NDPA 2023 Compliant Policy

Nigeria Data Protection Policy

How HandyHub Pro Solutions Limited collects, processes, protects, and respects your personal data under the Nigeria Data Protection Act 2023 (NDPA).

Last Updated: August 9, 2026 | Compliant with Nigeria Data Protection Commission (NDPC) Guidelines

Data Protection Declaration

HandyHub Pro Solutions Limited ("HandyHub", "We", "Us") is committed to maintaining the privacy, confidentiality, and security of all personal data provided by Clients, Service Professionals, and Platform Visitors. We strictly adhere to data protection principles set out under Section 24 of the Nigeria Data Protection Act 2023.

1. Personal Data We Collect

User Account Information: Full name, phone number, email address, physical booking address, landmark description.
Professional Identity Verification: National Identification Number (NIN), Bank Verification Number (BVN validation), government-issued ID documents, trade certifications, and passport photographs.
Financial & Payment Data: Bank account details for payouts, tokenized transaction references processed securely under PCI-DSS Level 1 compliance via Paystack / Flutterwave.
Geolocation & Technical Data: Precise GPS location coordinates (when active on duty or booking), IP address, device telemetry, browser type.

2. Lawful Bases for Data Processing

Under Section 25 of the NDPA 2023, we process your personal data on the following grounds:

Contractual Necessity: To connect Clients with Professionals, facilitate escrow payments, and fulfill home service dispatches.
Legal Obligation: To comply with Central Bank of Nigeria (CBN) Anti-Money Laundering (AML) & Know-Your-Customer (KYC) regulations.
Legitimate Interest: To maintain platform security, prevent fraud, and conduct quality assurance audits.
Explicit Consent: For push notifications, marketing updates, and geolocation tracking.

3. Data Subject Rights (NDPA 2023)

As a Data Subject under Nigerian law, you possess the right to:

Right of Access & Portability: Request a copy of your personal data stored on our platform.
Right to Rectification: Correct inaccurate or incomplete account records.
Right to Erasure ("Right to be Forgotten"): Request deletion of your data (subject to statutory financial retention mandates).
Right to Object & Withdraw Consent: Opt out of non-essential data processing or marketing updates at any time.

4. Third-Party Data Processors & Security

We do not sell, rent, or trade personal data to third parties. Data is shared strictly with trusted, audited processors necessary for platform functionality, including Paystack (Payment Gateway), Supabase (Encrypted Database Storage), and Twilio/SMS Gateways (OTP Verification). Data is encrypted in transit via TLS 1.3 and at rest via AES-256 encryption.

Data Protection Officer (DPO) Contact

For data access requests, privacy inquiries, or NDPC regulatory correspondence:

dpo@handyhubpro.ng