Privacy Policy

NaijaBid ("we", "our", or "us") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. This policy is compliant with the Nigeria Data Protection Regulation (NDPR) 2019 and the Nigeria Data Protection Act (NDPA) 2023. By using NaijaBid, you consent to the data practices described in this policy.

We collect information you provide directly to us, including: Personal Identification: • Full name, email address, phone number • Government-issued ID (National ID, Driver's License, Passport, Voter's Card) • Selfie photograph for identity verification Financial Information: • Bank account details (for withdrawals) • Transaction history • Wallet balance Usage Data: • IP address, browser type, device information • Pages visited, time spent on the Platform • Bid history, items viewed, saved searches

We use your information to: • Create and manage your account • Process transactions and payments securely • Verify your identity through KYC procedures • Maintain detailed financial audit trails, including non-refundable bidding fees • Communicate with you about your account, bids, and purchases • Prevent fraud and ensure platform security • Comply with legal and regulatory obligations • Improve our services through aggregated analytics • Send you relevant updates and promotional materials (with your consent) We do not sell your personal information to third parties.

As a regulated marketplace facilitating financial transactions, we are legally required to verify the identity of all users. Your KYC documents are: • Stored using industry-standard encryption (AES-256) • Accessible only to authorised NaijaBid compliance staff • Not shared with third parties except as required by law (e.g., EFCC, FCCPC) • Retained for a minimum of 5 years as required by Nigerian financial regulations • Never used for marketing purposes You may request deletion of your KYC documents, subject to legal retention requirements.

We may share your information with: Service Providers: • Paystack (payment processing) • Firebase (authentication and data storage) • Cloud hosting providers (server infrastructure) These providers are contractually required to protect your data and may not use it for their own purposes. Legal Requirements: We may disclose your information if required by Nigerian law, court order, or government regulation, including disclosures to the EFCC, FCCPC, or CBN. Business Transfers: In the event of a merger or acquisition, your data may be transferred to the acquiring entity, subject to the same privacy protections.

We use cookies and similar technologies to: • Keep you logged in (session cookies) • Remember your preferences • Analyse usage patterns to improve the Platform • Prevent fraud and enhance security You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of the Platform. We do not use third-party advertising trackers.

We implement industry-standard security measures to protect your information: • HTTPS encryption for all data in transit • AES-256 encryption for sensitive data at rest • Secure session management with HttpOnly cookies • Regular security audits and penetration testing • Role-based access controls for staff Despite these measures, no internet transmission is 100% secure. We encourage you to use strong passwords and report any suspicious activity immediately.

Under Nigerian data protection law, you have the right to: • Access: Request a copy of the personal data we hold about you • Correction: Request correction of inaccurate or incomplete data • Deletion: Request deletion of your data (subject to legal retention obligations) • Portability: Receive your data in a structured, commonly used format • Objection: Object to processing of your data for direct marketing • Withdrawal of Consent: Withdraw consent for non-essential data processing at any time To exercise any of these rights, contact us at privacy@naijabid.com. We will respond within 30 days.

We retain your personal data for as long as your account is active, or as required by law. • Account data: Retained for the duration of your account, plus 2 years after closure • KYC documents: Retained for a minimum of 5 years per Nigerian AML regulations • Transaction records: Retained for 7 years per FIRS requirements • Usage logs: Retained for 90 days After the applicable retention period, your data is securely deleted or anonymised.

NaijaBid is not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that a minor has registered, we will immediately deactivate the account and delete all associated data. If you believe a minor has used our Platform, please contact us at privacy@naijabid.com.

We may update this Privacy Policy periodically. We will notify you of significant changes via email or a prominent notice on the Platform at least 14 days before changes take effect. Your continued use of NaijaBid after the effective date of the revised policy constitutes your acceptance of the changes.

For privacy-related questions or requests, contact our Data Protection Officer: Email: privacy@naijabid.com Phone: +234 (0) 123 456 7890 Address: NaijaBid Limited, Lagos, Nigeria If you are unsatisfied with our response, you may lodge a complaint with the Nigeria Data Protection Commission (NDPC) at www.ndpc.gov.ng.