Privacy Policy

Effective Date:  23 - October - 2025 [Last Updated]

BOONBAC is a social media platform provided by BOONBAC TECHNOLOGY LIMITED ("BOONBAC," "we," "us," or "our"), a company registered in Nigeria.

We are committed to protecting your privacy and personal data in compliance with the Nigeria Data Protection Act (NDPA) 2023 and other applicable laws and regulations. This Privacy Policy explains how we collect, use, process, and protect your personal data when you use our platform through our website (www.boonbac.com) and our mobile applications for Android and iOS (collectively, the "Platform" or "Service").

By accessing or using the BOONBAC Platform, you consent to the collection, use, processing, disclosure, and retention of your personal data as described in this Privacy Policy.

 

1. Definitions

  • Personal Data: Any information relating to an identified or identifiable natural person (a "Data Subject").

  • Processing: Any operation performed on Personal Data, whether or not by automated means.

  • Data Subject: The individual to whom the Personal Data relates (you, the BOONBAC user).

  • Data Controller: BOONBAC TECHNOLOGY LIMITED, which determines the purposes and means of processing your Personal Data.

  • NDPA: Nigeria Data Protection Act, 2023.

 

2. Information We Collect

We collect several types of information from and about users of our Platform, including:

 

A. Information You Provide Directly

  • Account Registration Data: Your name, username, email address, phone number, password, date of birth, and location.

  • Profile Information: Profile picture, biography, preferred language, and other details you choose to add to your profile.

  • User Content: Posts, photos, videos, comments, direct messages, and any other content you create, share, or transmit on the Platform.

  • Communications: Information you provide when contacting us for support, feedback, or any other query via email at info@boonbac.com or other channels.

 

B. Information Collected Automatically

  • Usage Data: Details of your access to and use of the Platform, including time spent, features used, content viewed, and interactions with other users' content.

  • Technical Data: Internet Protocol (IP) address, browser type, operating system, mobile carrier, device identifiers (e.g., unique device ID, IMEI, MAC address), and diagnostic data.

  • Location Data: Depending on your device permissions, we may collect precise or approximate location data to offer location-based features (e.g., tagging your location in a post).

  • Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to track activity on our Platform and hold certain information. You can control the use of cookies through your browser or device settings.

 

C. Information from Third Parties

We may receive information about you from other BOONBAC users, third-party services (if you choose to link them, e.g., connecting a third-party login), and partners (e.g., advertisers).

 

3. Lawful Basis and Purposes for Processing

 

We process your Personal Data based on the following lawful grounds, as defined in the NDPA, and for the specific purposes listed:

Lawful Basis (NDPA) Purpose of Processing
Consent To send you promotional and marketing communications (where required).
Contract Performance To provide, maintain, and improve the BOONBAC Service, including account management, content display, and direct messaging.
Legal Obligation To comply with legal requirements, law enforcement requests, and regulatory obligations in Nigeria.
Legitimate Interests To protect against fraud, ensure security, improve our platform (e.g., data analytics), and for internal administration.
Vital Interests Where necessary to protect your or another person's life and safety.

 

4. Disclosure of Your Information

We may disclose Personal Data to the following categories of recipients:

  • Other Users: Your profile information (username, profile picture, posts) and certain activities (likes, comments) are public and visible to all users of the Platform.

  • Service Providers: Third-party vendors, consultants, and other service providers who perform services for us, such as hosting, data analysis, payment processing, and customer support, subject to strict data protection agreements.

  • Affiliates: To our parent companies, subsidiaries, or other entities under common control for operational purposes.

  • Legal & Regulatory Authorities: If required by law, to respond to legal process, or to protect our rights, your safety, or the safety of others.

  • Business Transfers: In connection with a merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.

 

5. Data Subject Rights (Your Rights)

Under the NDPA 2023, you have the following rights regarding your Personal Data:

  • Right to Access: To obtain confirmation about the processing of your Personal Data and to access the data we hold about you.

  • Right to Rectification: To request the correction of inaccurate or incomplete Personal Data.

  • Right to Erasure (Right to be Forgotten): To request the deletion of your Personal Data when it is no longer necessary for the purposes for which it was collected, or if you withdraw your consent.

  • Right to Restrict Processing: To limit the way we use your Personal Data in certain circumstances.

  • Right to Object: To object to the processing of your Personal Data based on legitimate interests or for direct marketing purposes.

  • Right to Data Portability: To receive your Personal Data in a structured, commonly used, and machine-readable format and to transmit it to another Data Controller.

  • Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us using the details provided in Section 9.

 

6. Data Security and Retention

  • Security: We have implemented appropriate technical and organizational security measures to protect your Personal Data from accidental loss, unauthorized access, destruction, misuse, alteration, and disclosure.

  • Retention: We retain your Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, or to comply with our legal and regulatory obligations. Once your data is no longer necessary, we will securely delete or anonymize it.

 

7. International Data Transfer

Your Personal Data may be transferred to, and processed in, countries other than Nigeria. We will ensure that any such international transfer is governed by appropriate safeguards as mandated by the NDPA, such as obtaining your explicit consent or ensuring the recipient country has an adequate data protection level.

 

8. Children's Privacy

The BOONBAC Platform is not directed to persons under the age of 13. We do not knowingly collect Personal Data from children under 13. If we become aware that we have collected Personal Data from a child under 13 without verifiable parental consent, we will take steps to delete that information.

 

9. Contact Information

If you have any questions or concerns about this Privacy Policy, our data practices, or to exercise your rights, please contact us:

Data Controller: BOONBAC TECHNOLOGY LIMITED Address: [Insert Physical Address if applicable] Email: info@boonbac.com

 

10. Updates to Our Privacy Policy

We reserve the right to update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. We encourage you to review this Privacy Policy periodically. Continued use of the Platform after any changes constitutes acceptance of the new policy.

© 2025 BOONBAC