Privacy Policy | KorrectNG

KorrectNG ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. This policy complies with the Nigeria Data Protection Regulation (NDPR) 2019.

1. Information We Collect

1.1 Information You Provide

We collect information you provide directly, including:

Account Information: Name, email address, phone number, password
Profile Information: Business name, trade, location, work experience, photos
Verification Documents: Government-issued ID, trade credentials, work photos
Reviews and Feedback: Ratings, review text, responses
Communications: Messages sent through the platform, support inquiries
Payment Information: Transaction records (card details are processed by Paystack)

1.2 Automatically Collected Information

When you use our Platform, we automatically collect:

Device Information: Device type, operating system, browser type
Usage Data: Pages visited, search queries, click patterns
Location Data: General location based on IP address
Log Data: IP address, access times, referring URLs

1.3 Information from Third Parties

We may receive information from:

ID verification service providers (for artisan verification)
Payment processors (Paystack)
Analytics providers

2. How We Use Your Information

We use collected information to:

Provide, maintain, and improve the Platform
Process transactions and send related information
Verify artisan identities and credentials
Connect customers with suitable artisans
Send notifications about your account, updates, and promotions
Respond to comments, questions, and support requests
Monitor and analyze usage patterns and trends
Detect, investigate, and prevent fraudulent transactions
Comply with legal obligations

3. Legal Basis for Processing (NDPR Compliance)

We process your personal data based on:

Consent: You have given clear consent for specific purposes
Contract: Processing is necessary for the services you requested
Legal Obligation: Processing is required by Nigerian law
Legitimate Interests: Processing is necessary for our legitimate business interests

4. Information Sharing and Disclosure

We may share your information with:

4.1 Other Users

Artisan profiles are visible to customers searching for services
Reviews and ratings are publicly visible
Contact information is shared when a connection is made

4.2 Service Providers

We share data with third-party service providers who assist in:

Payment processing (Paystack)
ID verification (verification partners)
Cloud hosting and storage (Cloudinary, MongoDB Atlas)
Email delivery
Analytics

4.3 Legal Requirements

We may disclose information when required by law or to:

Comply with legal processes
Protect our rights and property
Prevent fraud or illegal activities
Protect user safety

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of that transaction.

5. Data Retention

We retain your information for as long as:

Your account is active
Needed to provide services to you
Required by law or for legitimate business purposes
Necessary to resolve disputes or enforce agreements

After account deletion, we may retain certain information in anonymized form for analytics and to comply with legal obligations.

6. Your Rights Under NDPR

You have the right to:

Access: Request a copy of your personal data
Rectification: Request correction of inaccurate data
Erasure: Request deletion of your personal data
Restriction: Request limitation of data processing
Portability: Receive your data in a structured format
Object: Object to processing based on legitimate interests
Withdraw Consent: Withdraw previously given consent

To exercise these rights, contact us at privacy@korrectng.com. We will respond within 30 days.

7. Data Security

We implement appropriate security measures including:

Encryption of data in transit (HTTPS/TLS)
Secure password hashing (bcrypt)
Regular security assessments
Access controls and authentication
Secure cloud infrastructure

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

8. International Data Transfers

Your information may be transferred to and processed in countries outside Nigeria where our service providers are located. We ensure appropriate safeguards are in place to protect your data in accordance with NDPR requirements.

9. Children's Privacy

KorrectNG is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If we discover we have collected information from a child, we will delete it promptly.

10. Cookies and Tracking Technologies

We use cookies and similar technologies to:

Remember your preferences
Understand how you use the Platform
Improve your experience
Analyze traffic and trends

You can control cookies through your browser settings, though some features may not work properly if cookies are disabled.

11. Third-Party Links

The Platform may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We encourage you to read their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or Platform notification. The "Last updated" date at the top indicates when the policy was last revised.

13. Contact Us

For privacy-related questions or concerns, contact our Data Protection Officer:

Email: privacy@korrectng.com
Address: Lagos, Nigeria

14. Regulatory Authority

If you are unsatisfied with our response to your privacy concerns, you may lodge a complaint with the National Information Technology Development Agency (NITDA):

Website: www.nitda.gov.ng
Email: info@nitda.gov.ng

By using KorrectNG, you acknowledge that you have read and understood this Privacy Policy.