Qonet is committed to protecting your personal information in line with the Nigerian Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Regulation (NDPR). This policy explains what data we collect, why, and how you can control it.
Overview
Qonet (“we”, “us”, or “our”) operates the Qonet platform available at qonet.co and related mobile applications. We act as a Data Controller for the personal information you provide to us when using the platform. By using Qonet, you agree to the collection and use of information as described in this Privacy Policy.
We collect only the information necessary to provide our services and will never sell your personal data to third parties.
Data We Collect
Information you provide directly
- Account data — name, email address, phone number, username, password (hashed)
- Profile data — bio, profile picture, location, professional details, social media handles
- Business data — business name, address, registration details, bank account information for payouts
- Transaction data — order details, payment references, campaign briefs, service package information
- Communications — messages sent through the platform, support requests, appeal submissions
Information collected automatically
- Usage data — pages visited, features used, search queries, click paths
- Device data — browser type, operating system, IP address, device identifiers
- Cookie data — session tokens, preference cookies, analytics identifiers (see Cookie Policy)
Information from third parties
- Payment processors — Paystack and Flutterwave provide transaction confirmation data
- Connected services — if you connect your Drogo workspace, we receive limited workspace identifiers
How We Use Your Data
We use your personal information to:
- Create and manage your Qonet account
- Process orders, payments, and payouts
- Match buyers with experts, creators, and businesses
- Run the Campaign Wizard and facilitate influencer/creator campaigns
- Send transactional emails (order confirmations, offer notifications, payment receipts)
- Personalise your experience and improve platform recommendations
- Moderate content and enforce our Community Guidelines
- Comply with legal obligations and respond to regulatory requests
- Investigate and prevent fraud and abuse
We will only send you marketing communications with your explicit consent, and you may opt out at any time via your account settings or the unsubscribe link in any email.
Sharing & Disclosure
We do not sell your personal data. We may share it in the following circumstances:
- Service providers — Paystack, Flutterwave, and cloud infrastructure providers who process data on our behalf under data processing agreements
- Other users — your public profile information (username, bio, public reviews) is visible to other platform users as required to deliver the service
- Business owners — when you interact with a store, the business owner receives your name, contact details, and order information needed to fulfil your order
- Legal obligations — we may disclose data to law enforcement or regulatory bodies when required by Nigerian law or a valid court order
- Business transfers — in the event of a merger, acquisition, or sale of assets, user data may be transferred as part of the transaction with prior notice
Data Retention
We retain your personal data for as long as your account is active or as needed to provide our services. Specifically:
- Active account data is retained until you request deletion
- Transaction records are retained for 7 years to meet financial reporting obligations
- Moderation and safety records may be retained for up to 3 years after account closure
- Server logs and analytics data are typically retained for 90 days
When you delete your account, we anonymise or delete your personal data within 30 days, except where longer retention is required by law.
Your Rights
Under the NDPA 2023, you have the following rights regarding your personal data:
- Right of access — request a copy of the personal data we hold about you
- Right to rectification — correct inaccurate or incomplete data
- Right to erasure — request deletion of your personal data (“right to be forgotten”)
- Right to data portability — receive your data in a machine-readable format
- Right to object — object to processing for marketing purposes
- Right to restriction — request that we limit how we process your data
- Right to withdraw consent — where processing is based on consent, withdraw it at any time
To exercise any of these rights, contact us at privacy@qonet.co. We will respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Nigeria Data Protection Commission (NDPC).
Cookies
We use cookies and similar technologies to keep you logged in, remember your preferences, and understand how the platform is used. For full details, see our Cookie Policy.
Security
We implement industry-standard security measures including TLS encryption for data in transit, hashed password storage (bcrypt), server-side session management, and regular security audits. We restrict access to personal data to employees who require it to perform their job functions.
Despite our efforts, no system is completely secure. If you discover a security vulnerability, please report it responsibly to security@qonet.co.
Children's Privacy
Qonet is intended for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we become aware that a user is under 18, we will promptly delete their account and associated data. If you believe a child has registered on our platform, please contact us at privacy@qonet.co.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make significant changes, we will notify you via email and/or a prominent notice on the platform at least 14 days before the changes take effect. Your continued use of Qonet after the effective date constitutes acceptance of the updated policy.
Contact Us
For privacy-related enquiries: