Privacy notice
This notice explains what personal data VioTrack collects, why we hold it, and the rights you have over it. It is written to meet our obligations under the Nigeria Data Protection Act 2023 (NDPA).
The short version. A vehicle check shows the standing of documents, never the identity of an owner. We do not sell personal data. We do not share it for advertising. Renewal documents go to the owner on record, not to whoever paid.
1. Who we are
VioTrack is the data controller for the personal data described here. We are a company registered in Nigeria. For anything in this notice, including a request to exercise your rights, write to privacy@viotrack.africa.
Our data protection contact handles requests and complaints and can be reached at the same address.
2. What we collect
When you check a vehicle
- The registration number you enter
- Technical data your browser sends: IP address, approximate region, browser type, and the time of the request
A check returns the status of a vehicle's documents. It does not return the owner's name, telephone number or address, and there is no way to ask our service to do so.
When you join the early-access list
- The WhatsApp number or email address you give us
- The registration number, if you chose to enter one
When you use the service to renew
- Vehicle details needed to file the renewal
- Contact details for delivering documents and receipts
- Payment references. We do not store card numbers — payments are handled by licensed payment providers
- A delivery address, but only if you ask for physical delivery, and only for as long as that delivery needs it
When you contact us
- Your name, email address, organisation and role, and the content of your message
How we measure the site
We count three things per day: how many people opened the site, how many entered a registration number, and how many left contact details. That is all. The counts carry no identifier, set no cookie, and are stored by us rather than sent to an analytics company, so nothing about your visit leaves our systems.
This is why the site has no cookie banner: there is nothing to consent to.
3. Why we hold it, and on what basis
| Purpose | Lawful basis |
|---|---|
| Answering a compliance check you asked for | Your request; our legitimate interest in operating the service |
| Filing a renewal on your instruction | Performance of our contract with you |
| Arranging insurance you selected | Performance of our contract with you |
| Sending renewal reminders | Your consent, withdrawable at any time |
| Keeping payment and filing records | Legal obligation |
| Preventing abuse and automated collection | Our legitimate interest in protecting the service |
We retrieve records only for a vehicle that is actually being checked or transacted. We do not collect records in bulk for people who have not asked us to act.
4. Who we share it with
We share only what a task requires, and only with:
- Government authorities, to file the renewal you asked for
- Licensed insurance partners, where you chose to include insurance
- Payment providers, to take payment and issue refunds
- Delivery partners, only where you chose physical delivery, and only the address needed to deliver
- Professional advisers or authorities, where the law requires it
We do not sell personal data, and we do not share it with advertisers or data brokers.
5. Sending documents to the right person
Certificates and documents are delivered to the owner on record, using the contact details the authority holds. Where someone else pays for a renewal, that person receives confirmation that the job is done — not the owner's personal details. Sending documents anywhere other than the owner's own channel requires the owner to approve it.
6. Keeping it, and for how long
- Check records: kept briefly for abuse prevention, then removed
- Early-access details: until you ask us to remove them, or until we launch in your state and you decline
- Transaction and filing records: kept for as long as tax and financial-record law requires
- Delivery addresses: removed once the delivery is complete and any dispute period has passed
- Contact messages: kept for up to two years
7. Where it is processed
Some of the providers we rely on process data outside Nigeria. Where that happens we use providers that offer protection consistent with the NDPA, and we transfer only what the task requires.
8. Your rights
Under the NDPA you may ask us to:
- Confirm what personal data we hold about you, and give you a copy
- Correct anything inaccurate
- Delete data we no longer have a reason to keep
- Restrict or object to a particular use
- Provide your data in a portable form
- Withdraw consent, for anything we do on the basis of consent
Write to privacy@viotrack.africa. We reply within 30 days. If you are not satisfied, you may complain to the Nigeria Data Protection Commission.
Some records we must keep by law even after a deletion request — financial records, for example. Where that applies, we will tell you which records and why.
9. Security
Access to personal data is limited to people who need it for a task. Credentials are never stored in our website code. Connections are encrypted. We monitor for automated collection and block it. If a breach ever affects your rights, we will notify you and the Commission as the NDPA requires.
10. Children
The service is for adults. We do not knowingly collect data from anyone under 18.
11. Changes
If we change this notice we will update the version above and, for material changes, tell people who are on our lists.