Back to Homepage

Privacy Policy

“Komai nisan dare, gari zai waye”

Last Updated: June 11, 2026

1. Legal Framework & Regulatory Compliance

Arewa Smart is committed to protecting the privacy, confidentiality, and security of personal data collected from users across Nigeria. This Privacy Policy is formulated in strict compliance with the Nigeria Data Protection Act (NDPA) 2023, the Nigeria Data Protection Regulation (NDPR) 2019, and regulatory directives issued by the Nigeria Data Protection Commission (NDPC).

By accessing our portal, mobile services, or executing automated utility top-ups and verification requests (BVN & NIN search), you acknowledge that your personal data will be processed strictly in accordance with these statutory data protection laws.

2. Categories of Information We Collect

To deliver automated digital utility transactions and verification services, Arewa Smart collects and processes the following categories of data:

  • Identity & Contact Information: Full name, email address, phone number, physical address, and account login credentials.
  • Financial & Wallet Transaction Data: Funding reference numbers, virtual account details, wallet transaction logs, invoice receipts, and service purchase history.
  • Identity Verification Parameters: Query inputs submitted for lawful identity lookup requests, such as Bank Verification Numbers (BVN) or National Identification Numbers (NIN), processed solely for automated validation.
  • Technical Metadata & Device Logs: Internet Protocol (IP) address, browser type, operating system details, access timestamps, geolocation data, and session activity logs automatically captured for fraud monitoring.

3. Lawful Basis & Purposes of Data Processing

In accordance with Section 25 of the NDPA 2023 and NDPR guidelines, Arewa Smart collects and processes personal data based on the following statutory lawful grounds:

  • Contractual Necessity: Processing required to fulfill transaction orders, deliver airtime/data top-ups, issue electricity tokens, and manage your wallet balance.
  • Legal & Regulatory Compliance: Processing required to comply with Anti-Money Laundering (AML/CFT) laws, Central Bank of Nigeria (CBN) regulations, and NDPC statutory record-keeping directives.
  • Explicit Consent: Processing conducted based on your voluntary consent when registering, opting into promotional updates, or executing optional identity lookup queries.
  • Legitimate Interest: Processing necessary for audit trails, network security, payment fraud prevention, and platform reliability.

4. Data Subject Rights Under NDPA & NDPR

Under the NDPA 2023 and NDPR, as a Data Subject, you possess guaranteed statutory rights regarding your personal data:

  • Right to Access: You have the right to request confirmation of whether your data is being processed and obtain a copy of your personal records.
  • Right to Rectification: You may request the correction or update of inaccurate or incomplete personal information.
  • Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data, provided that processing is not required to comply with statutory financial retention laws (e.g., mandatory CBN financial audit trail requirements).
  • Right to Restrict or Object: You have the right to object to or restrict processing of your data under specific statutory circumstances or for direct marketing.
  • Right to Data Portability: You may request to receive your personal data in a structured, commonly used, and machine-readable format.
  • Right to Withdraw Consent: Where processing relies on consent, you may withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal.

5. Data Security, Retention & Incident Response

Arewa Smart implements robust organizational and technical security safeguards to ensure your data remains protected against unauthorized access, loss, or corruption:

  • Security Safeguards: All data transmissions are encrypted using industry-standard Transport Layer Security (TLS/SSL). Sensitive database records are protected behind firewalls, strict role-based access controls, and encrypted storage.
  • Data Retention Period: Personal data and transaction logs are retained for the duration of your active account relationship, plus a statutory period of six (6) years to comply with Nigerian financial regulations and AML audit laws.
  • Breach Notification Protocol: In the event of a security incident or data breach impacting your personal information, Arewa Smart will notify affected users and the Nigeria Data Protection Commission (NDPC) within statutory timelines mandated by the NDPA 2023.

6. Third-Party Disclosures & International Transfers

Arewa Smart maintains a strict policy: We do not sell, rent, or trade your personal data to third parties for commercial marketing purposes. Disclosures are limited to:

  • Licensed Service Partners: Regulated payment aggregators, banking partners, and telecommunication network providers strictly necessary to execute your payments and token deliveries.
  • Verification Databases: Authorized identity verification channels utilized strictly to validate NIN/BVN queries requested by you.
  • Law Enforcement & Regulatory Authorities: Competent judicial or regulatory bodies where required under court orders, statutory laws, or lawful investigations.

7. Data Protection Officer (DPO) & Regulatory Contact

If you wish to exercise any of your data subject rights, file a privacy inquiry, or submit a complaint regarding our data handling practices, please contact our Data Protection Officer:

  • Data Protection Officer (DPO): Arewa Smart Data Protection Team
  • Email: dpo@arewasmart.com / complaint@arewasmart.com
  • Phone Support: 07011604559

If you believe your data protection rights have been infringed and our DPO has not satisfactorily addressed your concern, you have the statutory right under the NDPA to lodge a complaint directly with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng or email info@ndpc.gov.ng.

8. Cookie & Local Storage Usage Policy

To deliver a seamless, secure, and personalized user experience across Arewa Smart, our website utilizes essential browser cookies and local storage tokens (`localStorage`):

  • Essential Session Cookies: Utilized to maintain secure user authentication sessions, preserve wallet PIN verification status, and protect against Cross-Site Request Forgery (CSRF) vulnerabilities.
  • Local Storage Preferences (`localStorage`): Used exclusively to store your preferred interface theme (Light or Dark mode) locally on your device for immediate page load rendering without server delays.
  • Cookie Management: You can manage or disable cookies through your browser settings. However, disabling essential cookies may impact your ability to log in or execute secure wallet transactions.