Legal
Privacy Policy
Your data stays yours. This policy explains, in plain words, what we collect, why, who helps us, and the choices you have under the Nigeria Data Protection Act 2023.
1. Who we are
Rakunmi Rewards is operated by Rakunmi Marketing Promotions Limited (RC 9954163), 4, James Omotosho Street, Agodo, Egbe, Ikotun, Lagos, the data controller for your personal data. We are registered with the Nigeria Data Protection Commission (registration NDPC/DCP/15797). Contact us about privacy at hello@rakunmirewards.com. Our Data Protection Officer is Charles Aborishade, at the same address.
2. What we collect
| What | Examples | Where it comes from |
|---|---|---|
| Your account | Name, username, phone number, email, city, password (stored scrambled) | You, when you join |
| Your payout bank | Account name, bank and last 4 digits of the account number | You, checked by Paystack |
| Purchases at partner shops | Shop, amount, date and time, your code | The shop’s till |
| Your rewards | Cash back, payouts, Gold membership | Worked out by us |
| Payments | Gold payment and payout references (never your card details) | Paystack |
| Messages | Emails we send you and whether they arrived, your replies, unsubscribes | Resend and you |
| Website forms | Newsletter email and first name; shop applications (shop and owner contact details) | You |
We never see your banking password or card details, and we can’t move money out of your account.
3. Why we use it
- To run your account and pay your rewards: confirming purchases recorded at the till, working out cash back, sending payouts. (Needed to provide the service you signed up for.)
- To keep Rakunmi fair and secure: spotting fake or repeated purchases and misuse. (Our legitimate interest, and yours.)
- To meet the law: accounting, tax and the rules for promotions. (Legal obligation.)
- To tell you about Rakunmi: welcome emails, tips and the newsletter. (Your consent or our legitimate interest; you can stop them at any time.)
- To show partner shops their results: shop owners see sales through Rakunmi and your username only, never your phone, email or bank details.
4. Who helps us
We never sell your data. We share it only with companies that help us run Rakunmi, under contracts that protect it:
- Paystack: Gold payments and payouts to your bank.
- Supabase: our secure database and servers. Your account data is stored in Canada.
- Resend: sending our emails, from the United States.
- Hostinger: hosting the pages of our website and the shop till. Your account data isn’t stored there.
Your data leaves Nigeria. Because of the providers above, your personal data is stored and processed in Canada and the United States. Our providers have agreed, in data processing agreements, to protect your data and use it only to run Rakunmi. These agreements give your data the protection the Nigeria Data Protection Act 2023 requires when data is sent outside Nigeria. We only share what each provider needs to do its job. We may also share data when the law requires it, for example with a regulator or the police.
5. How long we keep it
- Your account data: while your account is open.
- When you delete your account, we remove your name, contact details, bank details straight away. Records of purchases and payments are kept, without your name, for as long as the law requires for accounting and tax (up to 6 years). This is also why deleting your data can’t remove those records.
- Website newsletter and shop-application details: until you unsubscribe or ask us to delete them, or once they’re no longer needed.
6. Your rights
Under the Nigeria Data Protection Act 2023 you can ask us to:
- show you the data we hold about you, and give you a copy;
- correct it if it’s wrong;
- delete it (you can delete your account yourself: Account → Delete my account);
- stop or limit using it, or object to how we use it;
- withdraw your consent, for example to marketing emails.
- not be subject to a decision made only by a computer: our systems flag unusual purchases, but a person reviews every flag before any cash back is reversed or an account is suspended, and you can challenge the decision (Terms, section 7).
Email hello@rakunmirewards.com and we’ll reply within 30 days. If you’re not happy with our answer, you can complain to the Nigeria Data Protection Commission (ndpc.gov.ng).
7. Keeping it safe
Data is encrypted in transit, access is limited to the people who need it, admin access needs two-step login, and every admin action is logged. No system is perfectly secure; if something goes wrong that affects you, we’ll tell you and the regulator as the law requires.
8. Emails
New members get a few welcome emails in their first week, and newsletter subscribers get our weekly email. Every one has an unsubscribe link. Messages about your account and payouts still come, because they’re part of the service.
9. Children
Rakunmi is for people aged 18 and over. We don’t knowingly collect data from children; if you think we have, tell us and we’ll delete it.
10. Changes and contact
If we change this policy in an important way, we’ll tell you in the app or by email. Questions: hello@rakunmirewards.com.