Legal

Privacy Policy

Aligned with the Data Protection and Privacy Act 2019 (DPPA 2019).

What we collect

Full name, phone number, mobile money number, National ID (NIN) or passport number, unit/apartment number, and — where you choose to share it — GPS location.

Legal basis

We process your personal data on the basis of your consent under the DPPA 2019, given via the consent checkbox on every form that collects it: "I consent to SGU collecting and processing my PII for utility account creation and service activation under the DPPA 2019."

How it's stored

Sensitive KYC data (NIN numbers, mobile wallet numbers, GPS locations) is encrypted at rest using AES-256, stored on access-controlled cloud databases with role-based access control, and every read of PII fields is audit-logged. Data is retained only as long as needed for your account and service history, and you may request deletion at any time (see "User rights" below).

Third parties

We share data with Mobile Money gateways (MTN and Airtel) for the sole purpose of settling payments. We do not sell your data to advertisers or any other third party.

Your rights

You have the right to access, correct, and request deletion of your personal data, and to escalate a complaint to the Personal Data Protection Office (PDPO) if you believe your rights have not been respected.

This page is a content outline pending final legal review — do not treat it as legal advice.