Data Privacy Policy
Last Updated: January 14, 2026
This privacy policy ("Policy") will help you understand how Nkponani Ltd uses and protects the data you provide to us when you visit and use www.nobus.io
Topics Covered:
PERSONAL DATA
Under the NDPA, personal data is defined as:
“Any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person”.
What data do we collect?
Nkponani Ltd collects the following data:
- Personal identification information (Name, email address, phone number, etc.)
How do we collect your data?
We collect data and process data when you:
- Register online or make inquiry for any of our products or services.
- Voluntarily complete a customer survey or provide feedback on any of our message boards or via email.
- Via our Cookies on our website (see our Cookies Policy also published on the website).
How will we use your data?
Nkponani Ltd collects your data so that we can:
- Process your request, manage your account
- For swift communication
- Send emails with special offers we think you might like
When Nkponani Ltd processes your request, it may send your data to, and use the resulting information from, credit reference agencies to prevent fraudulent purchases.
Sharing & Confidentiality
Nkponani Ltd will treat personal data confidentially by making sure no one have access to your password.
Data Retention
Nkponani Ltd securely stores your data at our Data Center. We will keep your personal information for 3 years after contractual agreement expires. Once this period has expired, we will delete your data.
MARKETING
- Nkponani Ltd would like to send you information about its products and services of that we think you might like, if you have agreed to receive marketing information and you may always opt out later.
- You have the right at any time to stop Nkponani Ltd from contacting you for marketing purposes.
WHAT ARE YOUR DATA PROTECTION RIGHTS?
Nkponani Ltd would like to make sure you are fully aware of all your data protection rights. Every user is entitled to the following:
Right to Access
Under the Nigeria Data Protection Act (NDPA), right allows data subjects to know whether their personal data is being processed, and to obtain a copy along with relevant details.
• Step 1: Prepare Your Request: Clearly state that you are exercising your Right of Access under the NDPA. Include identifying information (e.g., full name, email address, account ID) and specify the type of data you want to access.
Email: compliance@nkponani.com
Phone: +234 (0)8064538996
• Step 3: Acknowledge & Verification:We will acknowledge receipt. To protect your privacy, we may ask for additional verification (e.g., proof of identity).
• Step 4: Processing Your Request: We will review your request. Provided information will include: Whether we process your personal data, purpose of processing, categories of data, recipients or third parties with whom data is shared, and retention period.
• Step 5: Response Timeline: Nkponani’s responses must be provided without undue delay and within the statutory period (usually 30 days). If your request is complex, we may extend the timeline but will notify you in advance.
• Step 6: Outcome: You will receive either a copy of your personal data and details of processing, or a lawful explanation if access cannot be granted (e.g., due to overriding rights of others).
• Step 7: Escalation: If you are dissatisfied with our response, you may lodge a complaint with the Nigeria Data Protection Commission (NDPC). NDPC will investigate and enforce compliance.
Right to Rectification
Under the Nigeria Data Protection Act (NDPA), this right allows data subjects to request corrections to inaccurate or incomplete personal data held by an organization. You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete information you believe is incomplete.
How to Exercise Your Right to Rectification
• Step 1: Identify inaccurate data: Review the personal data Nkponani Ltd holds about you and note any errors.
• Step 2: Prepare your request: Clearly state which data is inaccurate or incomplete and provide updated info.
• Step 3: Submit: Send to Nkponani Ltd’s Data Protection Office via email/phone.
• Step 4: Completion: You will be notified once corrected, or given reasons if rectification cannot be made.
*If you are dissatisfied with the response, you may lodge a complaint with the Nigeria Data Protection Commission (NDPC).
Right to Erasure (“Right to be Forgotten”)
Under the Nigeria Data Protection Act (NDPA), this right allows individuals to request deletion of their personal data when certain conditions are met.
How to Exercise Your Right to Erasure
Step 1: Prepare Your Request
- Clearly state that you are exercising your Right to Erasure under the NDPA.
- Provide identifying details (e.g., full name, email address, account ID) so we can locate your data.
- Specify the data you want erased (e.g., account records, billing information, service usage logs).
