NDPA notice

1. Data controller

For your team's accounts and your business profile, Nordaxiz Technology Limited is the data controller. For your customers' payment records, your business is the controller and Harbour processes them on your instruction.

2. Lawful basis

Performance of our contract with your business, and legitimate interest in keeping an accurate ledger that matches your providers.

3. Retention

Transaction records are kept while your account is active and for the period required by law after it closes. Raw provider payloads are kept for reconciliation only.

4. Transfers

Harbour is hosted in data centres chosen by Nordaxiz. Where data leaves Nigeria, it is protected by contract to the standard the NDPA requires.

5. Your rights

Access, correction, export, deletion and objection. Use Settings, or write to privacy@nordaxiz.com. You may also complain to the Nigeria Data Protection Commission.