Privacy Policy

1. Introduction

Nayden24 is a digital marketplace that helps customers connect with artisans, contractors, building-material vendors, suppliers, and logistics providers. The platform may support account registration, provider verification, product and service listings, project requests, quotations, messaging, orders, payment collection, provider settlement, delivery coordination, customer support, and related services.

This Privacy Policy explains how Nayden 24 LTD (referred to as “Nayden24”, “we”, “us”, or “our”) collects, uses, discloses, stores, and protects personal data when you visit https://www.nayden24.com, create or use an account, contact us, list or purchase products or services, arrange delivery, make or receive payments through the platform, or otherwise interact with us.

Please read this Policy together with our Terms and Conditions, Acceptable Use Policy, and any payment, transaction, or service-specific notices that apply to you. Where we provide a separate notice for a particular activity, that notice should be read alongside this Policy.

2. Who We Are and When This Policy Applies

Data controller: Nayden 24 LTD, company registration number 9369364, registered at 8, Ajisafe Street, Ikeja GRA, Lagos, Nigeria.

Website: https://www.nayden24.com

Privacy and data-protection contact: info@naydenfacilitiesmgmt.com

This Policy applies to customers, artisans, contractors, vendors, suppliers, logistics providers, business representatives, website visitors, people who contact our support team, and other individuals whose personal data we process in connection with Nayden24.

For the personal data we collect and use to operate our own website, marketplace, accounts, customer support, verification, and transaction processes, Nayden24 generally determines the purposes and means of processing and acts as a data controller. Depending on the activity, a payment provider, bank, vendor, logistics provider, or another organisation may act as a separate controller or as a processor. Their own privacy notices may also apply to their processing.

This Policy is intended to operate in accordance with the Nigeria Data Protection Act 2023 (“NDPA”), the Nigeria Data Protection Commission’s applicable directives and guidance, including the General Application and Implementation Directive 2025 where applicable, and other laws that apply to the processing concerned.

3. Personal Data We May Collect

The information we collect depends on how you use Nayden24. We aim to collect data that is relevant and reasonably necessary for the particular purpose.

3.1 Identity and account information

This may include your name, username, account identifier, date of birth where needed to establish eligibility, profile photograph, account type, login credentials or authentication data, account status, and identity-verification information.

3.2 Contact and location information

This may include your email address, telephone number, business address, delivery address, project or work-site address, preferred contact method, service area, and location information you provide for a transaction or use of a platform feature. We do not intend to collect precise device location continuously unless a feature requires it, it is enabled, and the necessary notice and legal basis are in place.

3.3 Verification and business information

For customers or providers where verification is required, this may include identity documents, photographs, business registration information, tax or business identifiers, professional qualifications, licences, certifications, references, business ownership or representative details, and information needed to verify the legitimacy of an account or service. Please submit these documents only through channels designated for verification and avoid sending unnecessary sensitive information by ordinary email.

3.4 Marketplace, project, and service information

This may include service categories, skills, product listings, quotations, requests for proposals, project descriptions, measurements, building-material requirements, photographs, specifications, schedules, site access instructions, order details, delivery instructions, reviews, ratings, and information exchanged between customers and providers to perform a transaction.

Please avoid including sensitive personal information in project descriptions or photographs unless it is genuinely necessary and you have a lawful basis to provide it.

3.5 Transaction, payment, and settlement information

When a customer pays for a transaction through Nayden24 and we arrange settlement to a relevant provider, we may process information such as the transaction reference, amount, currency, fees, payment status, payer or recipient details, invoice and receipt details, refund or dispute information, and the bank or settlement details needed for an authorised payout.

Payment card details, PINs, passwords, and secret authentication codes should be entered only through the applicable authorised payment interface and must not be sent to our support team. Where a third-party payment provider processes a payment, that provider may collect and process payment credentials under its own terms. We do not intend to collect or store full payment-card credentials or PINs directly. The precise data handled may depend on the payment method and technical setup used for a transaction.

