[Registered company name], trading as BizBooks (“we”), is the data controller for personal data about our account holders, website visitors and leads. For personal data you put into BizBooks about your clients and employees, you are the controller and we process it on your instructions. This policy follows the Nigeria Data Protection Act 2023 (NDPA).

What we collect

  • Account data: name, email, phone, password (stored as a one-way hash) and your acceptance of our Terms.
  • Business data you enter: company details, clients, invoices, expenses, employee and payroll details (such as salaries, bank details and pension PINs) and receipts.
  • Payment gateway keys you connect, which are encrypted before storage.
  • Calculator and advisory requests: the email address and inputs you submit when you ask us to email results or book a consultation.
  • Technical data: basic logs (such as IP address, device and pages used) needed to run and secure the Services.

Why we use it (lawful bases)

  • To provide the Services you signed up for (contract).
  • To send service emails: invoices you send, reminders, receipts, security and billing notices (contract and legitimate interests).
  • To send you results and related guides you request, and occasional product updates you can opt out of at any time (consent and legitimate interests).
  • To keep the Services secure, prevent fraud and comply with the law (legal obligation and legitimate interests).

We do not sell personal data.

Who we share it with

Only service providers that help us run BizBooks, under contract: hosting and database providers, email delivery providers, and the payment gateways you connect. We may disclose data where the law requires it. Some providers store data outside Nigeria. Where they do, we rely on the transfer safeguards the NDPA allows.

How long we keep it

Account and business data are kept while your account is active and for a reasonable period afterwards to meet legal and tax record-keeping requirements, then deleted or anonymised. Leads who don’t become customers are deleted within 24 months of their last interaction.

Your rights

You can ask to access, correct, delete or port your personal data, object to or restrict processing, and withdraw consent at any time. Email [email protected]. If you’re not satisfied, you can complain to the Nigeria Data Protection Commission.

Security

We use encryption in transit, encrypted storage of gateway secret keys, hashed passwords and access controls. No system is completely secure, so please use a strong, unique password and keep it private.

Changes

We’ll post updates here and tell account holders about material changes. See also our Terms of Service.

Contact

[Registered company name], [Registered office address], Nigeria. Email: [email protected].