Privacy Policy
- Introduction
- What's Gopaddi?
- What are our privacy principles?
- Data Collection
- How Do We Use Your Information?
- What Is the Legal Basis for Using Your Personal Data?
- What Are Your Data Protection Rights?
- How Do We Share Your Information?
- How Long Do We Keep Your Information?
- How Do We Protect Your Information?
- What Permissions Do We Need?
- Where Do We Store Your Information?
- What Happens If There's a Data Breach?
- Changes to This Privacy Policy
- How to Contact Us
Introduction
In trying to provide a more personal, secure, and meaningful experience on Gopaddi, we collect and use certain information about our users when they interact with our website, mobile application, and any other tools that belong to us (referred to collectively as "Services").
This Privacy Policy details how we collect, use, retain, share and protect the information you share with us. We encourage you to read it to ensure transparency about our data practices, and so you know your rights regarding your information.
In the case of policy change or revision, we will notify you via in-app notifications or email.
By accessing or choosing to use any of our Services, you agree to be bound by this Policy.
What's Gopaddi?
Gopaddi is a socio-travel ecosystem that combines social networking (for individuals) with a travel marketplace (for suppliers) and expense management solution (for businesses). We offer various features to enhance your experience while ensuring your data is stored safely and used responsibly.
What are our privacy principles?
We value trust and transparency at Gopaddi, and this impacts the way we handle your information, just as it does how we develop our products and services. Your safety and security while using Gopaddi is important to us. We prioritize your privacy and adhere to applicable laws and regulations governing data protection. We employ robust security measures to prevent unauthorized access or data breaches and safeguard your information. We believe every user deserves to know how their information is treated and are committed to being transparent about our practices.
Data Collection
2.1 What Kind of Information Do We Collect?
Most of the personal data we collect are directly provided by our users when they register and use any of our Services. Other data are collected by recording interactions with Gopaddi. Here's a breakdown of all the data we collect:
2.2 Account & Contact Data
When creating an account on, or using, Gopaddi, you give us certain information voluntarily, which includes your name, email address, phone number, date of birth, country of residence, identity card details, and personal passwords. We do not store credit card information from our users; we rely instead on a trusted, PCI-DSS-compliant third-party payment processor for credit card processing, including for recurring payments.
2.3 Behavioural/Social Interaction Data
As you interact with our mobile application or website, we collect information about the pages you visit frequently, time spent on Gopaddi, features you interact with, your likes and shares, travel history (bookings, reservations), and other preferences. We also collect data about your interactions with other Gopaddi users and their content—likes, comments, shares.
2.4 Technical Data
We collect device information such as device type, operating system, unique device identifiers, user-agent string, browser type, language, and geolocation and accessibility features. We also collect usage data such as app usage patterns, session duration, and features accessed. We may also use cookies and tracking technologies to collect other non-personal information to provide a personalized experience.
2.5 Transactional Data
This has to do with information about payments or transactions by individual users, suppliers, or businesses.
2.6 Marketing and Communication Data
This includes data collected from your decision to withdraw from, or subscribe to, marketing materials from us or our third parties. It also includes all kinds of exchanges between you and Gopaddi through mail, calls, or any other means of communication.
2.7 Supplier-Specific Data
Please note that Suppliers may request additional data not included in the aforementioned categories in order to provide their services fully. When you choose to work with a Supplier and provide them these additional information, we do not take responsibility for whatever you share with them. We, however, vet every Supplier on the platform and ensure that they comply strictly with our Privacy Policy.
How Do We Use Your Information?
The information you provide us is used to:
Set up and manage your Gopaddi account, verify your identity, ensure security through personal passwords and account information, and provide adequate support when you make inquiries.
Customise/personalise your experience on our platform.
Communicate important updates, promotional offers, and marketing materials.
Identify areas for improvement, enhance performance, and develop new features.
Ensure compliance with legal and regulatory requirements, detect fraudulent activities, and protect users and the platform from unauthorized access or misuse.
Carry out any other purpose for which the information was collected.
What Is the Legal Basis for Using Your Personal Data?
For using your personal data, the legal basis we have are:
i. Your consent: By agreeing to us collecting and sharing your personal data—if you opt in to receive newsletters or marketing communications, for instance.
ii. Contractual obligation: In order to provide our Services to you, and perform our contractual obligations, processing your personal information is crucial.
iii. Legal obligation: We are legally required to comply with laws aimed at preventing fraud, verifying identity, and combating terrorism and money laundering. In order to meet our obligations under financial regulations like Anti-Money Laundering and Counter Terrorist Financing Laws, we must collect and securely store your personal data.
iv. Legitimate interest: We may sometimes rely on legitimate interests in our business—as permitted by law, and provided that these interests do not override your interests and fundamental rights—to process your personal information.