3.6 Communications and support records

We may process emails, messages, support tickets, complaints, dispute submissions, feedback, survey responses, and records of communications with Nayden24. Where communications are available to us through platform features, we may review relevant parts to investigate reported misconduct, resolve transaction issues, maintain security, or provide support.

3.7 Technical and usage information

When you access the website or use platform features, we or our service providers may collect technical information such as IP address, browser and device type, operating system, referring pages, pages viewed, dates and times of access, general interaction events, error logs, security events, and cookie or similar technology identifiers. The information actually collected depends on the website configuration and your cookie or device settings.

3.8 Information from other sources

Where lawful and relevant, we may receive information from payment service providers, banks, identity or business verification services, delivery partners, other users involved in a transaction, publicly available company or professional registers, security and fraud-prevention services, and regulators or public authorities.

3.9 Sensitive personal data

We do not ask users to provide sensitive personal data unless it is necessary for a specified and lawful purpose. If sensitive personal data is required, we will process it only where an appropriate legal basis and any additional conditions required by law are satisfied. Please do not upload health information, biometric information, or other sensitive data into ordinary messages or listings unless we specifically request it through an appropriate process.

4. How We Collect Personal Data

We may collect personal data:

• Directly from you when you register, complete a profile, submit verification documents, create a listing, request a service, place an order, make a payment, provide settlement details, contact support, or exercise a privacy right.
• Through your use of the website and platform features, including server logs, cookies, and similar technologies where deployed.
• From another transaction participant when the information is reasonably necessary to arrange or complete the relevant transaction, address a dispute, or protect legitimate interests.
• From payment processors, banks, verification providers, logistics partners, fraud-prevention services, business registers, or public authorities where lawful.
• From information you make publicly available, where relevant to verify a business, assess a report, or protect the platform and its users.

If you provide personal data about another person, you must have the authority or lawful basis to do so and, where required, ensure that the person receives appropriate information about the processing.

5. Why We Use Personal Data and Our Legal Bases

We process personal data only for specified and legitimate purposes and where an appropriate legal basis applies. Depending on the context, the legal basis may be:

• Contract or steps requested before a contract: to create and manage accounts, provide platform features, arrange transactions, communicate with transaction participants, process payments, settle providers, and provide customer support.
• Legal obligation: to meet applicable legal, tax, accounting, regulatory, record-keeping, court, or lawful authority requirements.
• Legitimate interests: to protect account and platform security, prevent fraud and abuse, investigate complaints, maintain records, improve service reliability, and establish or defend legal claims, where those interests are not overridden by your rights and freedoms.
• Consent: for processing where consent is legally required, including certain optional cookies, marketing communications, or other optional uses. You may withdraw consent at any time; withdrawal does not affect processing lawfully carried out before withdrawal.
• Vital interests or public interest: only where the applicable legal requirements permit or require such processing.

Our purposes may include:

1. Creating, authenticating, maintaining, and securing user accounts.

2. Verifying users, businesses, provider credentials, and documents where relevant to platform access or a transaction.

3. Displaying provider profiles, product listings, service details, and customer requests.

4. Matching customers with relevant providers and enabling authorised communication.

5. Managing orders, quotations, invoices, deliveries, cancellations, refunds, disputes, and service records.

6. Collecting customer payments and arranging eligible provider settlements using the applicable payment and settlement process.

7. Detecting, investigating, and preventing fraud, unauthorised payments, impersonation, abuse, cyberattacks, and other prohibited activity.

8. Responding to questions, complaints, privacy requests, and other support needs.

9. Maintaining business, accounting, audit, and transaction records.

10. Understanding platform performance, diagnosing errors, and improving usability, reliability, accessibility, and features.

11. Sending service announcements, transaction updates, verification requests, security alerts, and other operational communications.

12. Sending marketing messages where permitted by law and your preferences.

13. Exercising or defending legal claims, enforcing applicable terms, and responding to lawful requests from competent authorities.

