Effective Date:
1. Introduction
HENOPAY ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services, in compliance with the Nigeria Data Protection Commission (NDPC) Act.
2. Information We Collect
Personal Information
When you use our services, we may collect:
- Name and contact information (email, phone number)
- Google account information (when you sign in)
- Billing and payment information
- Transaction history
- Utility account details (meter numbers, smartcard numbers)
Automatic Information
- IP address and device information
- Browser type and version
- Pages you visit and time spent
- Cookies and similar tracking technologies
3. How We Use Your Information
We use your information to:
- Process your bill payments and subscriptions
- Authenticate your identity and secure your account
- Communicate transaction confirmations and updates
- Improve our services and user experience
- Detect and prevent fraud
- Comply with legal obligations
4. Legal Basis for Processing (NDPC Act Compliance)
Under the NDPC Act, we process your personal data based on:
- Consent: You have given clear consent for us to process your data
- Contract: Processing is necessary for the service you requested
- Legal Obligation: Processing is required by law
- Legitimate Interests: Processing is necessary for our legitimate business interests
5. Data Sharing and Disclosure
We may share your information with:
- Service Providers: Paystack (payment processing), BuyPower (utility services), Google (authentication)
- Legal Authorities: When required by law or to protect our rights
- Business Transfers: In connection with a merger or acquisition
We do not sell your personal information to third parties.
6. Data Security
We implement industry-standard security measures including:
- SSL/TLS encryption for all data transmission
- Secure storage with access controls
- Regular security assessments
- PCI-DSS compliance for payment processing
7. Data Retention
We retain your personal information for as long as necessary to provide our services and comply with legal obligations. You may request deletion of your data at any time.
8. Your Rights Under NDPC Act
You have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your data ("right to be forgotten")
- Restriction: Limit how we use your data
- Portability: Receive your data in a portable format
- Object: Object to certain data processing
- Withdraw Consent: Withdraw your consent at any time
9. Cookies and Tracking
We use cookies and similar technologies to enhance your experience. You can manage your cookie preferences through our cookie consent banner.
10. Children's Privacy
Our services are not directed to individuals under 18. We do not knowingly collect data from children.
11. International Data Transfers
Your information may be transferred to and processed in countries outside Nigeria. We ensure appropriate safeguards are in place.
12. Changes to This Privacy Policy
We may update this Privacy Policy periodically. We will notify you of any material changes via email or through our website.
13. Contact Information
For privacy-related inquiries or to exercise your rights:
- Email: privacy@henozmecglobal.com
- Phone: +234 8188506337
- Address: Suit B304 Global Plaza Jabi, Nigeria
You may also contact the Nigeria Data Protection Commission (NDPC) at https://ndpc.gov.ng.
Website analytics
Built-in support assistant
The assistant uses predefined answers and saved HENOPAY records. Questions and account snapshots are not sent to an external AI provider. Customers can check their own records; administrators can view totals and selected customer records. The assistant cannot change accounts or move money. Chat context clears when the chat closes. Local usage counters enforce request limits. Do not enter passwords, OTPs or card details.
If you enable analytics in Cookie Settings, we record pages viewed, referral website or campaign source, device category, and approximate country and city. IP addresses are used locally to estimate location and are not stored in the analytics records or sent to an external analytics provider. We do not collect precise GPS location. Session identifiers are pseudonymized and change daily. Records are retained for up to 30 calendar days and reports are available only to administrators. You can turn analytics off in Cookie Settings.
Last Updated: