Privacy
KOLEKT Privacy Policy
This Policy explains how KOLEKT processes personal data in connection with the Service. It should be read with the Terms and Conditions.
Effective date: 21 August 2026 · Version: 2026-08-21
1. Scope and roles
This Privacy Policy explains how KOLEKT handles personal data when people use the Service. KOLEKT acts as a controller for account, security, billing, and platform-support data. A business using KOLEKT normally acts as controller for its customers’ invoice and contact data; KOLEKT processes that data on the business’s instructions to provide the Service.
2. Personal data we process
This may include user and business profile details; login and security information; customer names, phone numbers, email addresses, invoice descriptions and amounts; payment references and statuses; receipt files; support communications; device, IP, and activity-log data; and gateway configuration details supplied by a business.
3. Why we use personal data
We use data to create and operate accounts, provide invoicing and payment-record features, generate authorised notifications, protect the Service, troubleshoot, respond to support requests, comply with legal obligations, and improve the Service. We do not sell personal data or use invoice/customer information for unrelated advertising.
4. Legal bases
Depending on the activity, processing may be necessary to perform a contract, comply with a legal obligation, pursue legitimate interests such as security and fraud prevention, or rely on consent where required. Businesses are responsible for establishing and documenting the appropriate lawful basis for their customer data and messages.
5. Sharing and international transfers
We share data only as needed to operate the Service: with hosting and infrastructure providers, email and messaging providers, the business’s selected payment gateway, professional advisers, and authorities where legally required. A provider may process data outside Nigeria. Where this occurs, appropriate contractual, technical, or other safeguards should be used as required by applicable law.
6. Retention
We retain account, invoice, payment, receipt, and activity records for as long as the account is active and afterward only for the period reasonably needed for support, security, dispute resolution, tax, audit, or legal obligations. Businesses can request deletion or export through the Service, subject to records that must be retained by law or for legitimate security purposes.
7. Your rights and choices
Subject to applicable law, you may request information about your data, access, correction, deletion, restriction, objection, portability, or withdrawal of consent. Invoice recipients should first contact the business that issued the invoice, because it controls that customer data. Account holders may make platform-data requests through KOLEKT support. You may also complain to the Nigeria Data Protection Commission.
8. Security and incidents
We use reasonable administrative, technical, and organisational safeguards, including access controls and server-side protection for sensitive settings. No system is completely secure. If a personal-data breach requires notification, we will assess and respond in line with applicable law, including notifying the relevant business, regulator, or affected people where required.
9. Cookies and changes
KOLEKT uses essential browser storage and cookies needed for sign-in, security, and preferences. If analytics or optional cookies are introduced, we will provide a suitable notice and choice where required. We may update this Policy to reflect legal, operational, or product changes; the current version and effective date will be displayed here.
10. Contact
For platform privacy requests, contact KOLEKT through the in-app support channel and identify the account email, request type, and relevant invoice or business where applicable. For invoice, payment, receipt, refund, or service-delivery questions, contact the merchant named on the invoice.