Where we rely on legitimate interests, we consider the purpose of the processing, its necessity, the likely impact on you, and safeguards that can protect your rights. We will not use personal data for a materially unrelated purpose without a lawful basis and any notice required by law.

6. How We Share Personal Data

We do not make personal data public merely because you use Nayden24. We may share the minimum information reasonably necessary in the following circumstances:

6.1 With transaction participants

To enable a transaction, customers and providers may need to see relevant information about one another. For example, a provider may need the customer's name, contact details, project requirements, delivery address, and order details; a customer may need a provider's business name, service profile, contact or delivery information, and relevant verification status. We aim not to expose identity documents, bank details, or other restricted verification information to transaction participants unless the disclosure is necessary, authorised, and lawful.

6.2 With payment and settlement partners

We may share relevant transaction, payer, recipient, verification, and settlement information with payment service providers, banks, payment networks, and other financial service partners involved in processing payments, handling refunds, detecting fraud, or settling eligible provider amounts.

6.3 With service providers and technology partners

We may use third parties to provide hosting, cloud storage, website infrastructure, customer-support tools, email and SMS delivery, analytics, verification, security, fraud prevention, document management, and other operational services. These providers may process personal data on our behalf under appropriate contractual and legal safeguards where required.

6.4 With professional advisers and insurers

We may disclose relevant data to our lawyers, auditors, accountants, insurers, consultants, or other professional advisers where reasonably necessary for advice, audits, claims, risk management, or legal compliance.

6.5 With authorities and other parties for legal or safety reasons

We may disclose information to regulators, law enforcement agencies, courts, government authorities, or other relevant parties where we believe disclosure is legally required, authorised, necessary to respond to a valid legal process, or reasonably necessary to protect the rights, safety, property, or security of Nayden24, our users, or others.

6.6 Corporate transactions

If Nayden24 undergoes a merger, acquisition, restructuring, financing, sale of assets, or similar corporate transaction, relevant personal data may be disclosed to prospective or actual participants and their advisers, subject to appropriate confidentiality and legal requirements.

6.7 With your direction or consent

We may share data with another recipient where you request or authorise us to do so, or where another lawful basis applies.

We do not sell personal data to third parties in exchange for money as a business practice. We may share information with service providers or other recipients for the purposes described in this Policy, subject to applicable law.

7. Payments and Provider Settlements

Nayden24's transaction process may involve collecting payments from customers and settling amounts due to artisans, vendors, logistics providers, or other eligible service providers. To operate this process, we may need to use personal, business, identity-verification, transaction, and settlement information and share relevant parts with payment partners and financial institutions.

Access to settlement information should be limited to authorised personnel and providers who need it for the relevant transaction or lawful purpose. Users must keep account and payment details accurate and must notify us of suspected errors or unauthorised activity.

Nayden24's collection of a payment does not, on its own, mean that funds are held in escrow, that a transaction is guaranteed, or that a refund or settlement is unconditional. The handling of payments and related data depends on the actual payment method, applicable transaction terms, service-provider terms, and law.

Never email or message us your account password, OTP, card PIN, or full card security code. If anyone claiming to represent Nayden24 requests secret authentication credentials, do not provide them and report the request to info@naydenfacilitiesmgmt.com.

8. Cookies and Similar Technologies

Nayden24 may use cookies, pixels, local storage, and similar technologies to keep the website working, remember preferences, understand website usage, maintain security, and improve user experience. The specific technologies depend on the website configuration and third-party tools actually enabled.

Strictly necessary technologies may be required for basic site functions, account access, security, and transaction workflows. Where optional analytics, personalisation, or advertising technologies are used and consent is required, we will provide an appropriate choice mechanism. You may also be able to control cookies through your browser settings; disabling certain technologies may affect website functionality.

The website may link to third-party websites or services that use their own cookies and tracking tools. Their practices are governed by their own privacy notices. Before publishing or changing this Policy, Nayden24 should ensure its cookie banner and settings accurately list the technologies actually in use.

