Privacy Policy

1. Introduction

iswap.ng ("we", "our", "us") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share information when you use our platform at iswap.ng. We comply with the Nigeria Data Protection Regulation (NDPR) 2019 and the Nigeria Data Protection Act (NDPA) 2023.

2. Information We Collect

We collect the following categories of personal data:

• Account Information: Full name, email address, phone number, and password (hashed).
• Device Information: IMEI number, phone brand/model, condition details, and photos of devices submitted for swap or sale.
• Transaction Data: Purchase history, swap records, payment references, delivery addresses.
• Technical Data: IP address, browser type, device type, and usage analytics.
• Communication Data: SMS messages sent via Termii for OTP verification and appointment confirmations.

3. How We Use Your Information

• To create and manage your account.
• To process swap transactions, purchases, and payments.
• To send OTP verification codes via SMS and WhatsApp (through Termii).
• To send walk-in appointment confirmations and order updates.
• To process payments securely through Paystack.
• To prevent fraud and verify device authenticity (IMEI validation).
• To improve our platform and user experience.
• To comply with legal obligations.

4. Third-Party Services

We share limited data with trusted third-party service providers:

• Paystack: Payment processing. Your email and transaction amounts are shared to facilitate secure payments. Paystack is PCI DSS compliant.
• Termii: SMS and WhatsApp messaging. Your phone number is shared to deliver OTP codes and appointment notifications.
• Resend: Email delivery for password reset and account notifications.

These providers process data in accordance with their own privacy policies and applicable data protection regulations.

5. Data Storage & Security

Your data is stored securely using encrypted databases. Passwords are hashed using bcrypt. Authentication tokens are stored in HTTP-only secure cookies. We implement industry-standard security measures including access controls, encryption in transit, and regular security reviews.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Transaction records are retained for a minimum of 6 years for compliance with Nigerian tax and financial regulations. You may request deletion of your account data by contacting us.

7. Your Rights (NDPR/NDPA)

Under the NDPR and NDPA, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (subject to legal retention requirements).
• Object to or restrict certain processing activities.
• Withdraw consent for data processing at any time.
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC).

8. Cookies

We use essential cookies for authentication and session management. These cookies are necessary for the platform to function and cannot be disabled. We do not use tracking or advertising cookies.

9. Children's Privacy

Our platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the platform after changes constitutes acceptance of the revised policy.

11. Contact Us

For privacy-related inquiries, data access requests, or complaints: