NDPR Compliance
The Nigeria Data Protection Regulation, and the Nigeria Data Protection Act that followed it, govern how personal data is collected and used in Nigeria. This page sets out how Traxx applies those requirements.
1. Data we process under NDPR
As a fleet management platform, Traxx processes personal data belonging to three groups: fleet account users (dispatchers and managers), riders (including NIN and BVN submitted for KYC), and customers who receive a tracking link. Each group's data is processed only for the purposes described in our Privacy Policy.
2. Legal basis for processing
- Contract performance: processing rider and account data is necessary to provide the fleet management service the business has signed up for.
- Legitimate interest: flag detection and audit logging serve the fleet operator's legitimate interest in verifying use of company assets.
- Consent: riders are informed by their fleet manager, at the point of registration, that GPS tracking will be active during shift hours. This consent is a condition fleet managers must confirm under our Terms of Service.
3. Your rights as a data subject
Under NDPR, anyone whose data Traxx processes has the right to:
- Request a copy of the personal data we hold about them.
- Request correction of inaccurate data.
- Request deletion of their data, subject to legal retention requirements.
- Object to processing based on legitimate interest.
- Withdraw consent where consent is the basis for processing, without affecting processing carried out before withdrawal.
Riders should raise these requests with the fleet operator who registered them, since the fleet operator is the primary data controller for rider information. Traxx can be reached directly for anything related to account-holder or website data.
4. How to exercise these rights
Email contact@traxx.ng with the subject line "NDPR Request" and specify which right you are exercising. We verify the identity of the requester before acting, and respond within the timeframes NDPR sets out.
5. Cross-border data transfer
Traxx's infrastructure providers may process data outside Nigeria. Where this happens, it is done under providers that maintain adequate data protection safeguards, consistent with NDPR's rules on cross-border transfer.
6. Breach notification
In the event of a data breach affecting personal data, Traxx follows the incident response process described in our Security page, including notifying affected accounts and, where required, the Nigeria Data Protection Commission, within the timeframes NDPR requires.
7. Data Protection Officer
Questions about our NDPR compliance can be directed to our data protection contact at contact@traxx.ng.