Privacy Policy

ChekSure Technologies Limited is the data controller for personal data processed through our platform. For any data-related queries, contact our Data Protection Officer at privacy@cheksure.com.

We collect the following categories of personal data:

We do not store full payment card numbers. All card transactions are handled directly by Paystack or Stripe, who are PCI-DSS compliant.

We use your personal data to:

• Process and fulfil your service booking
• Communicate booking status, inspector assignment, and report delivery
• Process payments and issue receipts
• Respond to your enquiries and support requests
• Send service-related notifications via WhatsApp, SMS, or email
• Improve our platform and mechanic network quality
• Comply with legal obligations

We only send marketing communications if you have explicitly opted in. You can opt out at any time via your account settings or by contacting us.

Under the NDPR, our legal bases for processing your personal data are:

• Contract performance: Processing necessary to fulfil your booking
• Legitimate interests: Platform security, fraud prevention, service improvement
• Consent: Marketing communications (where opted in)
• Legal obligation: Tax records, regulatory compliance

We share your data only where necessary:

• Assigned mechanics: Name and vehicle location shared to fulfil the inspection
• Payment processors: Paystack (Nigerian payments) and Stripe (international payments)
• Cloud infrastructure: Supabase (database), Cloudinary (photo storage), both with appropriate data processing agreements
• Communication services: WhatsApp Business API and Termii (SMS) for booking notifications

We do not sell your personal data to third parties. We do not share your data with car sellers or dealers.

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy:

• Booking and report data: 7 years (for tax and legal compliance)
• Account data: Until account deletion + 30 days
• Usage/analytics data: 26 months
• Marketing consent records: 3 years from last interaction

As a data subject, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Correct inaccurate or incomplete data
• Right to erasure: Request deletion of your data (subject to legal retention requirements)
• Right to restrict processing: Ask us to limit how we use your data
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to withdraw consent: Opt out of marketing at any time

To exercise any of these rights, email privacy@cheksure.com with your request. We will respond within 30 days.

Our website uses essential cookies to function (session management, CSRF protection) and optional analytics cookies to understand how visitors use the site. You can manage cookie preferences via the banner shown on first visit. We do not use tracking cookies for advertising. For more information, see our cookie section.

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, access controls, and regular security audits. In the event of a data breach, we will notify affected users and the National Information Technology Development Agency (NITDA) within 72 hours as required by the NDPR.

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on our website. The updated policy will carry a new effective date.

For privacy questions or to exercise your rights, contact our Data Protection Officer at privacy@cheksure.com.

If you believe your rights have been violated, you have the right to lodge a complaint with the National Information Technology Development Agency (NITDA) at nitda.gov.ng.