NaijaJollof is operated by Sagencom Ad Service, registered with the CAC of the Federal Republic of Nigeria. We are committed to protecting your personal data in accordance with the Nigeria Data Protection Regulation (NDPR) 2019 and applicable global standards including GDPR for EU users.
1 Information We Collect
1.1 Information You Provide Directly
- Full name and business name
- Email address and phone number
- Business address and location
- Payment information (processed securely via Paystack — we do not store card details)
- Profile photos, business images, and menu content
- Reviews and ratings you submit
1.2 Information Collected Automatically
- IP address and device identifiers
- GPS/location data (only when you grant permission)
- Browser type, operating system, and referral source
- Pages visited, search queries, and time spent on platform
- Cookie data (see Section 7)
1.3 Information From Third Parties
- Payment status and transaction references from Paystack
- Social media profile data if you register via social login
2 How We Use Your Information
- To create and manage your account on NaijaJollof
- To display your business listing to potential customers
- To process premium subscription and advertising payments via Paystack
- To send service notifications, billing receipts, and account alerts
- To personalise your experience using GPS-based discovery
- To improve our platform through analytics and usage data
- To detect and prevent fraud, abuse, and fake listings
- To comply with Nigerian law and regulatory obligations
- To send marketing communications (only with your consent)
3 Legal Basis for Processing (NDPR)
We process your personal data on the following lawful bases under the NDPR 2019:
- Contract — Processing necessary to provide the services you have signed up for
- Legitimate Interest — Analytics, fraud prevention, and platform improvement
- Consent — Marketing emails and GPS tracking (you may withdraw at any time)
- Legal Obligation — Compliance with Nigerian tax, regulatory, and law enforcement requirements
4 How We Share Your Information
We do not sell your personal data. We share data only as follows:
- Paystack — Payment processing for subscriptions and ad bookings
- Cloud hosting providers — Server infrastructure for platform operations
- Analytics tools — Aggregated, anonymised usage data for platform improvement
- Law enforcement — When required by a valid Nigerian court order or legal process
- Business transfers — In the event of a merger, acquisition, or sale of Sagencom Ad Service assets
5 Data Retention
- Active account data — Retained for the duration of your account
- Payment records — Retained for 7 years as required by Nigerian tax law (FIRS)
- Review and listing data — Retained for 3 years after account deletion
- Analytics data — Retained in anonymised form indefinitely
- Upon account deletion — Personal identifiers deleted within 30 days
6 Your Rights Under the NDPR
As a data subject under the Nigeria Data Protection Regulation, you have the right to:
- Access — Request a copy of the personal data we hold about you
- Correction — Request correction of inaccurate or incomplete data
- Deletion — Request deletion of your personal data (subject to legal retention obligations)
- Portability — Receive your data in a structured, machine-readable format
- Objection — Object to processing based on legitimate interest
- Consent Withdrawal — Withdraw marketing or GPS consent at any time
To exercise any of these rights, contact us at privacy@naijajollof.com
7 Cookie Policy Summary
We use essential cookies to operate the platform, and optional analytics and advertising cookies. You may manage your cookie preferences via the cookie banner on your first visit.
- Essential cookies — Session management, security tokens, load balancing. Cannot be disabled.
- Analytics cookies — Page views, search queries, user journey mapping. Optional.
- Marketing cookies — Ad performance tracking, retargeting. Optional.
8 International Transfers
If you are located outside Nigeria (including EU/EEA users), your data may be processed in Nigeria. We ensure appropriate safeguards are in place. EU users retain rights under GDPR Article 46 and may contact our Data Protection Officer.
9 Data Protection Officer
Organisation
Sagencom Ad Service
Role
Data Protection Officer
Email
dpo@naijajollof.com
10 Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be notified via email or a prominent notice on the platform at least 14 days before taking effect.