Privacy Policy for Mega-sub Solutions

1. Introduction

1.1 Purpose and Scope

At Mega-sub Solutions, we are deeply committed to protecting the privacy and security of your personal information. As a provider of data, airtime, cable, and electricity subscription services, we understand the importance of securing the information you share with us, and we take extensive measures to safeguard it. This Privacy Policy outlines our practices regarding the collection, use, disclosure, and protection of your information when you interact with our services (the "Service"), access our applications, visit our website, or engage with our customer support team in accordance with the Nigeria Data Protection Regulation (NDPR) and other applicable laws.

1.2 Definitions

"Service" refers to the data, airtime, cable, and electricity subscription services provided by Mega-sub Solutions.

"Personal Information" means data that identifies you as an individual, including your name, phone number, email address, and payment information.

"Technical Data" includes information about your device, browser, and usage patterns.

1.3 Acceptance of Terms

By using our Service, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of information as described herein. If you disagree with any part of this policy, please refrain from using our Service.

2. Information We Collect

2.1 Personal Information

To provide you with seamless subscription services, we may collect the following personal data:

• Contact Information: Name, email address, and phone number.
• Payment Details: Bank account numbers, debit card information, or other payment methods used for subscription payments.
• Subscription Preferences: Details of your chosen services (e.g., data plans, cable packages, electricity providers).
• Utility account information: e.g., meter numbers, smart card numbers.

2.2 Automatically Collected Information

In addition to the information you provide, we may automatically collect the following:

• Device Data: IP address, device type, operating system, browser type, and mobile identifiers.
• Usage Data: Pages visited, features accessed, time spent on the platform, navigation patterns, and service usage frequency.
• Location Data: GPS coordinates or IP-based location data (if applicable).
• Transaction History: Records of your subscription purchases and payment activities.

We collect this data to improve user experience, optimize our platform, and ensure smooth service delivery.

3. How We Use Your Information

3.1 Primary Purposes

We use your information for the following primary purposes:

• Account Management: Creating and maintaining your subscription accounts.
• Identity Verification: Confirming your identity to prevent fraud.
• Transaction Processing: Facilitating payments for data, airtime, cable, and electricity subscriptions.
• Customer Support: Assisting with inquiries, complaints, or technical issues.
• Security Enhancement: Monitoring for suspicious activity and protecting against fraud.

3.2 Secondary Purposes

We may also use your data for secondary purposes, including:

• Service Improvement: Enhancing the quality and reliability of our subscription services.
• Marketing and Promotions: Offering discounts, updates, or recommendations for relevant services.
• Trend Analysis: Analysing usage patterns to better meet customer needs.

3.3 Automated Decision Making

In certain cases, we may use automated systems to detect fraud, monitor transactions, or assess risk. These processes are designed to enhance security and ensure fair service delivery.

4. Information Sharing and Disclosure

We respect your privacy and do not share your personal information with third parties except in the following situations:

4.1 Service Providers

We work with trusted third-party vendors to deliver our services, including:

• Utility Providers: For electricity and cable subscriptions.
• Telecommunication Partners: For data and airtime services.
• Payment Processors: To handle secure transactions.

These partners have restricted access to your information and are required to protect it in accordance with this Privacy Policy.

4.2 Legal Compliance and Protection

We may disclose your information to comply with legal obligations under Nigerian laws, including but not limited to the NDPR, tax reporting requirements, or fraud prevention regulations. This includes sharing information as necessary to protect our rights, users, employees, or property.

4.3 Business Transfers

In the event of a merger, acquisition, asset sale, or bankruptcy, your information may be transferred as part of that process.

We do not sell or rent your personal information to third parties.

5. Data Security

The security of your data is our top priority. We implement the following measures to protect your information:

• Technical Measures: End-to-end encryption, firewalls, intrusion detection, and regular security audits.
• Organizational Measures: Employee training, access control policies, and incident response plans.

While we take stringent precautions, no system is completely immune to risk. Please report any suspicious activity immediately.

6. Legal Basis for Processing

We process your information based on the following legal grounds:

• Contractual Necessity: To manage your subscription accounts, deliver our Service, process payments, and manage your account.
• Legal Obligations: To comply with laws and regulations related to utility payments and financial transactions.
• Legitimate Interests: To improve our services, prevent fraud, and enhance security.
• Consent-Based Processing: We rely on your consent for marketing and optional features.

