Privacy Policy

Wadata HR Solutions Limited · Last updated: April 2026

This policy explains what personal data Wadata HR collects, why we collect it, how we use it, and your rights. We have written it in plain language because we believe you deserve to understand exactly what happens to your data.

1. Who we are

Wadata HR is operated by Wadata HR Solutions Limited, a company registered in Nigeria with its principal place of business in Awka, Anambra State.

When this policy refers to "Wadata HR", "we", "us", or "our", we mean Wadata HR Solutions Limited. When it refers to "you", we mean the business owner, administrator, or individual accessing our platform.

You can contact us at: privacy@wadatahr.com

2. Information We Collect

We collect the following categories of personal and business data:

Account Information: Name, email address, WhatsApp number, business name, CAC number, Tax Identification Number (TIN), and state of operation.

Worker Data: Full names, email addresses, phone numbers, National Identification Numbers (NIN), Tax Identification Numbers (TIN), job titles, salary information, bank account details, Pension Fund Administrator (PFA) details, and RSA numbers of employees registered on the platform.

Payroll Data: Monthly salary calculations, statutory deductions (PAYE, pension, NHF, NSITF), net pay figures, and payroll run history.

Compliance Data: Records of statutory remittances including PAYE, pension, WHT, NSITF, and NHF remittance history.

Contract Data: Employment contract details, signing dates, and digital signature records.

Payment Data: Subscription billing information processed through Flutterwave. We do not store card details - these are held by Flutterwave in accordance with PCI DSS standards.

Technical Data: IP addresses, browser type, device information, and usage logs for security and performance monitoring.

3. How We Use Your Information

We use your data to:

Provide and operate the Wadata HR platform
Calculate payroll and statutory deductions
Generate compliance reports and documents
Process subscription payments via Flutterwave
Send payslips, contracts, and compliance alerts to workers and business owners by email and WhatsApp
Improve the platform and diagnose technical issues
Comply with Nigerian tax and labour laws

We do not sell your data to third parties. We do not use your data for advertising purposes.

4. Legal Basis for Processing

Under the Nigeria Data Protection Act 2023 (NDPA), we process your data on the following legal bases:

Contractual necessity - to provide the services you have subscribed to.

Legal obligation - to maintain records required by Nigerian tax and labour law.

Legitimate interests - to improve our platform and prevent fraud.

Consent - where you have explicitly opted in to optional features.

5. Worker Data and Your Responsibilities

When you enter worker data into Wadata HR, you are acting as the data controller for that information and your workers are the data subjects. This means you are responsible for:

Having a lawful basis for processing your workers' personal data
Informing your workers that their data is being processed through Wadata HR
Responding to any data access or deletion requests from your workers

Wadata HR acts as a data processor on your behalf. We process worker data only as instructed by you through the platform and in accordance with this policy. Workers may also contact us directly at privacy@wadatahr.com if they have concerns about how their data is being processed.

6. Data We Share

We do not sell, rent, or share your data with third parties for commercial purposes. We share data only in the following limited circumstances:

Flutterwave- payment processing for subscriptions. Flutterwave's Privacy Policy is available at flutterwave.com/ng/privacy-policy.

Resend - email delivery for payslips, contracts, and compliance notifications. Only the recipient email address and email content are shared.

Supabase- our database and authentication provider. Data is stored on Supabase servers. Supabase's Privacy Policy is available at supabase.com/privacy.

Legal requirements - we may disclose data if required to do so by Nigerian law, court order, or a legitimate request from a regulatory authority.

Business transfers - if Wadata HR is acquired or merges with another company, your data may transfer as part of that transaction. We will notify you before this happens.

7. Data Storage and Security

Your data is stored on secure servers provided by Supabase. We implement the following security measures:

All data transmitted between your browser and our servers is encrypted using TLS/HTTPS
Sensitive data including API keys are encrypted at rest
Access to production data is restricted to authorised personnel only
Row-Level Security (RLS) ensures each business can only access their own data
We conduct regular security reviews of our platform

No system is completely immune to security risks. If we become aware of a breach that affects your data, we will notify you promptly.

8. Data Retention

We retain your account data for as long as your account is active. If you close your account, we will delete your data within 90 days unless we are required by law to retain it for longer.

Your data is preserved for 30 days after cancellation to allow reactivation
After 30 days, personal data may be deleted upon request
Payroll and compliance records may be retained for up to 7 years to comply with Nigerian tax law record-keeping requirements

9. Your Rights Under the NDPA 2023

Under the Nigeria Data Protection Act 2023, you have the right to:

Access the personal data we hold about you
Correct inaccurate or incomplete data
Request deletion of your data (subject to legal retention requirements)
Object to processing of your data
Data portability - receive your data in a structured, machine-readable format
Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at privacy@wadatahr.com. We will respond within 14 working days.

For complaints, you may also contact the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.

10. Cookies

Wadata HR uses essential cookies only:

Authentication cookies to keep you signed in
Session cookies for security purposes

We do not use tracking, analytics, or advertising cookies. You can disable cookies in your browser settings but this may affect how the platform functions.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and update the date at the top of this page. Your continued use of Wadata HR after changes are posted means you accept the updated policy.

12. Contact Us

If you have questions about this policy or how we handle your data, contact us:

Email: privacy@wadatahr.com

Address: Wadata HR Solutions Limited, Awka, Anambra State, Nigeria