XTRAFIND PRIVACY POLICY
1. About This Privacy Policy
1.1. This Privacy Policy provides information on how XTRAFIND NIG LTD (“XTRAFIND,” “we,” “us,” or “our”) collects, uses, discloses, and protects your personal data when you visit or use our website, mobile applications, devices, services, and other platforms referencing this Privacy Policy.
1.2. It explains what we do with your personal data, how we secure it, and your rights regarding your data under the Nigerian Data Protection Act, 2023.
2. Who We Are
2.1. XTRAFIND operates a multi-service online platform connecting vendors and consumers for services including but not limited to hotel and flight bookings, property purchases, food delivery, self-care services, pharmacy orders, and event bookings.
2.2. The Platform is operated by XTRAFIND NIG LTD, a company incorporated in Nigeria.
2.3. For data protection purposes, XTRAFIND is the Data Controller responsible for your personal data.
3. The Data We Collect About You
3.1. Personal data means any information that identifies you as an individual, directly or indirectly.
3.2. We may collect, use, store, and transfer the following categories of personal data:
3.2.1. Identity Data: name, date of birth, gender, and identification documents;
3.2.2. Contact Data: billing address, delivery address, email address, and phone numbers;
3.2.3. Financial Data: payment card details, bank account numbers;
3.2.4. Transaction Data: details about payments and purchases;
3.2.5. Technical Data: IP address, browser type, operating system, device identifiers;
3.2.6. Usage Data: information about how you use our Platform, products, and services;
3.2.7. Marketing and Communications Data: your preferences in receiving marketing from us and your communication preferences.
3.3. We may also collect data automatically through cookies and similar technologies (see Section 4).
4. Cookies and Tracking Technologies
4.1. Our Platform uses cookies to distinguish you from other users and improve your user experience.
4.2. You may control the use of cookies through your browser settings; however, some features of the Platform may not function properly without cookies.
5. How We Use Your Personal Data
5.1. We use your personal data to:
5.1.1. Register you as a user;
5.1.2. Process and deliver your orders and bookings;
5.1.3. Manage payments, fees, and charges;
5.1.4. Provide customer support;
5.1.5. Administer promotions, surveys, and events;
5.1.6. Improve our Platform, services, and user experience;
5.1.7. Comply with legal obligations;
5.1.8. Detect and prevent fraud or illegal activities.
6. Legal Basis for Processing
6.1. We process your personal data based on:
6.1.1. Consent: where you have given us permission;
6.1.2. Contractual Necessity: where processing is necessary for the performance of a contract;
6.1.3. Legal Obligation: where required by applicable laws;
6.1.4. Legitimate Interests: where processing is necessary for our legitimate business purposes, provided your rights do not override these interests.
7. Sharing Your Personal Data
7.1. We may share your personal data with:
7.1.1. Vendors and third-party service providers to fulfil orders and provide services;
7.1.2. Payment processors and financial institutions to process transactions;
7.1.3. Law enforcement agencies and regulators where required by law;
7.1.4. Affiliates and subsidiaries of XTRAFIND for business operations.
7.2. We require all third parties to respect the security of your data and to treat it in accordance with the law
8. International Data Transfers
8.1. Where we transfer your personal data outside Nigeria, we shall ensure appropriate safeguards are in place in compliance with Nigerian Data Protection laws.
9. Data Retention
9.1. We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including legal, accounting, or reporting requirements.
9.2. Upon expiry of the retention period, we will securely delete or anonymize your data.
10. Data Security
10.1. XTRAFIND implements appropriate technical and organizational measures to secure your data from unauthorized access, alteration, disclosure, or destruction.
10.2. Access to personal data is restricted to employees, agents, contractors, and other third parties on a need-to-know basis and subject to confidentiality obligations.
11. Your Legal Rights
11.1. Under the Nigerian Data Protection Act, you have the right to:
11.1.1. Access your personal data;
11.1.2. Request correction or deletion of your personal data;
11.1.3. Object to or restrict processing of your personal data;
11.1.4. Request transfer of your personal data to a third party;
11.1.5. Withdraw consent at any time where consent is the basis for processing.
11.2. To exercise these rights, please contact us at the details in Section 13.
12. Changes to This Privacy Policy
12.1. We may update this Privacy Policy from time to time. Any changes will be posted on our Platform and, where appropriate, notified to you by email.
13. Contact Information
13.1. For questions about this Privacy Policy or to exercise your data rights, contact:
XTRAFIND NIG LTD
Registered Office:
Email:
Phone:
14. Effective Date
14.1. This Privacy Policy is effective as of ……………………