Step 2: Submit Your Request to Nkponani Ltd
1. Send your request to our Data Protection Office:
a. Email: compliance@nkponani.com
b. Phone: +234 (0)8064538996
2. You may also submit through our online portal (if available).
Step 3: Verification
1. To protect your privacy, we may ask for proof of identity before processing your request.
2. This ensures that only the rightful data subject can request erasure.
Step 4: Assessment of Your Request
1. We will review your request against NDPA conditions. Erasure may be granted if:
- a. Data is no longer necessary for the purpose it was collected.
- b. You withdraw consent and there is no other legal basis for processing.
- c. Data was unlawfully processed.
- d. You object to processing and there are no overriding legitimate grounds.
2. Exceptions: We may refuse erasure if data is required for legal compliance, contractual obligations, or public interest.
Step 5: Processing & Response
1. If approved, we will erase your personal data from our systems and notify any third parties with whom data was shared.
2. If denied, we will provide a lawful explanation.
3. Response will be given without undue delay and within the statutory period (usually 30 days).
Step 6: Confirmation
1. You will receive written confirmation that your data has been erased, or an explanation if erasure was not possible.
Step 7: Escalation
2. If you are dissatisfied with our response, you may lodge a complaint with the Nigeria Data Protection Commission (NDPC).
3. NDPC can investigate and enforce compliance.
The right to restrict processing
Under the Nigeria Data Protection Act (NDPA), this right allows individuals to limit how their personal data is used in certain circumstances.
How to Exercise Your Right to Restrict Processing
Step 1: Prepare your request
1. State clearly that you are exercising your Right to Restrict Processing under the NDPA and
2. Specify the data or processing activities you want limited, including identifying details that will help us locate your data
Step 2: Submit to Nkponani Ltd
1. Send your request to our Data Protection Office:
Email: compliance@nkponani.com
Phone: +234 (0)8064538996
2. You may also submit through our online portal (if available).
Step 3: Verification
We may ask for proof of identity to ensure only the rightful data subject can request restriction.
Step 4: Assessment
We will review your request against NDPA conditions, such as when data accuracy is contested, processing is unlawful, or you object to processing.
Step 5: Implementation
If approved, we will restrict processing of your data, meaning it will be stored but not actively used except for legal or overriding reasons.
Step 6: Notification
You will receive confirmation of the restriction, and we will inform any third parties with whom your data was shared.
Step 7: Escalation
If dissatisfied, you may lodge a complaint with the Nigeria Data Protection Commission (NDPC), which can investigate and enforce compliance.
Right to Object to Processing & Automated Decision-Making
Under the Nigeria Data Protection Act (NDPA), this right empowers individuals to stop certain types of data processing, especially profiling or automated decisions that significantly affect them under certain conditions.
How to Exercise Your Right to Object to Processing / Automated Decision-Making
Step 1: Identify the Processing Activity
1. Determine which processing you want to object to (e.g., marketing emails, profiling, automated credit scoring).
2. Note how the processing affects you (e.g., unwanted marketing, unfair automated decisions).
Step 2: Prepare Your Request
1. Clearly state that you are exercising your Right to Object to Processing / Automated Decision-Making under the NDPA.
2. Provide identifying details (name, email, account ID) so we can locate your data.
3. Specify the processing activity you object to.
Step 3: Submit Your Request to Nkponani Ltd
1. Send your request to our Data Protection Office:
a. Email: compliance@nkponani.com
b. Phone: +234 (0)8064538996
c. You may also submit through our online portal (if available).
Step 4: Verification
We may request proof of identity to ensure the request is genuine and protect your privacy.
Step 5: Assessment of Your Request
1. We will review your objection.
2. If the processing is based on legitimate interests or public interest, we will assess whether our grounds override your rights.
3. For direct marketing, your objection will always be honored.
4. For automated decision-making, we will stop or provide human intervention unless required by law or contract.
Step 6: Response Timeline
1. We will respond without undue delay and within the statutory period (usually 30 days).
2. If your objection is upheld, we will stop the specified processing.
3. If denied, we will provide a lawful explanation.
Step 7: Escalation
1. If you are dissatisfied with our response, you may lodge a complaint with the Nigeria Data Protection Commission (NDPC).