7. User Data Rights

Under Nigerian law, including the Nigeria Data Protection Regulation (NDPR), you have certain rights regarding your personal data. Depending on your specific circumstances, these rights may include:

7.1 Access Rights

You have the right to request a copy of the personal data we hold about you. This allows you to confirm the accuracy and completeness of the information in our possession.

7.2 Correction Rights

If any of your personal data is inaccurate or incomplete, you have the right to request corrections. We will update your information promptly to ensure it reflects the correct details.

7.3 Deletion Rights

Under specific conditions, such as when your data is no longer necessary for the purposes for which it was collected, you may request the deletion of your personal data from our systems.

7.4 Objection and Restriction Rights

You have the right to object to certain processing activities, such as direct marketing, or to request restrictions on how we process your data. For example, you can request that we temporarily stop processing your data while a dispute is being resolved.

7.5 Data Portability

You may obtain a copy of your personal data in a structured, commonly used, and machine-readable format. This enables you to transfer your data to another service provider if desired.

7.6 Consent Withdrawal

If the processing of your data is based on your consent (e.g., for marketing communications), you have the right to withdraw your consent at any time. Withdrawing consent will not affect the lawfulness of any processing carried out before the withdrawal. To exercise any of these rights, please contact us using the details provided in Section 15 (Contact Us). We will respond to your request within the timeframe required by Nigerian law, typically within 30 days.

8. Data Retention and Deletion

8.1 Retention Periods

We retain your data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy or to comply with Nigerian legal and regulatory obligations, such as tax reporting or utility payment records.

8.2 Deletion Procedures

When you close your account or stop using our services, we will securely delete or anonymize your data unless retention is required for legitimate business or legal purposes.

8.3 Archival Policy

In certain cases, we may need to maintain your data for longer periods to comply with legal holds, fulfil regulatory requirements, ensure business continuity, or meet audit obligations under Nigerian law.

9. International Data Transfers

9.1 Transfer Mechanisms

If you access our Service from outside Nigeria, your information may be transferred to, processed, or stored in Nigeria or other countries where we operate. We ensure compliance with the NDPR by using approved transfer mechanisms, such as Standard Contractual Clauses (SCCs) or obtaining your explicit consent.

9.2 Transfer Safeguards

To protect your information during international transfers, we implement additional safeguards, including encryption in transit, data minimization, access controls, audit trails, and regular security assessments in line with Nigerian legal requirements.

10. Children's Privacy

10.1 Age Considerations

Our services, including data and airtime subscriptions, may be used by individuals of all ages, including minors. While we do not knowingly collect sensitive personal information from children without appropriate safeguards, we recognize that some of our users may be under the age of 18.

10.2 Parental Consent

For users who are minors, we encourage parents or guardians to oversee their children's use of our services. In cases where we collect personal information from minors, we will seek parental consent where required by Nigerian law or the NDPR.

10.3 Special Protections

When handling data related to minors, we apply additional safeguards, such as:

• Data Minimization: Collecting only the minimum amount of information necessary to provide the Service.
• Limited Processing: Restricting the use of minors' data to the purposes explicitly outlined in this Privacy Policy.
• Parental Controls: Offering tools and settings to help parents manage their children's accounts and usage.
• Safety Measures: Implementing content filters and monitoring mechanisms to ensure a safe and secure environment for younger users.

10.4 Compliance with NDPR

We are committed to complying with the NDPR and other applicable Nigerian laws regarding the processing of minors' data. If you believe we have inadvertently collected data from a minor without proper safeguards, please contact us immediately using the details provided in Section 17 (Contact Us).

11. Cookie and Tracking Technologies

11.1 Types of Cookies

We may use cookies and similar technologies to enhance your experience, including:

• Essential Cookies: Required for basic functionality.
• Analytics Cookies: Used to collect usage statistics.
• Marketing Cookies: Used to deliver personalized promotions.

11.2 Control Options

You can manage cookie preferences through your browser settings or our cookie consent tool.

12. Marketing and Communications

We may send you promotional messages about our services via email, SMS, or push notifications. You can opt out of these communications at any time by updating your preferences or using the unsubscribe link provided.

13. Third-Party Integrations

We integrate with third-party partners to enhance our services, such as utility providers, telecommunication companies, and payment processors. We ensure that these partners adhere to strict data protection standards.

14. Updates to This Privacy Policy

We may update this Privacy Policy periodically to align with changes in our operational practices, comply with evolving legal requirements (including the NDPR), or address technological advancements. To ensure transparency, we encourage you to review this policy regularly. When we make significant changes, we will notify you through multiple channels, including email, in-app alerts, or website announcements, in compliance with Nigerian law.