Privacy Policy & Data Protection Notice

Depending on your interaction with our marketplace, we may collect:

• Account & Profile Data: Name, verified email address, phone number, role identification, and profile avatar.
• KYC & Identity Verification Data: National Identification Number (NIN) slips, international passport biodata, driver's license numbers, and biometric selfie checks.
• Commercial & Showroom Data: CAC Certificate of Incorporation, Status Reports, Tax Identification Number (TIN), business registration address, and showroom operating hours.
• Vehicle Documentation: Vehicle Identification Numbers (VIN), chassis numbers, Single Goods Declaration (SGD) import papers, roadworthiness certificates, and police extract records.
• Technical & Telemetry Data: IP address, device fingerprint, browser client headers, operating system, and session tokens.

We process your data strictly under lawful legal bases:

• Service Delivery: Managing your vehicle listings, processing search queries, and generating instant comps.
• Fraud Mitigation: Verifying seller identity and Customs SGD authenticity to protect the marketplace from cloned or stolen cars.
• Inspection Dispatch: Linking buyers with certified field technicians and routing physical inspection assignments.
• Legal & Regulatory Compliance: Complying with statutory reporting obligations under the NDPA, EFCC guidelines, and NCS import directives.

To safeguard sellers from unsolicited sales calls, stalking, and off-platform fraudulent escrow scams, mycarsNg enforces a strict Masked Contact Architecture:

All payment transactions (including inspection escrows, dealership showroom plans, and advertising campaigns) are tokenized and processed via Paystack, a PCI-DSS Level 1 certified payment service provider.

mycarsNg never stores, views, or logs full debit or credit card PANs, CVVs, or card PINs on our servers. We receive only cryptographic transaction references, payment confirmation tokens, and masked bank settlement accounts for technician payouts.

We do not sell, rent, or trade your personal information to third parties. We share data only with trusted infrastructure sub-processors under binding confidentiality agreements:

• Neon Cloud PostgreSQL: Managed encrypted cloud database storage.
• Cloudinary: Secure CDN storage for vehicle photos and inspection condition reports.
• Brevo (Sendinblue): Secure dispatch of OTP verification emails and transaction alerts.
• Paystack: Real-time payment processing and HMAC webhook settlement.

Under the NDPA 2023, you have the right to:

• Request access to copies of personal data held on your profile.
• Request rectification of inaccurate vehicle ownership or identity records.
• Request erasure ("Right to be Forgotten") of your account and personal identifiers, subject to statutory fraud prevention retention windows.
• Object to automated profiling or marketing communications.

If you have questions, complaints, or wish to exercise your data rights, please contact our designated Data Protection Officer: