Introduction
This Website/App is the property of SID Digital Limited (hereinafter referred to as “SID Digital”, “we” or “us”), a digital solutions company enabled to facilitate secure and efficient electronic payment systems including provision of payment gateway services for online transactions, processing electronic funds transfers, enabling digital wallets, virtual accounts, recurring payments, and subscription management to a wide range of customers. This Privacy Policy gives you a clear view of how we use personal information that you provide, our dedication to protecting it and your rights and the options you have to control your personal information and protect your privacy. It also outlines what personal information we collect about you when you visit our website https://secureid.bucca.com.ng/
When you use our mobile apps, speak to our Contact Centre, and how we use your personal information.
It also sets out how to contact us if you have any questions about this Privacy Policy or want to make a complaint to us about how we handle your personal information. By accessing and/or using the services or by submitting personal information to us, you agree that we may collect, use and disclose such personal information in accordance with this privacy policy and as permitted or required by law. If you have any questions about this Privacy Policy or how we handle your personal information, please contact us at dpo@secureidltd.com
Personal Information We Collect About You
We strive to provide secure, relevant and efficient services to provide a great user experience. To do so, we may collect your personal information as described in this policy. Personal information is defined as information that can or does identify you as an individual or otherwise as contained in the Nigeria Data Protection Act 2023/Nigerian Data Protection Regulation (NDPR) 2019 and any amendments thereto.
The types of personal information we may collect include, but are not limited to:
Profile & Contact Data (e.g. your first name, last name, telephone number, corporate e-mail address, personal e-mail address, password). This information is generally collected from you or your employer;
Employer Data (e.g. your employer name, office address, employees). This information is generally collected from your employer.
Transaction Data(e.g. the history of your purchases and your order details. This includes:
what you purchased
your order mode
date, time of purchase
amount paid for order
payment method (Company or personal)
in-App notes
This information is generally collected from you.
Browsing Data (e.g. access dates and times, which features you used, duration of visit, crashes). This information is generally collected from you or third parties.
Survey Data (e.g. if you choose to participate in one of our User surveys or research initiatives, we collect your answers and use the information and survey results to help us understand our users and tailor our service offerings). This information is generally collected from you.
How we collect your personal information
We collect personal information about you in the following ways:
Information you give us
We collect personal information from you when you. For example:
Register your account, submit comments or reviews on the Website or the App.
use our Website, App.
contact our customer support services
complete a survey.
communicate through the Website or App.
Information we collect from others
We collect personal information from you when you. For example:
Register your account, submit comments or reviews on the Website or the App.
business partners such as third-party payment providers or other apps and websites that we may integrate with.
marketing service providers.
Restaurants in our online ordering system that allow us to accept pickup or delivery.
your employer if they have signed up our product or services.
Purpose for processing your personal information
Below we explain the main purposes for which we use your personal information and the legal basis for processing your data:
Profile Data
Your Profile Data may be used to assist you when you contact Customer support, to direct your inquiry appropriately, and follow-up to ensure the inquiry has been satisfied.
We may share your Profile Data with our restaurants for the purpose of managing the relationship with you, including to fulfil your order and at pick up.
We may share your Profile and Transaction Data with partner apps should you choose to register and access Ritual through those apps. The purpose is to improve our Service and manage our relationship with you.
Ritual may also share with our partner restaurants analytics on App usage and customer trends. We do not share your contact information with our restaurants without your express consent.
Our legal basis for processing this information includes:
consent
performance of a contract with you or your employer
legitimate interest
Contact Data
Your Contact Data may be used to assist you when you contact user support, direct your inquiry appropriately, and to follow-up to ensure the inquiry has been satisfied. This may include sharing specifics about customer reviews and complaints with our restaurants.
We may communicate with you via text message for various reasons. Standard text message and data rates may apply. If you wish to stop receiving text messages from us, respond to one of our text message with the word ‘STOP’.
Our legal basis for processing this information includes:
consent
performance of a contract with you
Restaurants have access to your order history to improve services delivered to you.
Our legal basis for processing this information includes:
consent
performance of a contract with you
Browsing Data
Browsing Data may be used to:
troubleshoot software bugs and address operational problems;
personalize our services and communications. Personalization features may include showing you recommendations while content features include allowing you to share reviews, ratings, tags, and discussions;
for testing, research, analysis, and development of our Services.
We may also share this information with third parties for industry analysis and statistics such as Google Analytics.
Our legal basis for processing this information includes:
our interest to improve our services, troubleshoot software bugs and operational problems, deliver relevant content to you.
Survey Data
We may offer you the opportunity to participate in one of our user surveys or research. Participation in user surveys or research is completely optional. If you choose to participate, we use the information and survey results to help us understand our users and to tailor and enhance our service offerings and promotions.
Our legal basis for processing this information includes:
consent
If you fail to provide personal data?
