Privacy Policy

1. Overview

Liondatas is committed to protecting your personal data and respecting your privacy.

This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and what rights you have regarding your information.

This Policy applies to all users of the Liondatas Platform, including customers, vendors, and partners. It complies with applicable data protection laws and the Nigeria Data Protection Regulation (NDPR).

2. Data Controller Information

The data controller responsible for your personal data is Liondatas.

3. Personal Data We Collect

4. Legal Basis for Processing

Liondatas processes your personal data on the following legal grounds:

• Contract Performance: To fulfil your orders, manage your account, and provide the services you have requested
• Legitimate Interests: To improve our Platform, prevent fraud, and ensure the security of our systems
• Legal Obligation: To comply with applicable laws, including tax and anti-money laundering regulations
• Consent: For optional features such as personalised marketing communications. You may withdraw consent at any time

5. How We Use Your Data

We use your personal data for the following purposes:

• Processing and fulfilling transactions (data top-ups, airtime, bill payments)
• Verifying your identity and preventing fraudulent or unauthorised transactions
• Processing payments and managing refunds, disputes, and chargebacks
• Sending transactional notifications (order confirmations, delivery updates, receipts)
• Conducting analytics and improving Platform performance, features, and design
• Complying with legal and regulatory obligations
• Responding to customer support requests and resolving disputes
• Sending promotional offers (only with your consent)

6. Data Sharing and Disclosure

Liondatas does not sell your personal data. We may share your data with the following categories of third parties:

7. International Data Transfers

Your personal data may be transferred to and processed in countries outside Nigeria. Where such transfers occur, Liondatas ensures appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or other legally recognised transfer mechanisms.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Policy, and to comply with our legal obligations.

• Account and transaction data: 7 years from last account activity (for tax and regulatory compliance.)
• Communication records: 2 years from the date of communication.
• Marketing preferences: Until withdrawal of consent or account deletion.
• Fraud-related data: Up to 10 years where required by law.

Upon expiry of the applicable retention period, your data will be securely deleted or anonymised.

9. Your Data Rights

You have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data, subject to our legal retention obligations
• Right to Restriction: Request that we limit processing of your data in certain circumstances
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent for consent-based processing at any time

To exercise any of these rights, please contact us at privacy@liondatas.com. We will respond within 30 days.

10. Cookies and Tracking Technologies

Liondatas uses the following types of cookies:

• Strictly Necessary Cookies: Required for the Platform to function. These cannot be disabled.
• Performance Cookies: Collect anonymised data on how users interact with the Platform to help us improve it.
• Functional Cookies: Enable personalised features such as saved addresses and language preferences.

You can manage cookie preferences through your device or browser settings. Disabling certain cookies may affect your experience.

11. Security Measures

Liondatas employs industry-standard technical and organisational security measures to protect your personal data. These measures include:

• TLS/SSL encryption for all data in transit
• AES-256 encryption for sensitive data at rest
• Multi-factor authentication for administrative access
• Regular security audits and vulnerability assessments
• Strict access controls and role-based permissions for staff

In the event of a data breach that poses a risk to your rights, Liondatas will notify relevant authorities and affected users as required by law.

12. Children's Privacy

The Liondatas Platform is not intended for use by persons under the age of 18.

We do not knowingly collect personal data from minors. If we become aware that we have collected data from a person under 18, we will take steps to delete such data promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Effective Date" at the top of this page.

If we make significant changes, we will notify you via email or through a notice on our Platform. We encourage you to review this policy periodically.