1. Who we are
AP Tech Multi Global Ltd, trading as AP Tech Multi Global (“we”, “us”, “our”), is the data controller for personal data collected through this website. We are located at Lagos, Nigeria.
This policy is issued under the Nigeria Data Protection Act 2023 (“NDPA”) and the Nigeria Data Protection Commission's General Application and Implementation Directive (“GAID”). For any privacy matter, contact our data protection team at hello@yourdomain.com.
2. Personal data we collect
| Category | Examples | Source |
|---|---|---|
| Account data | Full name, email address, phone number, password (stored only as a one-way encrypted hash), consent choices | You, when you register |
| Delivery & contact data | Recipient name, phone, street address, city, state, order notes | You, at checkout or in your profile |
| Order & transaction data | Items ordered, amounts, order and payment references, payment status, delivery dates | Generated when you order; payment status from Paystack |
| Property transaction data | Means of identification (e.g. NIN, international passport, driver's licence), proof of address, and source-of-funds information | You, only when required for a land, house or rental transaction |
| Communications | Emails, WhatsApp messages, call notes and enquiries | You, when you contact us |
| Technical data | IP address, browser type, session cookie, security logs | Automatically, when you use the site |
Payment card data: card numbers, CVV and PINs are entered directly on Paystack's secure checkout. We never receive or store your full card details.
3. How and why we use your data
We only process personal data where we have a lawful basis under section 25 of the NDPA:
| Purpose | Lawful basis |
|---|---|
| Creating and managing your account | Performance of a contract |
| Processing orders and payments, delivering electronics, and arranging property inspections, documentation and handover | Performance of a contract |
| Sending order confirmations, delivery dates and service updates by email | Performance of a contract |
| Identity checks and record-keeping for property transactions under the Money Laundering (Prevention and Prohibition) Act 2022, plus tax, accounting and consumer-protection obligations | Legal obligation |
| Preventing fraud, securing accounts (e.g. limiting login attempts) and protecting our systems | Legitimate interests |
| Answering enquiries and improving our services | Legitimate interests |
| Sending offers and promotional messages | Consent: only if you opt in. You can withdraw at any time in your profile. |
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
4. Who we share your data with
We share only the minimum data needed with:
- Paystack Payments Limited: to process your payment (name, email, amount, order reference). Paystack is PCI-DSS certified.
- Delivery and logistics partners: recipient name, phone and delivery address, to deliver your order.
- Email and hosting providers: to run the website and send service emails on our behalf.
- Professional advisers: lawyers, surveyors and estate valuers involved in a property transaction you start.
- Regulators, courts and law enforcement: where we are legally required to.
All service providers act on our instructions under written agreements requiring confidentiality and security. We do not sell or rent your personal data.
5. International transfers
Some of our service providers (for example, email delivery, web hosting, web fonts and image delivery) may process data on servers outside Nigeria. Where this happens, we rely on the transfer grounds in Part VIII of the NDPA, such as an adequate level of protection in the recipient country or appropriate safeguards like binding contractual clauses.
6. How long we keep your data
| Data | Retention period |
|---|---|
| Account profile | Until you delete your account |
| Order, invoice and payment records | 6 years after the transaction, for tax and accounting purposes |
| Identity and transaction records for property deals | At least 5 years after the transaction ends, as required by anti-money-laundering law |
| Delivery address and phone on completed orders | Removed from the order when you delete your account |
| Security logs | Up to 12 months |
| Marketing preferences | Until you withdraw consent or delete your account |
7. How we protect your data
We use HTTPS encryption, hashed passwords, restricted staff access, CSRF protection, login-attempt limits and secure, signed payment confirmations. If a personal data breach is likely to result in a risk to your rights, we will notify the Nigeria Data Protection Commission within 72 hours of becoming aware of it, and will inform you without undue delay where the risk is high, as required by section 40 of the NDPA.
8. Your rights
Under sections 34 to 38 of the NDPA, you have the right to:
- Be informed about how your data is used (this policy).
- Access your personal data and receive a copy.
- Rectify inaccurate or incomplete data.
- Erasure: ask us to delete your data where there is no overriding legal reason to keep it.
- Restrict or object to processing, including objecting to direct marketing at any time.
- Data portability: receive your data in a structured, machine-readable format.
- Withdraw consent at any time, without affecting processing already carried out.
- Lodge a complaint with the Nigeria Data Protection Commission (ndpc.gov.ng).
How to exercise your rights: signed-in customers can update details, change marketing preferences, download their data and delete their account from Profile & privacy. You can also email hello@yourdomain.com. We respond without undue delay and in any case within 30 days, and we may need to verify your identity first. This is free of charge unless a request is manifestly unfounded or excessive.
9. Children
Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us their data, contact us and we will delete it.
10. Cookies
We use only essential cookies. See our Cookie Notice for details.
11. Changes to this policy
We may update this policy from time to time. The “last updated” date at the top shows when it was last changed. If we make significant changes, we will notify registered customers by email.
12. Contact & complaints
AP Tech Multi Global Ltd
Lagos, Nigeria
Privacy enquiries: hello@yourdomain.com
General support: hello@yourdomain.com · +234 800 000 0000
If you are not satisfied with our response, you may complain to the Nigeria Data Protection Commission.