9. Marketing and Service Communications

We may send service communications necessary to operate your account or transaction, such as account notices, verification updates, order confirmations, payment or settlement updates, delivery notices, security alerts, policy changes, and responses to support requests.

Where permitted, we may also send product announcements, offers, newsletters, or other marketing communications. If consent is required, we will obtain it before sending such communications. You can opt out of marketing emails using the unsubscribe link, where available, or by emailing info@naydenfacilitiesmgmt.com. Even if you opt out of marketing, we may still send essential service, security, legal, or transaction messages.

We will not treat your silence as consent where the law requires affirmative consent.

10. How Long We Keep Personal Data

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including providing services, completing transactions, maintaining accounts, meeting legal and accounting obligations, handling disputes, enforcing agreements, preventing fraud, and establishing or defending legal claims.

Retention periods differ by data type and purpose. For example, account and profile data may be retained while an account remains active and for a reasonable period after closure; transaction, payment, verification, and accounting records may need to be retained for periods required by law or necessary to resolve disputes and meet record-keeping obligations; support records may be kept for a period appropriate to the issue and any follow-up; and technical logs may be retained for a shorter period consistent with security and operational needs.

When personal data is no longer needed, we will take reasonable steps to delete it, anonymise it, or securely dispose of it, unless retention is required or permitted by law. Deletion may not immediately remove information from secure backups, archived records, or records that we must retain for legal, security, or dispute-resolution purposes. Any retained information remains subject to appropriate protections and will not be used for incompatible purposes.

11. Security of Personal Data

We take appropriate technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, destruction, or misuse. Depending on the systems and data involved, safeguards may include access restrictions, authentication, staff confidentiality obligations, secure transfer methods, supplier reviews, backups, monitoring, and incident-response procedures.

No website, electronic transmission, or storage system can be guaranteed to be completely secure. You are responsible for using a strong password where applicable, keeping credentials confidential, securing your devices, and notifying us promptly if you suspect that your account or information has been compromised.

We will handle suspected personal-data breaches in accordance with applicable law, including any required assessment, notification, and reporting obligations.

12. International Data Transfers

Nayden24 or its service providers may process or store personal data in Nigeria or another country, depending on the systems and providers used to operate the platform. Where personal data is transferred outside Nigeria, we will take steps to ensure that the transfer is permitted under the NDPA and applicable directives, and that any required safeguards or other legal conditions are satisfied.

Depending on the circumstances, those measures may include contractual protections, an adequacy mechanism recognised under applicable law, or another lawful transfer basis. You may contact us for further information about relevant safeguards, subject to security, confidentiality, and legal restrictions.

13. Your Privacy Rights

Subject to the NDPA and other applicable laws, you may have the right to:

• Be informed about how your personal data is processed.
• Request access to the personal data we hold about you and obtain relevant information about that processing.
• Request correction of inaccurate, incomplete, or out-of-date personal data.
• Request erasure of personal data in circumstances permitted by law.
• Request restriction of processing in circumstances permitted by law.
• Object to certain processing, including processing based on legitimate interests or direct marketing, where applicable.
• Withdraw consent where processing is based on consent. Withdrawal does not invalidate processing carried out before withdrawal.
• Receive certain personal data in a structured, commonly used format or request its transfer where the legal conditions for portability are met.
• Not be subject to a decision based solely on automated processing that produces legal or similarly significant effects, except where a lawful exception applies and required safeguards are provided.
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your data-protection rights have been infringed.

These rights are not absolute and may be subject to legal exceptions, the rights of others, record-retention duties, or the need to establish or defend legal claims. We will explain where we cannot fully comply, to the extent the law permits.

To exercise a right, email info@naydenfacilitiesmgmt.com with the subject line “Privacy Request” and explain what you are requesting. Please identify your account or the relevant interaction sufficiently for us to locate the data. We may ask for reasonable information to verify your identity or authority before acting. Do not send passwords, OTPs, or full payment-card credentials.

