We collect only what we need to run your account, wallet and orders, to verify identity where the law or our partners require it, and to prevent fraud. We do not sell your data. For virtual numbers, email and eSIM we currently do not pass your name, phone number or email to our suppliers. Codes and message texts are erased after a short period; transaction and verification records are kept for at least five years because the law requires it. You have rights to access, correct, delete, object and complain to the Nigeria Data Protection Commission.
This policy explains how Wize Data (Business Name Registration No. 9684170), of 162 Upper Umuebu Road, Close to Mountain of Fire, Obiaruku, Delta State, Nigeria ("we"), handles personal data when you use wizedata.com.ng and our apps, API and related services. We are the data controller of the personal data described here. It is written to comply with the Nigeria Data Protection Act 2023 ("NDPA") and the NDPC's General Application and Implementation Directive 2025 ("GAID"), and should be read with our Terms of Service and KYC & Abuse Policy.
Data protection contact: we have designated a person responsible for data protection. Write to support@wizedata.com.ng with the subject "Data Protection" for any privacy question, request or complaint.
| Category | Examples | Where it comes from |
|---|---|---|
| Account data | Name, email, phone number, state, password (stored as a one-way hash), transaction PIN, account type, referral code, API key | You |
| Verification (KYC) data | BVN and/or NIN, date of birth, KYC status and account limits; for Agents, Vendors and high-volume or API accounts possibly ID documents, address and business details | You; our identity-verification and payment partners |
| Wallet and payment data | Wallet balance, funding and purchase history, virtual account details assigned to you, payment references, bank name, account number and account name for withdrawals | You; payment partners |
| Order data | Service ordered, amounts, references, recipient numbers, meter, smartcard, links and usernames, the virtual number or email address and eSIM ICCID issued to you, order status and timestamps | You; our systems |
| Message and code data | Verification codes and message text received on numbers or emails you bought (shown to you in My Numbers) | Third-party senders, via our suppliers |
| Rewards data | Cashback, referral and Airtime Earnings records; who referred whom | You; our systems |
| Technical and security data | IP address, browser and device type, login records, session cookies, the time and version of terms you accepted, rate-limit and error logs | Your device; our systems |
| Support data | Messages you send through live chat, email or WhatsApp, and your complaints | You |
| Library and reading data | Books you own, reading progress, bookmarks and highlights | You |
We do not knowingly collect personal data from children under 18, and we do not collect special categories of data (such as health or religion) on purpose. BVN and NIN are sensitive identifiers and are handled with extra care (Section 7).
| Purpose | Legal basis under the NDPA |
|---|---|
| Create and run your account, wallet and orders; deliver numbers, emails, eSIMs and other services; provide support | Performance of our contract with you |
| Verify identity, apply account limits, screen for fraud and money laundering, keep transaction records, respond to lawful requests from authorities | Compliance with legal obligations; our legitimate interest in preventing fraud and abuse |
| Keep the platform secure, prevent abuse, enforce our Terms, resolve disputes, keep proof that you accepted the Terms | Legitimate interests (and legal obligations where applicable) |
| Pay Cashback, referral rewards and Cash Referral withdrawals | Performance of our contract; legitimate interests |
| Service messages (receipts, security alerts, changes to terms) | Performance of our contract; legitimate interests |
| Promotional messages, if we send any | Your consent, which you can withdraw at any time |
| Improve and troubleshoot the service (for example error logs) | Legitimate interests |
Where we rely on legitimate interests we have considered the effect on you and believe it is justified. You may object (Section 9).
We share personal data only as needed, with:
These parties are bound by contract or law to protect the data. We do not sell personal data.
Some suppliers and tools we use (for example number and eSIM suppliers, live chat, CDN and font services) operate outside Nigeria, so your data, or the messages that arrive on your numbers, may be processed abroad. Where we transfer personal data out of Nigeria we do so only where permitted by the NDPA and the GAID, using safeguards such as adequate protection in the destination country, contractual protections or your informed consent, and limiting what we send.
| Data | Kept for |
|---|---|
| Account data | While your account is open, then as long as needed for the records below |
| KYC data, transaction, wallet and order records (including the number, email or eSIM issued) | At least five (5) years after the transaction or account closure, as required by Nigerian anti-money-laundering law, and longer if the law or a dispute requires |
| Verification codes and message text | Currently 90 days, then erased |
| Proof of acceptance of our terms (date, version, IP address, device) | For as long as your account exists and during the period in which a claim could be brought |
| Provider-call, error and security logs | About 30 days (longer if needed to investigate an incident) |
| Support conversations | Up to 2 years, longer if linked to a dispute or investigation |
| Marketing preferences | Until you withdraw consent or ask us to stop |
When the period ends we delete the data or anonymise it so that it no longer identifies you.
Under the NDPA you have the right to:
To use a right, email support@wizedata.com.ng from the email address on your account, with your phone number and what you want. We may ask you to prove who you are. We will respond without undue delay and aim to do so within 30 days, and we will tell you if a legal exception applies.
Complaints. Please contact us first. You also have the right to complain to the Nigeria Data Protection Commission (NDPC) and to seek a remedy in the courts.
We use technical and organisational measures to protect personal data, including encrypted connections (HTTPS), hashed storage of passwords, access controls, request limits, and logging. No system is perfectly secure. If a breach is likely to put your rights at risk we will notify the NDPC within 72 hours of becoming aware of it, as the NDPA requires, and tell you without undue delay where there is a high risk to you. You help by keeping your password, PIN and API key secret and by telling us at once of any suspicious activity.
Our services are for people aged 18 and over. If we learn that we hold data of a child, we will delete it. If you believe a child has used our services, contact us.
We disclose personal data to the authorities where the law requires or allows it, including on valid court orders and written requests from competent agencies. We review requests, disclose only what is necessary, and may be prohibited from telling you. We may keep and preserve data about an account that we suspect of unlawful activity. See our KYC & Abuse Policy.
We may update this policy. We will post the new version with its date, and for important changes we will tell you in the app or by email. The version at the top of this page is the one in force.
support@wizedata.com.ng (subject "Data Protection"), WhatsApp / phone 09065848571, or by post to 162 Upper Umuebu Road, Close to Mountain of Fire, Obiaruku, Delta State, Nigeria.
Wize Data (Business Name Registration No. 9684170)
162 Upper Umuebu Road, Close to Mountain of Fire, Obiaruku, Delta State, Nigeria
Email: support@wizedata.com.ng · Phone / WhatsApp: 09065848571
Also read: Terms of Service · KYC & Abuse Policy · Reseller & API Terms