Core Privacy Commitments
- ✓We only aggregate public gazettes, open-source records, and CAMA registries.
- ✓User payment data is processed through PCI-DSS accredited gateways.
- ✓Statutory data subject rights honored under NDPA 2023 Section 34.
- ✓Database encryption at rest and in transit via TLS 1.3.
1. Regulatory Framework & Data Controller
This Privacy Policy governs the collection, processing, and disclosure of personal data by NigerianBackgroundCheck (“NBC”, “we”, “us”, or “our”) through our public web portal (https://nigerianbackgroundcheck.com) and API services.
Our data processing operations are governed by the Nigeria Data Protection Act (NDPA) 2023 and the Nigeria Data Protection Regulation (NDPR), overseen by the Nigeria Data Protection Commission (NDPC). NBC acts as both a Data Controller and Data Processor in accordance with statutory requirements.
2. Categories of Information We Process
Depending on whether you are an end-user of our portal or a subject of public records, we process the following categories of information:
A. Account & Billing Data
Full name, email address, telephone number, account type (Individual or Corporate/Organization), occupation, and transaction reference records. For corporate accounts, we collect Corporate Affairs Commission (CAC) RC/BN numbers and authorized representative roles.
B. Public OSINT & Intelligence Archives
Publicly published law enforcement bulletins, police gazettes, EFCC/ICPC wanted releases, court judgments from Federal and State High Courts, and Corporate Affairs Commission directorship registries accessible under the Companies and Allied Matters Act (CAMA 2020).
C. Optional Identity Verification (NIN / vNIN)
When optional verification is requested, Virtual National Identification Numbers (vNIN) or raw NINs provided with explicit consent are tokenized and encrypted. We do not store plaintext biometric data.
3. Lawful Basis for Processing
Under Section 25 of the NDPA 2023, we rely on the following lawful bases:
- Legitimate Interests: Conducting legitimate due diligence, pre-employment vetting, fraud prevention, skip-tracing, and investigative research using public domain records.
- Contractual Necessity: Delivering ordered verification reports and maintaining customer account subscriptions.
- Consent: Explicit user consent obtained prior to processing optional identity credentials or dispatching verified clearance notifications.
4. Data Security, Row Level Security & Storage
We implement industry-grade technical and organizational safeguards:
- PostgreSQL Row Level Security (RLS): User profiles and search history are isolated at the database layer. No user can read or modify another user’s clearance records.
- Cryptographic Protection: All passwords are salted and hashed using bcrypt (10 rounds). Plaintext passwords are never stored.
- Network Security: All web traffic is strictly encrypted using TLS 1.3 / HTTPS. Internal API communication requires authenticated bearer tokens.
5. Data Subject Rights (NDPA Section 34)
As a data subject in Nigeria or interacting with Nigerian records, you are entitled to exercise statutory rights:
Request correction of inaccurate or outdated personal records in our index.
Request removal of records where statutory retention requirements have lapsed.
Object to the processing of your data for direct marketing or profiling.
Lodge an inquiry with the Nigeria Data Protection Commission (NDPC).
6. Permitted & Prohibited Use of Records
NBC reports are provided for due diligence, risk management, and identity verification. You agree NOT to use reports:
- To stalk, harass, blackmail, or intimidate any individual.
- For identity theft or unauthorized surveillance.
- In violation of any state or federal law of the Federal Republic of Nigeria.
7. Contact Our Data Protection Officer (DPO)
For privacy inquiries, rights enforcement, or opt-out requests, contact our legal compliance team:
Email: privacy@nigerianbackgroundcheck.com
Customer Care: 08141592397
Jurisdiction: Federal Republic of Nigeria