We will handle requests within the period required by applicable law. If a request is complex, unclear, or requires additional information, we may contact you for clarification or explain any lawful extension that applies.

You may also contact the Nigeria Data Protection Commission through its official website at https://ndpc.gov.ng/ if you wish to raise a complaint with the supervisory authority.

14. Children and Individuals Under 18

Nayden24 is a construction and services marketplace intended for adults who can lawfully enter into relevant transactions. It is not designed for children under 18, and we do not knowingly invite children to create accounts or submit identity, payment, or verification information.

If you believe a person under 18 has provided personal data to us without appropriate legal authority, contact info@naydenfacilitiesmgmt.com. We will assess the request and take appropriate steps, including deletion where required by law and where retention is not otherwise legally necessary.

15. Automated Processing and Profiling

We may use automated tools for functions such as website operations, security monitoring, fraud signals, spam detection, verification workflows, and service recommendations. These tools may use information such as account activity, transaction data, technical logs, or listing details to identify patterns that require review.

Where a decision with legal or similarly significant effects is made solely by automated processing, we will apply the safeguards and respect the rights required by applicable law, including any right to appropriate human intervention, to express your point of view, or to contest the decision where applicable. We do not intend this Policy to authorise unlawful or unfair automated decision-making.

16. Third-Party Websites and Services

The website may contain links to third-party websites, payment interfaces, social-media platforms, or other services. We do not control the privacy practices of independent third parties. Before providing them with personal data, you should review their privacy notices and terms.

If you use an external payment provider or other service directly, that provider may process your personal data as a separate controller under its own policy. The fact that a third party is linked to or used by Nayden24 does not mean that every aspect of its service is controlled by Nayden24.

17. Your Responsibilities When Using Nayden24

You should provide accurate information, update material changes, and share only information needed for the relevant account, project, or transaction. You must have appropriate authority or another lawful basis before submitting personal data about someone else.

Do not include passwords, OTPs, card PINs, full payment-card details, identity documents, or other confidential information in public listings or ordinary messages unless Nayden24 has specifically requested the information through an appropriate secure process. Do not share another user's contact, identity, project, or payment details for unauthorised purposes.

If you are a vendor, artisan, contractor, or logistics provider and receive customer data through Nayden24, you must use it only for the relevant transaction, protect it from unauthorised access, comply with applicable data-protection duties, and delete or securely dispose of it when it is no longer needed, unless a legal obligation requires retention.

18. Data Breaches and Security Incidents

If you believe that personal data connected with Nayden24 has been lost, accessed, disclosed, altered, or used without authorisation, notify us promptly at info@naydenfacilitiesmgmt.com. Please provide relevant information about the incident without sending unnecessary sensitive information.

We will assess reported incidents and take steps appropriate to the risk, including containment, investigation, remedial action, and regulatory or individual notification where required by applicable law. We may contact affected users or relevant authorities where notification is legally required or otherwise appropriate.

19. Changes to This Privacy Policy

We may update this Policy to reflect changes in our services, data practices, technology, legal obligations, or operational requirements. The current version will be published on https://www.nayden24.com with its effective or last-updated date.

Where required by law or applicable terms, we will provide notice of material changes through an appropriate channel. If a change requires consent, we will seek that consent as required by law. Your continued use of Nayden24 after an updated Policy takes effect does not override any consent requirement or other mandatory legal right.

20. Contact Us

For questions about this Policy, privacy requests, concerns about the handling of personal data, or to report a suspected data-protection incident, contact:

Nayden 24 LTD

Company registration number: 9369364

Registered address: 8, Ajisafe Street, Ikeja GRA, Lagos, Nigeria

Website: https://www.nayden24.com

Privacy and data-protection contact: info@naydenfacilitiesmgmt.com

Please use the subject line “Privacy Request” for requests to access, correct, erase, restrict, object to, or obtain a copy of personal data. We may need to verify your identity before acting on a request.

End of Privacy Policy