Privacy Policy

Overview

Nadira is a business management platform developed and operated by GigaNet Portal ("we," "us," or "our"), providing tools for freelancers, gym operators, and service businesses to manage clients, bookings, subscriptions, and payments.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Nadira mobile application and web platform (collectively, the "Service"). By accessing or using our Service, you consent to the practices described in this policy.

Information We Collect

Information You Provide Directly

• Account registration: Name, email address, phone number, business name, and password.
• Business profile: Business type, location, operating hours, services offered, and pricing.
• Payment information: Billing address and payment method details processed through our payment partners (we do not store full card numbers).
• Client records: Customer names, contact details, appointment history, and membership data that you enter into the platform.
• Communications: Messages and support requests you send to us.

Information Collected Automatically

• Usage data: Features accessed, pages viewed, actions taken, and time spent in the app.
• Device information: Device type, operating system, browser type, and unique device identifiers.
• Log data: IP address, access timestamps, error logs, and referring URLs.
• Location data: General location based on IP address (not precise GPS unless expressly granted).

Information from Third Parties

• Authentication data when you sign in using Google or Apple.
• Payment verification data from our licensed payment gateway partners and acquiring banks. This is limited to the transaction status, the transaction reference, and the last four digits and brand of the card.

How We Use Your Data

We use the information we collect to:

• Create, maintain, and secure your account.
• Provide and operate all features of the Nadira platform.
• Process payments and send transaction confirmations.
• Send appointment reminders, subscription alerts, and service notifications.
• Respond to customer support inquiries.
• Analyse usage patterns to improve and develop new features.
• Detect, prevent, and address fraud, abuse, or security incidents.
• Comply with applicable legal and regulatory obligations (including CBN, NDPC in Nigeria and UAE data regulations).
• Send platform updates, policy changes, and promotional communications (you may opt out at any time).

Sharing Your Data

We do not sell, rent, or trade your personal information. We may share your data only in the following circumstances:

• Service providers: Trusted vendors who assist us in operating the platform (cloud hosting, payment processing, email delivery, analytics) under strict confidentiality agreements.
• Payment gateway partners: Our licensed payment gateway partners and acquiring banks process card data directly under their own PCI-DSS certified frameworks. Card details are entered on their secure pages and are never passed to us.
• Legal obligations: We may disclose data if required by law, court order, or regulatory authority in Nigeria, UAE, or other applicable jurisdictions.
• Business transfers: In connection with a merger, acquisition, or sale of assets, user data may be transferred with prior notice to affected users.
• With your consent: Any other sharing will only occur with your explicit permission.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. After account deletion:

• Account and profile data is deleted within 30 days.
• Transaction and financial records are retained for up to 7 years as required by Nigerian and UAE financial regulations.
• Anonymised analytics data may be retained indefinitely.

You may request earlier deletion of your data by contacting us (see Contact Us), subject to legal retention requirements.

Security

We implement industry-standard technical and organisational safeguards to protect your data, including:

• TLS/HTTPS encryption for all data in transit.
• Encrypted storage for sensitive data at rest.
• Role-based access controls limiting internal data access.
• Regular security assessments and vulnerability monitoring.

Nadira takes appropriate steps to ensure data privacy and security, including through various hardware and software methodologies. However, Nadira (website) cannot guarantee the security of any information that is disclosed online.

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. The User is responsible for maintaining the confidentiality of his account and password.

Payment Card Data

Nadira will not pass any debit or credit card details to third parties. Card details are entered directly on the secure, PCI-DSS certified page of our payment gateway partner and are never transmitted to or held on Nadira's servers.

We retain only the information we need to service your account and meet our financial record-keeping obligations: the transaction reference, the amount and currency, the date, the transaction status, and the card brand together with the last four digits of the card number. This is not sufficient to make a charge and cannot be used to reconstruct a card number.

Nadira takes appropriate steps to ensure data privacy and security, including through various hardware and software methodologies. However, Nadira (website) cannot guarantee the security of any information that is disclosed online.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Request deletion of your personal data, subject to legal obligations.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests or for direct marketing.
• Withdraw consent: Withdraw consent at any time where processing is consent-based.

To exercise any of these rights, contact us at privacy@nadira.app. We will respond within 30 days.

Cookies & Tracking Technologies

Our web platform uses cookies and similar technologies for:

• Essential cookies: Necessary for the platform to function (session management, authentication).
• Analytics cookies: Understand how users interact with our platform (Google Analytics or equivalent).
• Preference cookies: Remember your settings and preferences.

You can control cookies through your browser settings. Disabling essential cookies may affect platform functionality. Our mobile app uses equivalent device-based identifiers for analytics.

Full details of every cookie we set, how long it lasts, and how to refuse it are published in our Cookie Policy.

Third-Party Services

Nadira integrates with third-party platforms to enhance functionality. These include:

• Payment gateways: Licensed, PCI-DSS compliant payment gateway partners — governed by their respective privacy policies.
• Cloud infrastructure: Hosting and storage providers.
• Communication tools: WhatsApp Business API (Meta) for client notifications where enabled.
• Analytics platforms: For product usage monitoring.

We recommend reviewing the privacy policies of any third-party services you interact with through Nadira.

Children's Privacy

Nadira is a business management platform intended for users aged 18 and above. Customers using the website who are minors, under the age of 18, shall not register as a User of the website and shall not transact on or use the website.

We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal information, please contact us immediately and we will delete such data promptly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by:

• Posting the updated policy on this page with a revised "Last Updated" date.
• Sending an in-app notification or email for significant changes.

Your continued use of the Service after such changes constitutes your acceptance of the updated policy.

Contact Us

For privacy-related inquiries, data subject requests, or concerns about this policy, please contact us: