Privacy Policy

MyNigerianGuide Ltd (“we”, “us”, “our”) operates the MyNigerianGuide platform at www.mynigerianguide.com. We are the Data Controller responsible for your personal data.

Data Protection Officer: The founder of MyNigerianGuide serves as the initial Data Protection Officer (DPO). Contact: privacy@mynigerianguide.com

2.1 Account data. When you register, we collect your name, email address, and password (stored as a one-way hash). Optionally: profile photo, bio, city, state, and phone number.

2.2 Business page data. If you create a business page: business name, address, contact details, operating hours, photos, and keywords you select.

2.3 Activity data. Posts you create, reviews you write, businesses you follow, and searches you perform.

2.4 Verification data. If you apply for CAC verification: your CAC registration number and uploaded documents.

2.5 Payment data. Payment transactions are processed by Paystack. We store only the payment reference, amount, and status. We never store card numbers or bank details.

2.6 Technical data. IP address (hashed for analytics), browser type, device information, and page view data.

We use your data to:

• Provide and operate the MyNigerianGuide platform
• Verify your identity and prevent fraud
• Send transactional emails (verification results, review notifications, account alerts)
• Process payments for sponsored listings
• Improve search results and platform performance
• Comply with legal obligations under Nigerian law

Legal basis under NDPR: We process your data on the basis of (a) your consent given at registration, (b) performance of our contract with you, and (c) our legitimate business interests in operating the platform safely.

We do not sell your personal data to third parties. We share data only with:

• Supabase — our database and authentication provider (data hosted in AWS EU-West)
• Paystack — payment processing (subject to Paystack's privacy policy)
• Resend — transactional email delivery
• Vercel — platform hosting and CDN
• Sentry — error monitoring (anonymised)

All service providers are contractually required to process your data only as instructed by us and to maintain appropriate security standards.

We may disclose your data if required by Nigerian law, court order, or to protect the rights and safety of our users.

We retain your personal data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by Nigerian law (e.g. financial records retained for 7 years).

Audit logs of admin actions are retained permanently as required for platform integrity and legal compliance.

As a data subject under the Nigeria Data Protection Regulation (NDPR) 2019, you have the right to:

• Access — request a copy of all personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request deletion of your personal data (the right to be forgotten)
• Restriction — request that we restrict processing of your data
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — withdraw consent at any time without affecting prior processing

To exercise any of these rights, email privacy@mynigerianguide.com or use the “Delete my account” option in your account settings. We will respond within 30 days.

We use strictly necessary cookies to maintain your login session. We use privacy-friendly analytics (Plausible Analytics and Vercel Analytics) that do not use tracking cookies and do not require cookie consent banners under the NDPR.

See our Cookie Policy for full details.

We implement appropriate technical and organisational measures to protect your personal data, including encryption at rest and in transit, access controls, regular security audits, and an immutable audit log of all administrative actions.

In the event of a data breach that poses a risk to your rights, we will notify you and the Nigeria Data Protection Bureau (NDPB) within 72 hours as required by NDPR.

MyNigerianGuide is not directed at children under 18 years of age. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will delete it immediately.

We may update this Privacy Policy from time to time. We will notify you of material changes via email. The updated policy will be posted on this page with a revised date.

For privacy questions, to exercise your rights, or to make a complaint:

Email: privacy@mynigerianguide.com
Data Protection Officer: Available on request
Address: MyNigerianGuide Ltd, Lagos, Nigeria

You also have the right to lodge a complaint with the Nigeria Data Protection Bureau (NDPB) at ndpb.gov.ng.