Data Protection Notice

This notice explains how TrustCheck Nigeria Ltd. handles personal data and what rights you have. We aim to handle personal data in line with the Nigeria Data Protection Act 2023 ("NDPA") and the regulations and directions issued under it by the Nigeria Data Protection Commission ("NDPC"). Last updated: 8 October 2026.

1. Who is responsible

TrustCheck Nigeria Ltd. is the data controller for the personal data described here. Where a company or organisation instructs us under a written agreement to process data on its behalf and only on its instructions, we may act as its data processor, and that organisation is the controller for that data. Contact for all data protection matters: trustchecknigerialtd@gmail.com. Please put "Data Protection" in the subject line.

2. Data protection principles we follow

• We process personal data fairly, lawfully and transparently.
• We collect it for specific, stated purposes and do not use it in ways that do not fit those purposes.
• We collect only what is adequate, relevant and limited to what is needed.
• We take reasonable steps to keep it accurate.
• We keep it only as long as needed, as set out in our Privacy Policy.
• We protect its security, integrity and confidentiality.
• We take responsibility for showing how we comply.

3. Lawful bases

• Contract: to carry out the Assignment you request and to take steps you ask for before it starts.
• Legitimate interests: to run and protect our business, prevent misuse of our service, keep records and handle disputes, where this does not override your rights and freedoms.
• Legal obligation: to meet tax, accounting, regulatory and court requirements.
• Consent: for optional analytics and advertising cookies, and for marketing messages. You may withdraw consent at any time.
• Vital interests or public interest, only in the rare cases where the law allows them.

We do not intentionally collect sensitive personal data. Where an agreed check needs it, we process it only with a lawful basis the NDPA permits for sensitive data, and with extra care.

4. Verifying other people, and notice to those people

When a client asks us to verify a person, we collect information about that person from the client, from the person, from referees and guarantors, from official or public sources, and by physical observation. We collect only what is needed for the agreed check. We require clients to confirm that they have a lawful reason and that the person has been informed or has agreed where the law requires.

If you are the person being checked, you may ask us what personal data we hold about you and why, and you may use the rights in section 6. We may not be able to tell you who requested the check, or share the Report, where the client has not agreed or where doing so would harm another person or a legal claim, but we will explain what we can. Email trustchecknigerialtd@gmail.com.

5. Sharing and transfers

We share personal data only with the client for whom the check is made, with field representatives and associates bound by confidentiality, with service providers that help us operate (messaging, email, forms, hosting, analytics, payments and accounting), and with professional advisers, regulators, courts and authorities where the law requires. We do not sell personal data. Where data is transferred outside Nigeria, we take steps to make sure it is protected as the NDPA requires, for example by using providers with adequate safeguards or by relying on a lawful ground for the transfer.

6. Your rights

• To be told whether we process your personal data and to receive a copy
• To have inaccurate or incomplete data corrected
• To have data deleted where the law allows
• To restrict or object to processing in certain cases, including direct marketing, at any time
• To receive data you gave us in a commonly used format and ask us to transfer it (portability), where it applies
• To withdraw consent at any time, where we rely on consent
• Not to be subject to a decision based only on automated processing that significantly affects you. We do not make such decisions.
• To complain to the Nigeria Data Protection Commission

To use any right, email trustchecknigerialtd@gmail.com. We may ask you to confirm your identity first. We aim to answer within 30 days and will explain if we cannot meet a request in full.

7. Security and breaches

We use reasonable technical and organisational measures, including access controls, device protection, limited sharing, confidentiality obligations for people who handle data, and controlled storage of evidence. If a personal data breach is likely to put people's rights and freedoms at risk, we will notify the NDPC within the time the law requires (currently 72 hours of becoming aware) and tell affected people promptly where there is a high risk to them.

8. Higher-risk work

Where a type of check could significantly affect a person's rights, we consider the risks before starting, limit what we collect, and may decline the work.

9. Registration and accountability

We will meet the registration, filing and audit duties that apply to our business under the NDPA and NDPC rules. We keep a record of how we process personal data and review how we handle it.

10. Children

We do not knowingly collect personal data from children and we do not trace or locate children.

11. Changes

We may update this notice. The date at the top shows the latest version.

12. Contact and complaints

For any question or request, email trustchecknigerialtd@gmail.com or WhatsApp +234 810 673 3944. If you are not satisfied with our reply, you may complain to the Nigeria Data Protection Commission.