inaccurate data and have incomplete data completed;
- have your data deleted, or its use restricted, in the cases set out in the law;
- object to processing based on legitimate interests, and to direct marketing at any time;
- receive your data in a portable format;
- withdraw consent at any time, without affecting processing that has already taken place;
- not be subject to a decision based solely on automated processing that significantly affects you.
To use these rights, contact [dpo email address]. We will respond within the time required by law. You can also complain to the Nigeria Data Protection Commission.
10. Marketing
We send marketing only if you opt in, for example by ticking the optional box when you sign up. You can unsubscribe using the link in any email or in your notification preferences.
11. Children
AfrikCompare is for people aged 18 and over. We do not knowingly collect data from children.
12. Changes and contact
We will tell you about important changes to this policy before they take effect, and ask for your consent again where the law requires it. Questions? Email support@afrikcompare.com or our Data Protection Officer at [dpo email address].