Privacy Policy
Last updated 30 October 2026
BizNaija ("we", "us") runs a marketplace, business directory and sales CRM for Nigerian businesses. This policy explains how we handle personal data in line with the Nigeria Data Protection Act 2023 (NDPA) and the guidance of the Nigeria Data Protection Commission (NDPC).
1. Data we collect
- Account details: name, email, phone number and sign-in information.
- Business details: business name, address, registration and verification documents, team members.
- Content you post: adverts, photos, reviews, messages and enquiries.
- CRM records that businesses store about their own customers.
- Payment records: plan, amount, payment reference and status. Card details are handled by Paystack and never stored by BizNaija.
- Technical data: device, browser, pages viewed and approximate location, used for security and to improve the service.
2. Why we use it (lawful basis)
- To provide the service you signed up for (contract).
- To keep the platform safe, prevent fraud and scams, and enforce our rules (legitimate interest).
- To meet legal, tax and regulatory duties (legal obligation).
- To send optional updates, only where you agree (consent). You can withdraw consent at any time.
3. Businesses using the CRM
When a business stores its customers' details in the BizNaija CRM, that business is the data controller and BizNaija processes the data on its behalf. Businesses must have a lawful basis for the data they upload and must honour their customers' rights. Business data is kept separate from other businesses and only visible to authorised team members.
4. Who we share data with
- Other users, when you choose to publish an advert, business profile, review or send an enquiry.
- Service providers that help us run BizNaija, such as hosting, email delivery and Paystack for payments, under written data-processing terms.
- Authorities, where the law requires it.
We do not sell personal data. Where data is stored or processed outside Nigeria, we rely on the safeguards permitted by the NDPA.
5. How long we keep it
We keep data while your account is active and afterwards only as long as needed for legal, tax, safety and dispute purposes. Payment records are kept for the period required by Nigerian tax law.
6. Your rights
You can ask to access, correct, delete or receive a copy of your data, object to or restrict processing, and withdraw consent. Email info@biznaija.com. We respond within the time the NDPA requires. You may also complain to the Nigeria Data Protection Commission.
7. Security
We use encryption in transit, access controls, staff permission checks and audit logs. No system is perfectly secure; if a breach affects you, we will notify you and the NDPC as the law requires.
8. Children
BizNaija is not for anyone under 18.
9. Changes
We will post updates here and tell you about important changes.
