Vezeti Services Limited
Effective Date: 7th October 2026
1. Introduction
Vezeti Services Limited ("Company", "we", "our", or "us") is committed to protecting the privacy, confidentiality, integrity, and security of personal data entrusted to us by our customers, employees, contractors, business partners, website visitors, and other stakeholders.
As a technology-driven organization, we recognize the importance of responsible data processing and are committed to complying with the Nigeria Data Protection Act (NDP Act) 2023, the General Application and Implementation Directive (GAID) 2025, and other applicable data protection, cybersecurity, and privacy regulations.
This Privacy Policy explains how we collect, use, process, store, transfer, disclose, retain, and protect personal data when individuals interact with our products, services, websites, mobile applications, cloud platforms, software solutions, and business operations.
2. Scope
This Privacy Policy applies to all personal data collected and processed by Vezeti Services Limited through:
- Software development and deployment services
- Artificial Intelligence (AI) solutions
- Software-as-a-Service (SaaS) platforms
- Cloud-based services and applications
- Websites and web portals
- Mobile applications
- Customer onboarding and account management
- Technical support and customer service
- Recruitment and employment processes
- Vendor and partner management
- Marketing and communication activities
- Cybersecurity monitoring and business operations
This Policy applies to:
- Customers
- Prospective customers
- Website visitors
- Mobile application users
- Employees
- Job applicants
- Contractors
- Vendors
- Service providers
- Business partners
- Any individual whose personal data is processed by the Company
3. Personal Data We Collect
Depending on the services provided and the nature of our engagement, we may collect and process the following categories of personal data:
3.1 Personal Identification Information
- Full name
- Date of birth
- Gender (where applicable)
- National Identification Number (NIN) where required
- Passport photograph where applicable
- Signature where applicable
3.2 Contact Information
- Email address
- Telephone number
- Residential address
- Business address
- Contact preferences
3.3 Account and Authentication Information
- Username
- Password credentials (encrypted)
- Login records
- Account identifiers
- Multi-Factor Authentication details
- User preferences
3.4 Technical and Device Information
- IP address
- Device identifiers
- Browser information
- Operating system information
- Device configuration
- Log files
- Application usage information
- Cookies and similar technologies
3.5 Business and Professional Information
- Company name
- Job title
- Business contact details
- Professional qualifications
- Corporate profile information
3.6 Transaction and Service Information
- Subscription information
- Service requests
- Product usage information
- Payment records
- Customer support interactions
- Service history
3.7 Recruitment and Employment Information
- Curriculum Vitae (CV)
- Educational qualifications
- Employment history
- References
- Background verification information where applicable
4. Sources of Personal Data
We may collect personal data directly from:
- Individuals who interact with our services
- Website and application users
- Customer onboarding processes
- Employment applications
- Customer support interactions
- Business correspondence
- Vendors and partners
We may also receive personal data from:
- Third-party service providers
- Verification providers
- Regulatory authorities
- Publicly available sources
- Business partners
5. Legal Basis for Processing
We process personal data on one or more of the following lawful bases:
5.1 Consent
Where the data subject has provided consent for specific processing activities.
5.2 Contractual Necessity
Where processing is necessary to perform a contract or provide requested services.
5.3 Legal Obligation
Where processing is required to comply with applicable laws, regulations, court orders, or regulatory directives.
5.4 Legitimate Interests
Where processing is necessary for legitimate business interests and does not override the rights and freedoms of data subjects.
5.5 Vital Interests
Where processing is necessary to protect the life, health, or safety of an individual.
5.6 Public Interest
Where processing is required by competent authorities in the public interest.