2. NDPC can investigate and enforce compliance.
Right to Data Portability
Under the Nigeria Data Protection Act (NDPA), every individual whose personal data is processed (called a data subject) has the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions. This right allows individuals to obtain and reuse their personal data across different services in a safe, structured, and machine-readable format.
How to exercise your Right
Here’s a clear step-by-step guide for customers on how to exercise their Right to Data Portability under the Nigeria Data Protection Act (NDPA).
Step 1: Submit a Request
1. Begin by formally requesting data portability from Nkponani Ltd.
2. Write to our Data Protection Office via
a. Email: compliance@nkponani.com
b. Phone: +234 (0)8064538996
3. Clearly state that you are exercising your Right to Data Portability under the NDPA
4. Include your full name, contact details, and account information
Step 2: Verify Your Identity
1. We must confirm your identity to protect your data.
2. Provide valid identification (e.g., government-issued ID)
3. Answer any verification questions if required
4. This ensures only authorized individuals access the data
Step 3: Specify the Data
1. Indicate which personal data you want transferred.
2. List categories of data (e.g., account details, usage logs)
3. Clarify if you want all data or specific subsets
4. Mention the format you prefer (e.g., CSV, JSON)
Step 4: Choose the Recipient
1. You may request that your data be sent directly to another service provider.
2. Provide the recipient’s name and contact details
3. Ensure the recipient system can accept structured, machine-readable data
4. Alternatively, request the data be sent to you
Step 5: Receive Your Data
1. Nkponani Ltd will process your request within NDPA timelines.
2. Data will be provided in a structured, commonly used, machine-readable format
3. You will be notified once the transfer is complete
4. If delays occur, you will be informed with reasons
Step 6: Escalate to NDPC, if Necessary for Regulatory oversight
1. If you are unsatisfied, you can escalate to the NDPC.
2. Contact the Nigeria Data Protection Commission (NDPC)
3. Provide details of your request and Nkponani Ltd’s response
4. NDPC will investigate and enforce compliance if needed
Right to Lodge a Complaint with NDPC
Under the Nigeria Data Protection Act (NDPA), every individual whose personal data is processed (called a data subject) has the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC)if they believe their data protection rights have been violated. Here’s what that right means in practice:
Who can complain?
Any data subject — meaning anyone whose personal data is collected, stored, or processed by an organization in Nigeria.
Grounds for complaint
- Unlawful processing of personal data
- Failure to obtain valid consent for data use
- Breach of data security leading to unauthorized access or disclosure
- Denial of rights such as access, correction, or deletion of personal data
How to lodge a complaint
If you believe Nkponani Ltd has mishandled your personal data or violated your rights under the Nigeria Data Protection Act (NDPA), you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).
Step 1: Identify the Issue
Clearly describe the concern and gather evidence such as emails or screenshots.
Step 2: Contact Nkponani Ltd First
Reach out to compliance@nkponani.com. We will investigate promptly.
Step 3: Escalate to the NDPC
If unsatisfied, submit a written complaint to NDPC via their official portal or offices.
Step 4: NDPC Investigation
The NDPC will review your complaint and investigate the organization to determine if a violation occurred.
Step 5: Outcome & Remedies
NDPC may order corrective measures, impose sanctions, or direct Nkponani Ltd to comply with NDPA obligations.
Step 6: Protection of Your Rights
Lodging a complaint will not result in discrimination. You retain all rights including access and correction.
Right to exercise any of these Rights
If you would like to exercise any of these rights, please contact us via:
Changes and Review of our privacy policy
Nkponani Ltd keeps its privacy policy under regular review and places any updates on its web page. This privacy policy is scheduled to be reviewed yearly.
DATA PROTECTION REVIEW MECHANISM
Our compliance with the Nigerian Data Protection Act (NDPA) is subject to review annually where potential gaps and weaknesses in the organization’s processes are identified and if any, remedial actions are provided.
Contact Us
If you have any questions about Nkponani Ltd Privacy Policy, the data we hold for you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us via:
Office
Nkponani Ltd – Data Protection Office
D78/20 Ikwo Street Federal Housing Estate,
Trans-Ekulu, Enugu, Nigeria
Connect
Tel: 08064538996
Policy Review: This policy is reviewed annually by the DPO to reflect changes in legislation.