OGRA Solutions is committed to fair, lawful and transparent handling of personal data in line with the Nigeria Data Protection Act 2023 and other applicable requirements.
Who this policy applies to
This policy applies to website visitors, prospective customers, subscribers, organization administrators and authorized users. For account, billing and direct customer relationship information, OGRA Solutions acts as a data controller. Where an organization uses our platform to process personal data about its own staff, customers, students, patients, members or other people, that organization generally decides the purpose of processing and OGRA Solutions processes the data to provide the contracted service.
Information we collect
Depending on how you interact with us, we may collect:
- name, organization name, email address, phone number and job role;
- account credentials and authorized-user information;
- subscription, invoice, payment status and transaction reference information;
- support requests, messages, feedback and onboarding details;
- organization content and records uploaded to the service;
- device, browser, IP address, access time, security logs and basic usage information.
Payment card or bank details are collected and processed by Paystack or another disclosed payment provider. OGRA Solutions does not store complete card details.
Why we use information
We process personal data to provide and secure accounts; set up and deliver services; process subscriptions and confirm payments; communicate about support, renewals and important service changes; prevent fraud and misuse; improve performance; keep records; and comply with legal obligations.
Our lawful bases may include performance of a contract, compliance with law, legitimate interests in operating and securing the service, and consent where consent is appropriate.
Cookies and website data
Our website and hosting providers may use essential cookies or similar technology required for security and basic operation. If we introduce non-essential analytics or advertising cookies, we will provide an appropriate notice or consent choice where required.
How we share information
We do not sell personal data. We may share limited information with service providers that help us operate the service, such as Paystack for payment processing, hosting and cloud infrastructure providers, communication tools and professional advisers. These providers receive only information needed for their role and are expected to protect it.
We may also disclose information when required by law, to protect rights or safety, to investigate fraud or security issues, or as part of a business reorganization subject to appropriate safeguards.
International transfers
Some service providers may process data outside Nigeria. Where this happens, we take reasonable steps to use providers and arrangements that offer an appropriate level of protection and comply with applicable transfer requirements.
Retention
We retain personal data only for as long as reasonably needed to provide the service, maintain required business and financial records, resolve disputes, enforce agreements and meet legal obligations. Retention periods vary by the type of data. When data is no longer needed, we delete, anonymize or securely isolate it.
Security
We use reasonable administrative, organizational and technical measures designed to protect personal data from loss, misuse and unauthorized access, alteration or disclosure. No online system is completely risk-free, so subscribers must also use strong credentials, limit user permissions and notify us promptly of suspected compromise.
Your rights
Subject to applicable law, you may have the right to be informed; request access to or correction of your personal data; object to or restrict certain processing; request deletion or portability; withdraw consent without affecting earlier lawful processing; and lodge a complaint with the Nigeria Data Protection Commission.
To make a request, email gideonandrew010@gmail.com. We may need to verify your identity. If your information is controlled by an organization using our platform, we may direct your request to that organization.
Children’s information
Our subscriptions are offered to organizations and adults authorized to represent them. We do not knowingly invite children to purchase services directly. Organizations using the platform for children’s information are responsible for having a valid legal basis and providing all required notices and safeguards.
Changes and contact
We may update this policy when our practices, services or legal obligations change. We will publish the revised policy with its updated date. For privacy questions or requests, contact OGRA Solutions at gideonandrew010@gmail.com or 08168918310.