6. Purpose of Data Processing
We process personal data for the following purposes:
Service Delivery
- Providing software solutions
- Managing customer accounts
- Delivering cloud services
- Providing AI-powered services
- Processing transactions
- Managing subscriptions
Customer Support
- Responding to enquiries
- Resolving technical issues
- Managing service requests
- Customer relationship management
Product Development
- Software development
- Research and innovation
- Product improvement
- Service optimization
- User experience enhancement
Security and Risk Management
- Identity verification
- Cybersecurity monitoring
- Fraud prevention
- Incident response
- Access management
- Threat detection
Compliance and Governance
- Regulatory compliance
- Internal audits
- Risk management
- Legal obligations
- Records management
Marketing and Communications
- Service announcements
- Product updates
- Customer engagement
- Marketing communications (where consent is obtained)
Human Resource Administration
- Recruitment
- Employee onboarding
- Payroll administration
- Performance management
- Training and development
7. Data Sharing and Disclosure
We may share personal data with:
- Regulatory authorities
- Law enforcement agencies
- Cloud service providers
- Payment processors
- Technology partners
- Cybersecurity providers
- Professional advisers
- Auditors and consultants
- Vendors and contractors
- Business partners
We will only share personal data where there is a lawful basis for doing so.
We do not sell or rent personal data to third parties.
8. International Data Transfers
Where personal data is transferred outside Nigeria, we will ensure that appropriate safeguards are implemented in accordance with the NDP Act, 2023 and GAID, 2025.
Such safeguards may include:
- Standard Contractual Clauses (SCCs)
- Adequacy decisions
- Data Transfer Agreements
- Encryption and access controls
- Vendor due diligence assessments
9. Data Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, destruction, or loss.
These measures may include:
- Encryption
- Access controls
- Multi-Factor Authentication
- Secure backups
- Network security controls
- Vulnerability management
- Security monitoring
- Incident response procedures
- Staff awareness training
10. Data Retention
Personal data will only be retained for as long as necessary to fulfil the purposes for which it was collected or as required by applicable laws and regulations.
Retention periods may vary depending on:
- Business requirements
- Contractual obligations
- Regulatory requirements
- Legal proceedings
- Security and audit requirements
Upon expiration of the applicable retention period, personal data will be securely deleted, anonymized, or archived.
11. Cookies and Tracking Technologies
Our websites and applications may use:
- Cookies
- Web beacons
- Pixels
- Analytics technologies
- Session identifiers
These technologies help us:
- Improve user experience
- Monitor platform performance
- Understand usage patterns
- Enhance security
- Deliver relevant content
Users may manage cookie preferences through their browser settings.
12. Data Subject Rights
Under the Nigeria Data Protection Act, 2023, data subjects have the right to:
- Be informed about processing activities
- Access personal data
- Request rectification of inaccurate information
- Request erasure of personal data
- Restrict processing
- Object to processing
- Request data portability
- Withdraw consent
- Lodge complaints with the Nigeria Data Protection Commission (NDPC)
Requests may be submitted through the contact details provided below.
13. Personal Data Breach Management
In the event of a personal data breach, the Company will:
- Investigate the incident
- Contain and mitigate risks
- Maintain breach records
- Notify the Nigeria Data Protection Commission (NDPC) where required
- Notify affected individuals where applicable
- Implement corrective actions to prevent recurrence
Where notification is required, it shall be made within the timelines prescribed under the NDP Act, 2023.
14. Children's Privacy
Our services are not intentionally directed at children unless specifically stated.
Where we knowingly process personal data relating to children or vulnerable individuals, we will implement additional safeguards and obtain appropriate consent where required by law.
15. Contact Information
For questions, complaints, requests, or concerns regarding this Privacy Policy or the processing of personal data, please contact:
Data Protection Officer (DPO)
VEZETI SERVICES LIMITED
Address: 1, Vezeti Drive, Seaside Estate, Badore, Ajah, Lagos
Email: admin@vezeti.com
Phone: 0201 888 1000
Website: www.vezeti.net
16. Policy Review and Updates
This Privacy Policy shall be reviewed periodically and updated where necessary to reflect changes in legal requirements, regulatory expectations, business operations, technologies, and industry best practices.
Updated versions will be published on our website and communicated through appropriate channels where necessary.
By continuing to use our services, websites, applications, and platforms, you acknowledge and accept the terms of this Privacy Policy.
