Privacy Policy | REMCAN Realers

1. Introduction

REMCAN Realers is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in compliance with:

Nigeria Data Protection Regulation (NDPR) 2019
Nigeria Data Protection Act 2023
Other applicable Nigerian laws and regulations

2. Information We Collect

2.1 Account Registration Data

Full legal name
Email address
Phone number
Password (stored in hashed format)
State of operation within Nigeria

2.2 Identity Verification Data

Government-issued Identity Documents (NIN slip or Passport)
Biometric facial recognition data
Liveness detection data (blink patterns, head movements)

2.3 Location Data

GPS coordinates (latitude and longitude)
State and local government area
IP address-based location

2.4 Usage Data

Pages visited and features used
Device and browser information
Security and audit logs

3. How We Use Your Information

Primary Purposes

Identity verification and credentialing
Generate and issue REMCAN Realer ID credentials
Provide Platform services
Security and fraud prevention
Legal compliance

4. Data Security

We implement industry-standard security measures:

Encryption

• AES-256 for data at rest
• TLS 1.2+ for data in transit
• Bcrypt password hashing

Access Controls

• Role-based access control
• Multi-factor authentication
• Regular access reviews

5. Your Privacy Rights

Under Nigerian data protection law, you have the following rights:

Right to Access

Request a copy of your personal data

Right to Rectification

Correct inaccurate personal data

Right to Erasure

Request deletion of your personal data

Right to Data Portability

Receive your data in machine-readable format

To exercise these rights, contact us at [email protected]

6. Data Retention

Data Type	Retention Period
Account information	Duration of account + 30 days
Biometric data	Duration of account + 30 days
Identity documents	Duration of account + 30 days
Audit logs (general)	90 days
Audit logs (security)	180 days

7. Biometric Data Privacy

Special Protections

Biometric data receives enhanced protection. We obtain your explicit consent before collection, encrypt data using AES-256, store it separately from other data, and delete it within 30 days of account deletion. We never sell, lease, or trade biometric data.

8. Contact Information

Data Protection Officer

Email: [email protected]

Privacy: [email protected]

Nigeria Data Protection Commission

Website: https://ndpc.gov.ng

Email: [email protected]

Version: 1.0 | Last Updated: February 26, 2026 | Next Review: February 26, 2027