Data Protection Statement

Last updated: 9 October 2026

PhoneVault handles personal data of dealers, their customers and their staff. We are committed to following the Nigeria Data Protection Act 2023 and the rules of the Nigeria Data Protection Commission (NDPC).

Our commitments

• Lawful and fair: we only collect data for a clear purpose and a lawful reason, explained in our Privacy Policy.
• Only what is needed: we collect only what the service needs.
• Accurate: dealers can correct their records at any time.
• Not kept forever: we follow set retention periods.
• Secure: encryption in transit, encrypted backups, hashed passwords, separation between shops, staff permissions and audit logs.
• Accountable: we have a Data Protection Officer, keep records of how data is processed, and will notify the NDPC of serious breaches within 72 hours.
• Rights respected: access, correction, deletion, objection and portability requests are answered within 30 days.

Registration

PhoneVault will register with the NDPC and complete its yearly compliance audit as required for organisations of its size.

Contact our Data Protection Officer

You also have the right to complain to the Nigeria Data Protection Commission.