Data Protection Policy

01Our Role

For the personal data of our users, jetazap acts as the data controller. Where we process data on behalf of customers, for example when you send bulk SMS to your own contacts, you are the controller and we act as a processor.

02Data Protection Principles

• Lawfulness, fairness and transparency: we explain what we do and have a legal basis for it.
• Purpose limitation: we collect data for specific purposes and do not use it in incompatible ways.
• Data minimisation: we collect only what we need.
• Accuracy: we keep data up to date and correct errors.
• Storage limitation: we keep data only as long as needed.
• Integrity and confidentiality: we protect data with appropriate security.
• Accountability: we can show how we comply.

03Data We Process

04Legal Bases for Processing

• Contract: to open your account and deliver services you ordered.
• Legal obligation: for KYC, AML, tax and record keeping.
• Legitimate interests: for security, fraud prevention and improving the service, balanced against your rights.
• Consent: for optional matters such as non-essential cookies and marketing messages. You can withdraw consent at any time.

05Sharing Data

We do not sell personal data. We share it only with parties who need it to operate the service, under written agreements, including payment processors and banks, identity verification providers, card issuers, telecom and utility aggregators, analytics and hosting providers, professional advisers, and regulators or law enforcement when required by law.

06International Transfers

Some providers may process data outside Nigeria. Where this happens, we take steps to ensure an adequate level of protection, as the NDPA requires, for example through contractual safeguards.

07Security Measures

• Encryption of data in transit and protection of data at rest.
• Role-based access with the minimum access staff need.
• Logging and monitoring of access to sensitive systems.
• Regular backups, testing and a documented incident response plan.
• Confidentiality obligations and training for staff.

08Retention

09Your Rights

• Be informed about how your data is used.
• Access the data we hold about you and receive a copy.
• Correct inaccurate or incomplete data.
• Request deletion, subject to legal retention requirements.
• Restrict or object to certain processing, including direct marketing.
• Data portability where it applies.
• Withdraw consent at any time.
• Not be subject to decisions based solely on automated processing that significantly affect you, without safeguards.

To exercise a right, email support@usejeta.com.ng. We may ask you to verify your identity first and will respond within the time the law allows.

10Breach Notification

If a personal data breach is likely to result in a risk to your rights, we will notify the Nigeria Data Protection Commission within the legally required period and tell affected users where the law requires it.

11Complaints

Please contact us first at support@usejeta.com.ng. You also have the right to complain to the Nigeria Data Protection Commission (NDPC).