Skip to content
betapawa

Privacy notice

Last updated 1 October 2026

Draft for legal review before launch.

Betapawa Ltd is the data controller for personal data collected on this website. This notice explains what we collect, why, and your rights under the Nigeria Data Protection Act 2023 (NDPA).

What we collect

  • Contact details: name, phone, email, delivery address
  • Order, payment status and installation records (we never see full card details)
  • For Pay Small Small: BVN, NIN, employment, income band and bank statement data
  • Calculator inputs and support tickets
  • With your consent, analytics and marketing cookies

Why we use it

  • To deliver, install and support your system (contract)
  • To process instalment applications with lending partners (consent and contract)
  • To meet legal and tax obligations (legal obligation)
  • To improve the site and measure ads, only with your consent

Credit applications

BVN and NIN are verified through a licensed identity provider. We store only the verification result and masked numbers in our admin; full values are encrypted at rest with restricted, logged access.

Bank statement data is passed to the lender you choose and deleted from our systems within 30 days. Lenders process your data as independent controllers under their own privacy notices.

Who we share it with

  • Crestgreen Energy and certified installers, to install and maintain your system
  • Payment processors (Paystack, Flutterwave) and lending partners
  • Messaging providers (WhatsApp, Termii, Resend) to send receipts and reminders
  • Analytics providers, only with consent; no personal data is sent in analytics events

How long we keep it

Order and warranty records: for the life of the longest warranty plus 1 year. Credit application data: as required by lenders and regulation, then deleted. Marketing preferences: until you withdraw consent.

Your rights

You can access, correct, export or delete your data, withdraw consent, or object to processing. Download your data or request deletion from your account, or email privacy@betapawa.ng. You can complain to the Nigeria Data Protection Commission.

Security

Data is encrypted in transit and at rest, admin access requires two-factor authentication and is role-based and logged, and backups are taken daily with 30-day retention.