1. Who we are
ProcaX is operated by [Registered company name], [Registered office address], Lagos, Nigeria ("we", "us"). We are the data controller for the personal data described in this policy, and we process it in line with the Nigeria Data Protection Act 2023 (NDPA).
2. What we collect
- Account details: username, email address, phone number (optional) and your password, which is stored only in a securely hashed form.
- Company profile: company name, RC number, industry, website, address and logo, if you provide them.
- Saved items and preferences: tenders and opportunities you save, and your email notification choices.
- Subscriptions and payments: your plan, billing dates and payment references. Card payments are handled by Paystack: we never see or store your card number. We keep a reusable payment authorisation code from Paystack so renewals can be charged, plus the transaction amount and status.
- Service requests: what you tell us in quote requests, enquiries and order messages, and any documents you attach.
- Technical data: your IP address (used to protect sign-in and contact forms from abuse) and error reports when something goes wrong.
3. How we use it
- To create and run your account, and to show you tenders, opportunities and services.
- To process subscriptions and renewals, and to send receipts.
- To prepare quotes and deliver the services you order, and to talk to you about them.
- To send the emails you've chosen: saved-tender alerts, opportunity alerts and reminders, quote and order updates, and subscription reminders. You can switch these off at any time under Notifications.
- To keep the platform secure, prevent fraud and fix errors.
We do not sell your personal data, and we do not use it for third-party advertising.
4. Legal basis
We process your data to perform our contract with you (your account, subscription and orders); because you consented (optional emails such as new-opportunity alerts, which you can withdraw at any time); to meet legal obligations (such as keeping payment records); and for our legitimate interests in keeping the platform secure and working well.
6. How long we keep it
We keep your account data while your account is open. Payment and order records are kept for as long as tax and accounting law requires. When you ask us to close your account, we delete or anonymise your personal data unless we must keep it by law.
7. How we protect it
All traffic to ProcaX is encrypted (HTTPS). Passwords are hashed, sign-in is rate-limited, private tender and quote documents can only be downloaded by people allowed to see them, and access to the admin console is limited to authorised staff.
8. Your rights
Under the NDPA you can ask us to:
- give you a copy of your personal data;
- correct data that is wrong (you can update most of it yourself in My account);
- delete your data;
- restrict or object to how we use it;
- give your data to you in a portable format;
- withdraw your consent to optional emails at any time.
Email hello@procax.net to use any of these rights. We'll reply within 30 days.
10. Children
ProcaX is for businesses and adults. Some opportunities, such as scholarships, may suit younger applicants, but you must be at least 18 to create an account.
11. Changes to this policy
We'll update this page if our practices change, and we'll email account holders about significant changes.
12. Contact and complaints
Questions about your data: hello@procax.net, or write to [Registered company name], [Registered office address], Lagos, Nigeria.
If you're unhappy with how we've handled your data, you can complain to the Nigeria Data Protection Commission (NDPC).