Obit Market & SafePay Privacy Notice
This pilot notice describes the intended data architecture. Final production wording will reflect signed data-sharing/processing agreements and approved providers.
Who operates what
Obit Technologies Limited operates the Obit Market and SafePay technology infrastructure. Obit Technologies Multipurpose Cooperative Society Limited manages its cooperative membership, governance and member programmes. Their precise controller/processor roles depend on the purpose for which particular personal data is processed and will be documented before production.
Data used by the marketplace
The platform may process account and membership identifiers, contact details, marketplace listings, orders, transaction references, delivery evidence, dispute records, security logs and audit records. Payment or identity providers may process additional information directly under their own terms.
Why data is processed
Data may be used to authenticate users, verify eligibility, operate listings and orders, prevent fraud, support protected transactions, resolve complaints and disputes, maintain audit/security records, comply with legal obligations and improve platform reliability.
Financial and identity data
The platform should minimize sensitive identity and financial data. SafePay does not create an Obit-held stored-value balance. Payment custody and settlement data required for live transactions will be exchanged only with the approved financial provider as necessary for the transaction.
Service providers
Approved KYC, communications, hosting, payment and security providers may process data where required. Appropriate written contracts, security review and data-protection safeguards are required before production use.
Retention and security
Records will be retained only for documented operational, dispute, audit and legal purposes. Access controls, audit logging and security safeguards are part of the production design. Production retention periods will be documented before launch.
Your rights
Applicable data-protection rights may include access, correction, objection, restriction, portability, erasure where legally available, and complaint rights. A production contact and rights-request process will be published before live launch.
Cross-border processing
Any cross-border transfer or remote processing of personal data must be assessed and documented under applicable Nigerian data-protection requirements before production.