Privacy Policy
PRIVACY POLICY
Effective Date: 17 September 2025
Last updated: 25 September 2026
This Privacy Policy explains how Jankado Digital Solutions LTD, located at No. 06 Asu Rahusa Plaza, Wikki Oil Roundabout, Bauchi, (“Jankado”, “we”, “us” or “our”) collects, uses, discloses, and protects your personal data when you engage with our services.
We are committed to safeguarding your privacy and ensuring that your personal data is handled in accordance with the Nigeria Data Protection Act (NDPA) and other applicable regulations.
1. Information We Collect
1.1 Categories of Personal Data
We may collect the following categories of personal data:
Full name
Email address
Phone number
Facial capture
Date of birth
Gender
Marital status
Business or residential address
Business registration details (e.g., CAC certificate number, where applicable)
Internet Protocol (IP) address and browser details
Internal Identifiers (account or customer number)
National Identification Number (NIN)
Bank Verification Number (BVN)
Service usage information
Identity verification records, SMS alert logs, institutional request documents, and approval and exception audit records
1.2 Means of Collection
We may collect your personal data through:
Our websites, mobile applications, or online platforms
Registration or contact forms
Email, telephone, or live chat interactions
Automated tools, including cookies or analytics software
We employ appropriate technical and organisational measures to ensure that your data is collected and stored securely.
2. Purpose of Processing
Your personal data may be processed for the following purposes:
To provide, operate, and maintain our services
To communicate with you, including service updates and support
To fulfil legal obligations and comply with regulatory requirements
To improve our platforms, content, and user experience
To verify identity on request, send an additional SMS alert to the identity owner after a successful website NIN or BVN check when a usable number is available, and record whether that alert was sent, failed, or was withheld under an approved exception
To assess and audit institutional notification exception requests, enforce their approved scope, and investigate complaints or misuse
3. Legal Basis for Processing
Our processing of personal data is based on one or more of the following lawful grounds:
Your explicit consent
The performance of a contract to which you are a party
Compliance with a legal obligation
Our legitimate interests, such as fraud prevention, service improvement, and customer support
The lawful basis depends on the specific processing and relationship with the individual. A customer’s acceptance of platform terms does not itself provide consent from a person whose NIN or BVN the customer checks. Institutions must identify and document their own lawful basis for each check and provide required notice or obtain consent where applicable.
4. Data Sharing and Disclosure
4.1 No Sale of Data
We do not sell or rent your personal data to any third party.
4.2 Third Party Access
We may share your personal data with trusted third parties for the sole purposes of service delivery, regulatory compliance, and customer onboarding. These may include:
Payment gateways, such as Payment Point and Paystack
Financial institutions, such as Zenith Bank and Moniepoint, where we act as agents to facilitate account opening
IT infrastructure providers and technical support partners
Regulatory bodies, where disclosure is required by law.
SMS delivery providers, for sending identity-owner alerts where applicable
4.3 Purpose of Third-Party Access
Your data is shared with third parties strictly to:
Facilitate wallet account creation and payment processing
Enable bank account opening as part of financial inclusion initiatives
Provide cloud storage, technical support, or analytical services
Fulfil statutory obligations and respond to regulatory directives
4.4 Identity-owner alerts and approved exceptions
For a successful website NIN or BVN verification, we ordinarily attempt an additional SMS alert to a usable identity-owner number. We do not include the NIN, BVN, or verification result in that SMS. We may withhold or delay the additional alert for a particular institution, purpose, service, and time period only after written approval and a signed Institutional Notification Exception Addendum. The institution must provide evidence of its authority and lawful basis, and any required notice or consent, or a documented legal exception. We log the decision and use of the exception, and may suspend or revoke it. Not receiving an alert does not remove an individual’s data protection rights or imply that the check was lawful.
5. Data Security
We adopt industry-standard security measures to protect your personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures include:
Encrypted data transmission
Access control mechanisms
Secure server infrastructure and firewall protection
6. Data Retention
We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulation.
7. Your Rights
Under the Nigeria Data Protection Act, you have the right to:
Access the personal data we hold about you
Request correction or completion of inaccurate or incomplete data
Withdraw your consent at any time, where applicable
Request the deletion of your data
Object to certain types of processing
Request that we transfer your data to another service provider (data portability)
Exercising Your Rights
To exercise any of these rights, please contact us using the information below:
Email: [email protected]
Telephone: +2348122825251
8. Internal Complaints & Remediation
If you have concerns regarding how we process your personal data or wish to lodge a complaint, you may contact us directly at:
Jankado Digital Solutions LTD
No. 06 Asu Rahusa Plaza, Wikki Oil Roundabout, Bauchi
Email: [email protected]
Phone: +2348122825251
We are committed to addressing your concerns promptly and transparently.
9. Updates to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal obligations. When we do, we will revise the “Last updated” date at the top of this page and notify you accordingly.
Updates will apply as described in the notice we provide. Where processing requires consent, we will request that consent rather than treating continued use as consent from another individual.