What Are Your Data Protection Rights?
The Nigeria Data Protection Act (2023) and Nigeria Data Protection Regulation (2019) gives you certain rights as regards the personal data we collect about you. You have the right to:
1. Confirm if your personal data is being processed and you are entitled to detailed information about the processing.
2. Request a copy of your personal data in a commonly used electronic format.
3. Request correction of inaccurate or outdated personal data.
4. Limit the extent to which your personal data is processed (collected, shared, used) under certain conditions.
5. Withdraw consent to data processing at any time, and this must be given easy, undelayed consent.
6. Object to your personal data being processed, particularly in the case of direct marketing (we typically inform users beforehand if we intend to use your data or disclose it to any third party).
Please note that the list above does not cover the entire provisions of the law. For further review, read here and here.
Data Sharing and Disclosure
We value your privacy and strive to protect your personal information. We may, however, under the following circumstances, share your personal data:
1. Third-party agents: We may share your personal data with third-party agents (such as financial service providers) who assist us with ensuring our website and mobile app remain functional and of service to you. These providers are bound by confidentiality obligations and are only permitted to use your personal data for the purposes for which they were disclosed.
2. Referral link/code: When you sign up on Gopaddi using a referral link/code, we send information about you to the user whose referral link/code you register with.
3. Legal requirements: We may disclose your personal data if required by law or in response to valid requests by public authorities (such as a court or a government agency).
4. Business transactions: In the event of a merger, acquisition, reorganization, sale of assets, or similar transaction, your personal data may be transferred as part of that transaction. We will notify you, however, via email or in-app notifications if your personal data is transferred and becomes subject to a different privacy policy.
5. Investigations: We may share your personal data if we have reason to believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including providing our services, complying with legal obligations, resolving disputes, and enforcing agreements. Retention periods vary based on the type of data and applicable laws.
Once you delete your Gopaddi account, we only retain your data for sixty (60) days before it is completely deleted.
How do we secure your data?
Gopaddi takes all necessary measures to ensure the data we collect from you are protected from loss, theft, misuse, unauthorized access or use, unlawful disclosure, alteration, or destruction.
Access to your data is restricted to authorized personnel who require it for processing or providing services, and they are bound by strict confidentiality obligations. We have adequate policies in place to ensure that the confidentiality and security of your personal data is not violated.
On specific pages where passwords and PINs are required, you are responsible for using strong passwords and for ensuring that these details remain confidential.
We conduct regular security audits and vulnerability assessments to identify and mitigate potential risks. Your data is stored in secure environments that utilize industry-standard security protocols, including firewalls and intrusion detection systems.
While we regularly monitor our systems for vulnerabilities and potential attacks, and train our employees on data privacy and security best practices, we acknowledge that no method of transmission over the internet is completely secure. Thus, we cannot guarantee absolute security of the personal data you provide us, but we make use of acceptable protocols to protect your data as best we can.
What kind of permissions do we require?
We require certain permissions to provide essential features and enhance your experience. These permissions include:
- Camera: to enable features such as capturing photos or videos within the app.
- Read and Write Storage: to save, upload, and manage files or media on your device.
- Microphone: for features like voice recording or audio input.
- Location: to provide location-based services or personalized content.
We do not access, use, or share data collected through these permissions without your knowledge or consent, except as required by law. You may grant or revoke these permissions during setup or through your device's settings at any time.
Where do we store your personal data?
Although we store data on a globally recognized and secure cloud server, our policy mandates that data collected from our Nigerian users be stored in a local data centre provided by the server provider.
What happens in the case of a data breach?
In the event of a data breach affecting your personal information, we will take immediate action to address the situation. Upon thorough investigation to determine the extent and cause of the breach, we will notify you as soon as we ascertain the nature of the breach and the information involved.
If required by governing law, we will report the breach to the Nigeria Data Protection Commission (NDPC), and cooperate with any further investigations.
Changes to Privacy Policies
In the case of changes to, or review of, our privacy policy, we will inform you via email or in-app notifications. Your privacy and trust are our top priorities, and we are dedicated to transparency in our practices.
How can you contact us?
If you have any questions or concerns about this privacy policy, please reach out to us at: hello@gopaddi.com.
Subscribe to our newsletter
Products
Personal
Business
Family
Supplier
Company
About us
Contact us
Resources
Blog
Help center
FAQs