Where we need to collect personal data by law, or under the terms of a contract we have with you or your employer, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you or your employer (for example, to provide you with our products or services). In this case, we may have to cancel the product or service you or your employer may have with us but we will notify the appropriate party if this is the case at the time.
Sharing your personal data
Irrespective of how we obtain your personal data, it may be shared among all our offices as may be found on our website. All our offices will always ensure at least a standard level of data protection is always in place. Where we share your personal data with third parties, we will do this in accordance with applicable data protection laws and implement appropriate measures to safeguards your information.
Change of purpose
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
Children's data
Our Services are not intended for, directed at or marketed to persons below the age of 18. We do not knowingly collect personal information from anyone under the age of 18.
International transfers
Data will be processed within Nigeria. If in the course of our operations, we transfer personal data outside our country of operation, we shall ensure any cross-border data transfers adhere to all necessary data protection regulations. This means that before transferring personal data, we either confirm that the recipient country has robust data protection laws or, if not, employ specific contractual terms and other appropriate safeguards to protect the data. In cases where the destination country might not meet stringent data protection standards, we will leverage the relevant data transfer mechanism, seek authorisation from the regulator, or obtain your consent before proceeding and inform you of any risks. Should you wish to learn more about how we ensure data protection during these transfers, details will be provided upon request.
Your rights as a data subject
Subject to certain limitations and under certain circumstances, you may have the following legal rights to your personal information:
Request access to your personal data.
Request correction of your personal data.
Request erasure of your personal data.
Object to processing of your personal data.
Request restriction of processing your personal data.
Request transfer of your personal data.
Right to withdraw consent.
lodge a complaint with a relevant authority where you have reason to believe that we have violated the term(s) of this Notice. (You may complain or seek redress from us within 30 days from when you first detect the alleged violation.)
It is important that you know that if you request erasure, object to our processing of your personal data or request the restriction of our processing of your personal data we may not be able to provide our services. You also have the right to withdraw your consent for a specific processing at any time. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legal basis for doing.
You may seek to exercise any of the above rights at any time by sending us an email at dpo@secureidltd.com
The supervisory authority is the Nigerian Data Protection Commission (NDPC), and you can send your complaint via email to info@ndpc.gov.ng
Data retention period
We will retain your personal information until you or your employer cancels your account with us in order to meet our contractual obligations, to otherwise meet legal requirements or until it is no longer required for the purposes stated above.
Otherwise, we will de-identify your data, unless this data is necessary to comply with a legal obligation or resolve disputes. Alternatively, we will securely erase your information where we no longer require your information for the purposes collected.
Safeguarding your personal information
We take appropriate technical, physical and organizational security measures to protect personal information in our custody and control against unauthorized access, use, modification and disclosure, and accidental loss, destruction and damage.
No security system is impenetrable. We cannot guarantee the security of our database, nor can we guarantee that the information you or your employer supply will not be intercepted while being transmitted to us over the Internet. Any transmission of information by you or your employer respectively to us is at your own risk. Where you have chosen a password that allows you to access our Website or App, you are responsible for keeping this password confidential. We strongly recommend that you do not share your password with anyone.
Cookies and Tracking Technologies
Cookies are small files placed on your device by websites to record your browsing history. They usually do not contain personal identification but can be linked to your stored personal data.
Additionally, browser or device fingerprinting collects unique information like browser type and hardware used, enabling tracking of your interactions with websites and apps. We use fingerprinting to identify you when interacting with other websites or servers.
We use cookies and similar tracking technologies to collect information about your browsing behavior and preferences. Specifically, we use the following cookies:
Performance Cookies: These cookies enable us to collect data through platforms like Google Analytics about how people use our website. This data helps us improve our website for users.
You can adjust your browser settings to refuse cookies or to be notified when cookies are being used.
Third-party links
Our Website or App may contain links to other sites that we do not own or operate. Except as provided in this Privacy Policy, we will not give any of your personal information to these third parties without your consent. We provide links to third-party websites as a convenience. These links are not intended as an endorsement of or referral to the linked websites.
The linked websites have separate and independent privacy statements, notices and terms of use, which we recommend you read carefully. We do not have any control over such websites, and therefore we have no responsibility or liability for the manner in which the organizations that operate such linked websites may collect, use or disclose, secure and otherwise treat your personal information.
Updates to our privacy policy and your duty to inform us of changes
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
We may update this Privacy Policy to reflect changes to our information practices. If we make any material changes to this policy, we may notify you by email and/or by means of a notice on the Website or App or via your employer. We encourage you to periodically review this page for the latest information on our privacy practices.
We have appointed a Data Protection Officer (DPO) who is responsible for overseeing questions in relation to this privacy policy. If you have any questions about this privacy notice, including any requests to exercise your legal rights, please contact the DPO using the details set out below:mdpo@secureidltd.com