Privacy Policy

Introduction

Bettabuilder ("Bettabuilder", "Company", "we", "us" or "our") respects your privacy and is committed to protecting your personal data.

This Privacy Policy ("Policy") explains how we collect, use, disclose, store, retain and protect personal data obtained through the Bettabuilder e-commerce application, website, digital platforms and related services ("Bettabuilder platform").

This Policy explains the types of personal data we collect, the purposes for which we collect and process such data, the circumstances in which we may share it, your rights as a data subject and the measures we take to protect your information.

Please read this Policy carefully before using the Bettabuilder platform.

Who We Are

Bettabuilder operates a digital marketplace intended to make construction procurement and related services more accessible, transparent and cost-effective by enabling users to discover and compare suppliers, negotiate prices, procure building materials, access rental equipment and book construction-related services.

The platform facilitates interactions between customers and vendors and provides features including order management, consultations, messaging, service bookings and vendor account management.

For the purposes of applicable data protection laws, including the Nigeria Data Protection Act 2023 ("NDPA"), Bettabuilder may act as a Data Controller in respect of personal data collected and processed through the platform.

Where Bettabuilder processes personal data on behalf of another party, it may also act as a Data Processor, as applicable.

Consent

By creating an account, accessing or using the Bettabuilder platform, submitting information, communicating with other users or vendors through the platform, booking a service or otherwise interacting with Bettabuilder, you acknowledge that you have read and understood this Policy and agree to the processing of your personal data as described herein, where consent is the applicable lawful basis.

Where processing is based on consent, you may withdraw your consent at any time. However, withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal and may affect our ability to provide certain features or services.

Where personal data is processed on another lawful basis, including contractual necessity, legal obligation or legitimate interests, withdrawal of consent will not necessarily require us to cease such processing.

Scope of This Policy

This Policy applies to personal data collected, used, stored, disclosed or otherwise processed by Bettabuilder through:

• the Bettabuilder mobile application, website and other digital platforms;
• account registration and onboarding;
• vendor registration and verification;
• material procurement and order management;
• rental equipment listings and bookings;
• professional and artisan service bookings;
• consultations and site inspection requests;
• messaging and communications conducted through the platform;
• customer support and complaints;
• marketing and promotional communications; and
• other interactions with Bettabuilder.

This Policy applies to all individuals whose personal data we process, including customers, developers, diaspora users, vendors, suppliers, equipment providers, artisans, professionals, representatives of businesses, prospective users and other persons who interact with the platform.

How We Collect Personal Data

We collect personal data through lawful and transparent means. Depending on your relationship with us and your use of the platform, we may collect personal data directly from you, automatically through your use of the platform, from vendors and other users, from publicly available sources and from third parties where lawful and necessary.

Information You Provide

We collect personal data that you voluntarily provide when you create or maintain an account, register as a customer or vendor, list products, equipment or services, place or manage an order, request a quotation or negotiate with a vendor, book or provide a service, communicate with another user or vendor, submit a consultation or site inspection request, contact customer support, provide feedback or submit a complaint or otherwise interact with Bettabuilder.

Information Collected Automatically

We may automatically collect certain technical and usage information when you access or use the platform, including information relating to your device, IP address, operating system, browser, application activity, access times, usage patterns and other technical information.

We may also use cookies and similar technologies where applicable to operate, secure and improve the platform.

Information from Third Parties

We may receive personal data from third parties where lawful and necessary, including vendors, business partners, service providers, verification providers and publicly available sources where necessary.

Publicly Available Information

As part of vendor onboarding and verification, we may review information that is publicly available, including business registration information, social media profiles, websites and other publicly accessible business information provided or referenced by a vendor.

Failure to Provide Personal Data

Where the provision of personal data is necessary to create an account, provide a requested service, conduct vendor verification or comply with a legal obligation, failure to provide the required information may prevent us from providing the relevant service or activating an account.

Information We Collect

The categories of information we collect depend on how you use the Bettabuilder platform.

1. Identity Data: This may include individual's full name, business's corporate name, name, business owner's name, profile photograph, identification information and other information reasonably required to identify or verify you.
2. Contact Data: This may include your email address, telephone number, WhatsApp contact number, residential address, business address, delivery address and other contact information.
3. Account and Authentication Data: For standard users, this may include your email address, telephone number, password and other account credentials. For vendors, this may include business name, owner's name, account credentials and information relating to the vendor account.
4. Vendor and Business Information: Where you register as a vendor, we may collect official business name, owner's name, business registration information, Corporate Affairs Commission ("CAC") registration details, WhatsApp contact number, social media and website links, service categories, product, equipment or service information, business location, bank account information, information submitted during vendor verification and other information necessary to assess and manage your vendor account.
5. Transaction and Order Information: We may collect information relating to orders, quotations, negotiations, bookings, requested services, products, equipment, delivery arrangements and communications associated with transactions conducted through the platform.
6. Communications Data: Where the platform facilitates messaging, consultations or other communications, we may process information contained in such communications to provide the relevant functionality, resolve disputes, provide customer support, investigate complaints and maintain platform security.
7. Technical and Usage Information: We may collect IP addresses, device information, operating system, application version, browser information, login information, access times, usage statistics, diagnostic information and other technical data.
8. Location and Business Location Data: Where necessary for the provision of e-marketplace services, we may process business, delivery, service or other location information provided by users or vendors.

