Privacy Policy

1. Introduction

iCheck ("we," "our," or "us") operates a verification platform that helps individuals build and verify their identity, employment history, and address history. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information.

By using iCheck, you consent to the data practices described in this policy. This policy complies with:

• Nigeria Data Protection Regulation (NDPR) 2019
• National Information Technology Development Agency (NITDA) Guidelines
• Nigerian Constitution provisions on privacy

2. Information We Collect

2.1 Personal Information

When you register and use iCheck, we collect:

• Identity Information: Full name, date of birth, National Identification Number (NIN), photograph, gender
• Contact Information: Email address, phone number, residential address
• Employment Information: Company names, positions held, employment dates, supervisor contacts
• Address History: Current and previous addresses, landlord information, duration of residence
• Verification Documents: Utility bills, employment letters, government-issued IDs

2.2 Automatically Collected Information

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, time spent, features used)
• Cookies and similar tracking technologies

2.3 Third-Party Data

We integrate with:

• NIMC (National Identity Management Commission): For identity verification via NIN
• Previous Employers: For employment verification (with your consent)
• Landlords/Property Managers: For address verification

3. How We Use Your Information

3.1 Primary Purposes

• Identity verification and authentication
• Employment and address history verification
• Calculating and displaying your verification score
• Providing verification reports to authorized third parties
• Account management and customer support

3.2 Legal Basis (NDPR Compliance)

We process your data based on:

• Consent: You explicitly agree to data processing when registering
• Contract Performance: Processing necessary to provide our verification services
• Legal Obligation: Compliance with Nigerian laws (KYC, AML regulations)
• Legitimate Interest: Fraud prevention, platform security, service improvement

4. Data Sharing and Disclosure

4.1 When We Share Your Information

We may share your personal data with:

• Verification Partners:
  • Employers (for employment verification)
  • Landlords (for address verification)
  • NIMC (for identity verification)
• Authorized Third Parties:
  • Banks and financial institutions (with your consent)
  • Potential employers requesting background checks
  • Property management companies
• Service Providers:
  • Cloud hosting providers (data stored in Nigeria or within ECOWAS)
  • Payment processors
  • Email and communication service providers
• Legal Requirements:
  • Law enforcement agencies (when legally required)
  • NITDA and regulatory authorities
  • Courts and legal proceedings

4.2 Data Transfers

Your data is primarily stored in Nigeria. Any international data transfers comply with NDPR requirements, including:

• Transfer to countries with adequate data protection laws
• Use of Standard Contractual Clauses approved by NITDA
• Your explicit consent for international transfers

5. Your Rights Under NDPR

• Right of Access: Request copies of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (subject to legal obligations)
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to certain processing activities
• Right to Withdraw Consent: Withdraw consent at any time
• Right to Lodge a Complaint: Complaint to NITDA if you believe your rights are violated

To exercise these rights, contact our Data Protection Officer:

6. Data Security

We implement industry-standard security measures including:

• Encryption: All data transmitted using TLS/SSL encryption
• Access Controls: Role-based access with multi-factor authentication
• Data Minimization: Collect only necessary information
• Regular Audits: Security assessments and penetration testing
• Staff Training: Regular data protection training for all employees
• Incident Response: 72-hour breach notification to NITDA and affected individuals

7. Data Retention

We retain your personal data for:

• Active Accounts: Duration of account + 7 years (for verification history)
• Closed Accounts: Up to 7 years from closure (legal and regulatory requirements)
• Verification Records: 10 years (as required by Nigerian employment law)
• Marketing Data: Until consent is withdrawn

8. Children's Privacy

iCheck is not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately.

9. Cookies and Tracking

We use cookies and similar technologies. For detailed information, see our Cookie Policy.

10. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of material changes via:

• Email notification
• Prominent notice on our platform
• In-app notifications

Continued use of iCheck after changes constitutes acceptance of the updated policy.

11. Complaints and Regulatory Authority

If you believe we have violated your data protection rights, you may lodge a complaint with:

12. Contact Us

For questions about this Privacy Policy or our data practices: