Legal

Privacy Policy

Last updated: October 27, 2026

This Privacy Policy explains how Vokoza Networks Ltd ("Vokoza", "we", "us") collects, uses, and protects personal data when you use our network access platform. We process personal data in accordance with Nigeria's Data Protection Act, 2023 (NDPA).

Vokoza is responsible for the purposes and means of processing it determines for its platform. The business providing your Wi-Fi also determines how its own network is managed and may process data under its own privacy notice. Where Vokoza handles data on a business's instructions, the responsibilities depend on that processing and the applicable agreement. You can contact us to clarify who handles a particular request.

1. What we collect

The information we collect depends on how you use Vokoza:

• Your name and email address, provided through registration, checkout or a support request;
• If you submit a business setup enquiry through our Request setup form, we also collect the phone number you provide so we can contact you about that enquiry. This phone-number field is not part of customer voucher checkout;
• Payment references, amounts and confirmation details from Paystack or Flutterwave. Card details entered in their checkout are handled by the payment provider, not stored as card details by Vokoza;
• Voucher usage data, such as data consumed and session times.

2. Why we use it and the lawful basis

The basis depends on the purpose of the processing:

• Providing the service: information needed to fulfil your purchase, deliver a voucher, support network access and respond to a related request is processed as necessary to perform the relevant contract or take requested steps before it;
• Business setup enquiries: we use the contact details you submit to respond to your enquiry and take the setup steps you request before entering a service agreement;
• Legal obligations: records needed to meet applicable legal requirements are processed on that basis;
• Security and service administration: preventing abuse, investigating problems and providing relevant usage and sales reporting may rely on legitimate interests, subject to necessity and balancing those interests against your rights;
• Consent: where we rely on your consent for a specific purpose, you may withdraw it. Withdrawal does not affect the lawfulness of earlier processing.

If you do not provide information necessary to fulfil a purchase or resolve a request, we may be unable to complete that service. Accepting service terms does not by itself constitute consent to every use of personal data.

3. How we share it

We do not sell your personal data. For payments and network access, relevant recipients include:

• Paystack or Flutterwave, as applicable, for processing and verifying payments. Their own privacy notices also apply to their handling of your information;
• The venue you are connecting through, for the purpose of managing their own network and vouchers;
• Regulatory or law enforcement authorities, where required by Nigerian law.

4. Data retention

Retention depends on the record and its purpose. Transaction records may be needed to verify purchases, handle disputes and meet applicable legal recordkeeping requirements. Network usage and security records are retained according to their operational and security purpose. Support records may be needed to resolve a request and related follow-up.

Relevant criteria include whether a service or dispute is ongoing, applicable legal retention requirements and whether identifiable information is still necessary. A deletion request may therefore not remove every transaction record immediately. Contact us for information about retention of your particular records.

5. Your rights

Depending on the circumstances and the NDPA, you may request access to your data, correction of inaccurate information, deletion, restriction of processing or a portable copy of applicable data. You may object to relevant processing and withdraw consent where consent is the basis. Applicable protections also cover decisions based solely on automated processing that have legal or similarly significant effects.

Send requests to support@vokoza.com with enough information to identify the relevant account and business. We may need proportionate identity checks before disclosing or changing records. Where a legal exception limits a request, we will explain the reason.

You may also complain to the Nigeria Data Protection Commission (NDPC). You do not have to give up that right to use our service.

6. Security

We apply reasonable technical and organizational measures to protect your data, including access controls on our systems. Payments are handled through the applicable provider's checkout. No system can guarantee absolute security; do not share passwords, one-time codes or full card details in support messages.

7. Contact us

For any questions about this Privacy Policy or your data, contact support@vokoza.com.

8. Changes to this policy

This page shows a fixed revision date. We may revise the policy when our practices or legal obligations change. Where required, we will provide notice of material changes and obtain consent for a new purpose before processing on that basis.