Purposes for Processing Personal Data

We process personal data for specified, explicit and legitimate purposes and in accordance with applicable data protection laws. Depending on your interaction with Bettabuilder, we may process personal data for the following purposes:

1. Account Creation and Management: We process personal data to create, authenticate, administer and maintain customer and vendor accounts and to provide access to relevant platform features.
2. Marketplace Services: We process personal data to facilitate interactions between customers and vendors, including the discovery of suppliers, procurement of building materials, equipment rentals, service bookings, consultations and related construction services.
3. Orders, Bookings and Service Management: We process personal data to facilitate and administer orders, bookings, quotations, service requests, consultations, site inspections, deliveries and other activities initiated through the platform.
4. Vendor Verification: We process vendor information to review and verify vendor accounts before they become visible on the platform. This may include reviewing CAC registration status against the banking information supplied by the vendor, reviewing publicly available business information and conducting physical verification or "boots-on-ground" inspections to confirm the existence of the business and, where applicable, the identity of the owner.

   Vendor verification is undertaken to promote trust, authenticity and safety within the marketplace.

5. Communication and Customer Support: We process personal data to facilitate communications between users and vendors, respond to enquiries, provide customer support, manage complaints, investigate disputes and resolve issues relating to the platform.
6. Platform Improvement and Analytics: We may process technical and usage information to understand how users interact with the platform, improve functionality, develop new features, identify technical problems and enhance the overall user experience.
7. Fraud Prevention, Security and Risk Management: We may process personal data to authenticate users, verify vendors, detect and prevent fraud, unauthorised access, abuse, cyber threats and other unlawful activities and to protect the integrity and security of the platform.
8. Business Administration: We may process personal data to administer our business, maintain records, monitor platform performance, communicate with users and vendors and manage our contractual and commercial relationships.
9. Marketing and Promotional Communications: Subject to applicable law and your communication preferences, we may process personal data to send information about Bettabuilder, its services, products, features, promotions, updates and other communications that may be relevant to you. Where required by applicable law, we will obtain your consent before sending direct marketing communications. You may opt out of marketing communications at any time.
10. Legal and Regulatory Compliance: We may process personal data where necessary to comply with applicable laws, regulations, court orders and lawful requests from governmental, regulatory, judicial or law enforcement authorities.
11. Protection of Legal Rights: We may process personal data where necessary to establish, exercise or defend legal claims, investigate complaints, resolve disputes, enforce our terms and protect the rights, property and safety of Bettabuilder, its users, vendors and other stakeholders.
12. Other Legitimate Business Purposes: We may process personal data for other lawful purposes compatible with the purposes for which the information was collected, provided that such processing is permitted by applicable law and appropriate safeguards are implemented.

Lawful Basis for Processing

Bettabuilder processes personal data in accordance with the NDPA and other applicable data protection laws. Depending on the circumstances, we may rely on one or more of the following lawful bases:

1. Consent: We may process personal data where you have given valid consent, including for direct marketing, promotional communications and other activities for which consent is required. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
2. Contractual Necessity: We may process personal data where necessary to create, perform or manage a contractual relationship with you, including creating accounts, processing orders and bookings, facilitating communications, providing requested services and managing vendor accounts.
3. Legal Obligation: We may process personal data where necessary to comply with applicable laws, regulations, court orders or lawful requests from competent authorities.
4. Legitimate Interests: We may process personal data where necessary for our legitimate interests, provided that those interests are not overridden by your fundamental rights and freedoms. These interests may include operating and improving the platform, ensuring platform security, preventing fraud, verifying vendors, managing business relationships and protecting our legal rights.
5. Public Interest: Where permitted by law, we may process personal data where necessary for the performance of a task carried out in the public interest. Where permitted by law, we may process personal data where such processing is necessary for the performance of a task carried out in the public interest, including collaboration with public institutions or regulatory bodies.
6. Vital Interests: We may process personal data where necessary to protect your vital interests or those of another individual in circumstances involving health, safety or other emergencies.

