Privacy Policy

1. Introduction & Regulatory Framework

Briz-In ("we", "our", or "us") is dedicated to safeguarding your privacy and ensuring your personal data is handled responsibly. This Privacy Policy governs your use of the Briz-In vehicle rental marketplace, dispatch radar, transit park directories, and related digital services across Nigeria. We process personal data in strict compliance with the Nigeria Data Protection Act (NDPA) 2023 and the Nigeria Data Protection Commission (NDPC) guidelines.

2. Information We Collect

To provide reliable transport coordination, we collect the following categories of data:

• Account & Contact Data: Full name, telephone number (verified via SMS OTP), and optional email address.
• Vendor & Driver KYC Documentation: National Identification Number (NIN), Bank Verification Number (BVN) confirmation status, and government-issued driver's licenses for commercial operators.
• Listing & Fleet Information: Vehicle registration numbers, insurance certificates, photos, specifications, and operational service locations (e.g., Warri, Effurun, Ughelli, Lagos).
• Transaction & Payment Records: Billing references and payment transaction IDs processed securely via our CBN-licensed payment partners. We do not store raw card PANs or CVVs on our servers.
• Technical & Log Data: Device browser, IP address, coarse geolocation, operating system, and system event timestamps.

3. Third-Party Service Providers & Data Processors

We partner with audited third-party service providers to deliver our core capabilities under strict confidentiality:

• Payment Processing (Paystack): Financial transactions, KYC fee processing, and vendor subscription billings are handled by Paystack Payments Limited, an entity regulated by the Central Bank of Nigeria (CBN).
• Identity Verification (Prembly IdentityPass): Vendor identity credentials (NIN and government IDs) are authenticated securely through Prembly's authorized verification infrastructure.
• SMS Delivery (KudiSMS): One-Time Password (OTP) verification messages and critical security notifications are delivered through telecommunication gateways.
• Cloud Infrastructure: Encrypted data storage and media caching powered by secure cloud data centers and Cloudflare edge networks.

4. Cookies & Local Storage Technologies

Briz-In uses cookies and web storage (such as localStorage) to maintain active user login sessions, remember theme preferences (light/dark mode), preserve location selections, and generate anonymous marketplace usage metrics. You may choose to manage or decline non-essential cookies via our on-screen Cookie Consent Banner at any time.

5. Data Retention & Erasure

We retain personal data only as long as necessary to fulfill marketplace transactions, maintain audit logs, resolve commercial disputes, and comply with Nigerian legal and tax recordkeeping obligations. Users may request permanent account closure and data deletion by contacting our privacy officer. Verified KYC records are archived according to applicable statutory audit requirements.

6. Marketing Emails & Newsletter

We send marketing emails (news and updates about Briz-In) only to people who have asked for them. You can ask in two ways: by subscribing with your email address using the form in our website footer, or, if you have an account, by ticking the optional box on your profile page. The box is never ticked for you, and having an account or giving us your email address does not by itself sign you up.

• What we keep: your email address, when and how you signed up (website footer or profile page), and whether you have unsubscribed.
• Unsubscribing: every marketing email contains an unsubscribe link, and you can also untick the box on your profile. It takes effect immediately and we will not email you again unless you sign up again.
• Service messages are different: emails about your account, applications, jobs and subscriptions are not marketing. We send those regardless, because you need them to use Briz-In.
• Sharing: we use an email delivery provider to send these messages on our behalf. We do not sell your email address.

7. Your Rights Under the NDPA

Under the Nigeria Data Protection Act, you possess clear statutory rights regarding your personal information:

• The right to request access to the personal data we hold about you.
• The right to rectify inaccurate, incomplete, or outdated personal details.
• The right to request erasure of your data ("Right to be Forgotten"), subject to legal exemptions.
• The right to restrict or object to the processing of your data for direct marketing purposes.
• The right to data portability to another provider.

8. Data Security & Incident Protocols

We deploy robust administrative, physical, and technical controls—including end-to-end HTTPS/TLS encryption, salted password hashing (Argon2/Bcrypt), role-based database permissions, and rate-limiting guards—to prevent unauthorized access, alteration, or disclosure of your personal data.

9. Contact Our Data Protection Officer

If you have questions, inquiries, or wish to exercise your data protection rights under the NDPA, please reach out to our privacy desk: