Privacy Policy

Who we are

SemperID is a product of Semper Technologies Ltd, a company incorporated in Nigeria (“SemperID”, “we”, “us”). We process personal data in line with the Nigeria Data Protection Act 2023 and the regulations of the Nigeria Data Protection Commission.

For the website and for customer accounts, we decide how personal data is used and act as data controller. When a customer sends a verification request through the API, the customer is the data controller for that request and we process the data on its behalf, as set out in our Data Protection rules.

What we collect

• Enquiries: your name, work email, company, website, expected volume, the services you are interested in and your message.
• Accounts: your name, email address, sign-in and two-factor details, active sessions, your role in a workspace and the security events on your account.
• Workspaces: business details and documents submitted for business verification (KYB), team members, API key metadata, webhook endpoints, support tickets, wallet transactions and virtual account details.
• Verification requests: the identifiers and details a customer submits, the result returned and request metadata. Request logs keep payloads masked.
• Technical data: IP address, browser type and request logs that our hosting infrastructure records to deliver and protect the service.

How we use it

• To answer enquiries and provide quotes.
• To create and secure accounts, verify the businesses we serve and grant live access.
• To process verification requests, bill resolved calls and keep the wallet ledger.
• To send service messages, including webhooks, receipts, security alerts and notices about these policies.
• To detect and prevent fraud, abuse and security incidents, and to meet our legal and regulatory obligations.

We rely on the performance of our contract with you, our legitimate interests in running and securing the service, compliance with legal obligations and, where the law requires it, consent.

Who we share it with

We share personal data only where it is needed to provide the service: with the identity and registry sources a check queries, our payment partner for wallet top-ups, and the providers that host our infrastructure and deliver our email. Each is bound to protect the data and use it only for that purpose.

We do not sell personal data, and we do not use verification data for advertising.

International transfers

Some of our infrastructure providers operate outside Nigeria. Where personal data leaves Nigeria, we transfer it only on a basis the Nigeria Data Protection Act 2023 permits and with safeguards that keep it protected to the same standard.

How long we keep it

We keep personal data only for as long as we need it for the purposes in this policy, including to meet legal, accounting, regulatory and audit requirements. When it is no longer needed we delete or anonymise it.

You can permanently delete your account, or an owner workspace, from the console at any time.

Your rights

• Be informed about how your personal data is used.
• Access the personal data we hold about you.
• Have inaccurate data corrected.
• Have data deleted, or its use restricted.
• Object to processing, including processing based on our legitimate interests.
• Receive your data in a portable format.
• Withdraw consent at any time, where we rely on it.

To exercise a right, contact us through the contact page, or open a support ticket from the console. We will confirm your identity and respond within the time the law requires. You may also complain to the Nigeria Data Protection Commission.

If your request concerns a verification a business made about you, we will refer you to that business, which controls that data, and support it in responding.

Changes to this policy

When we change this policy we update the effective date on this page. We tell account holders about material changes in the console or by email before they take effect.