Who We Share Your Information With

We treat your personal data with the utmost confidentiality and do not sell, rent or otherwise disclose your personal data except as described in this Policy or where required or permitted by applicable law. Where we share your personal data, we take reasonable steps to ensure that recipients protect such information in accordance with applicable data protection laws. We may share your data with:

1. Other Platform Users and Vendors: Where necessary to facilitate a transaction, booking, consultation, delivery, service request or other interaction initiated through the platform, certain information may be made available to the relevant customer, vendor, supplier, equipment provider, artisan or professional. Vendors may also have access to information reasonably necessary to fulfil orders or services requested by customers.
2. Service Providers: We may engage trusted third-party service providers for services including cloud hosting, information technology, analytics, communications, customer support, security, verification and professional advisory services. Such providers will only be permitted to process personal data for authorised purposes and will be expected to maintain appropriate confidentiality and security measures.
3. Verification and Business Information Sources: We may use publicly available business records and other lawful sources to verify vendor information, including business registration and business identity information.
4. Professional Advisers and Business Partners: We may disclose relevant information to professional advisers, contractors, consultants, insurers, auditors and other business partners where necessary for legitimate business purposes.
5. Regulatory and Government Authorities: We may disclose personal data where required to comply with applicable law, court orders, regulatory requirements or lawful requests from governmental, judicial or law enforcement authorities.

International Transfers of Personal Data

Bettabuilder may transfer or permit the transfer of personal data to recipients located outside Nigeria where necessary for the operation of the platform, provision of services or engagement of technology and service providers. Where personal data is transferred outside Nigeria, Bettabuilder will take appropriate steps to ensure that such transfers are carried out in accordance with the NDPA and other applicable data protection requirements.

Data Security

Bettabuilder implements reasonable technical, organisational and administrative measures designed to protect personal data against unauthorised access, loss, misuse, disclosure, alteration or destruction. Access to personal data is restricted to persons who require such access for legitimate business or service-related purposes.

Notwithstanding the safeguards implemented, no digital platform or transmission over the internet can be guaranteed to be completely secure. Users are responsible for maintaining the confidentiality of their account credentials and should promptly notify Bettabuilder of any suspected unauthorised access to their accounts.

Data Retention

Bettabuilder retains personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, including providing services, maintaining accounts, resolving disputes, enforcing contractual rights, preventing fraud and complying with legal and regulatory obligations.

Retention Period

The applicable retention period depends on the nature of the information, the purpose for which it was collected and applicable legal, regulatory or contractual requirements. Where no specific retention period is required by law, personal data will generally be retained only for as long as reasonably necessary to fulfil the purpose for which it was collected.

Criteria for Retention

In determining retention periods, we may consider the sensitivity and nature of the information, the purposes of processing, applicable limitation periods, legal obligations, dispute resolution requirements, security considerations and legitimate business needs.

Your Rights as a Data Subject

Subject to applicable law, you may have the following rights in relation to your personal data:

1. Right to Be Informed: You have the right to receive clear and transparent information about how your personal data is collected and processed.
2. Right of Access: You may request confirmation as to whether we process your personal data and, where applicable, request access to or a copy of such data.
3. Right to Rectification: You may request correction or updating of personal data that is inaccurate, incomplete or outdated.
4. Right to Erasure: You may request deletion of your personal data where permitted by applicable law, subject to circumstances where continued retention is legally or legitimately required.
5. Right to Restrict Processing: You may request restriction of processing in circumstances permitted by applicable law.
6. Right to Data Portability: Where applicable, you may request to receive your personal data in a structured, commonly used and machine-readable format or request its transmission to another data controller where technically feasible.
7. Right to Object: You may object to certain processing of your personal data, including processing based on legitimate interests or processing for direct marketing purposes, subject to applicable legal limitations.
8. Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time. Withdrawal will not affect the lawfulness of processing undertaken before withdrawal.
9. Right to Lodge a Complaint: Where you believe that your personal data has been processed in violation of applicable data protection law, you may lodge a complaint with Bettabuilder and, where appropriate, the Nigeria Data Protection Commission ("NDPC") or another competent supervisory authority.
10. Exercising Your Rights: You may exercise your rights by contacting Bettabuilder using the contact details provided in this Policy. We may request information that is reasonably necessary to verify your identity before processing your request and will respond within the timeframe prescribed by applicable law.

Third-Party Websites, Links and Services

The Bettabuilder platform may contain links to websites, social media pages, payment services or other platforms operated by third parties. This Policy applies only to personal data processed by Bettabuilder. We are not responsible for the privacy practices, security or content of third-party websites or services. Users and vendors are encouraged to review the privacy policies and terms applicable to third-party services before providing personal data or engaging with those services.

Children's Privacy

The Bettabuilder platform is not intended for children under the age of 18. We do not knowingly collect or process personal data relating to children without the consent or other lawful authorisation required under applicable law. Where we become aware that personal data relating to a child has been collected without an appropriate legal basis, we will take reasonable steps to delete or cease processing such information in accordance with applicable law.

Changes to This Policy

Bettabuilder may update or amend this Policy from time to time to reflect changes in its business operations, platform features, technology, legal obligations or data processing practices. Where appropriate, we may notify users of material changes through the platform, email or other suitable communication channels. We encourage you to review this Policy periodically to remain informed about how your personal data is processed.

Contact Us and Complaints

If you have any questions, concerns, complaints or requests regarding this Policy or the processing of your personal data, or if you wish to exercise any of your data protection rights, you may contact us using the details below:

We are committed to addressing privacy-related enquiries and complaints promptly and fairly.