Privacy Policy

Operated by Zexus Services Limited Websites: zexusservices.com, zexuspro.com, zexusauto.com Last updated: September 16, 2026

Introduction
Who We Are
Information We Collect
How We Use Your Information
Legal Bases for Processing
How We Share Your Information
Data Retention
Your Rights
Data Security
International Data Transfers
Cookies and Similar Technologies
Children’s Privacy
Changes to This Policy
Contact Us
Complaints to the Regulator

1. Introduction

This Privacy Policy explains how Zexus Services Limited (“Zexus,” “we,” “us,” or “our”) collects, uses, stores, and protects your personal information when you use our websites, applications, and services (collectively, the “Platform”).

We are committed to protecting your privacy and complying with applicable dataprotection laws, including the Nigeria Data Protection Act 2023 and regulations issued by the Nigeria Data Protection Commission (NDPC).

Please read this policy carefully to understand how we handle your personal information.

2. Who We Are

Data Controller: Zexus Services Limited RC Number: 1887965 Registered Office: Port Harcourt, Rivers State, Nigeria.

Data Protection Contact: Email: [email protected]

For the purposes of applicable dataprotection laws, Zexus Services Limited is the data controller responsible for your personal information.

3. Information We Collect

We collect personal information in the following categories:

3.1 Information You Provide Directly

Account information: name, email address, phone number, password, profile picture, business name, and address.
Identity and verification information: governmentissued ID numbers (for example, NIN, BVN), CAC registration details, professional licences, certifications, and other KYC/KYB documents.
Payment and payout information: bank account details, card information (processed by payment providers), tax information (for example, TIN).
Listing and transaction information: service or asset descriptions, prices, availability, booking details, messages, quotes, invoices, delivery information, and dispute records.
Communications: messages with other users, customersupport queries, feedback, survey responses, and complaints.

3.2 Information Collected Automatically

Device and usage information: device type, operating system, browser type, IP address, device identifiers, pages visited, time and duration of visits, referral URLs, and clickstream data.
Location information: approximate or precise location data (for example, from IP address or GPS, where enabled).
Transaction and payment logs: payment timestamps, amounts, methods, status, and paymentprovider references.
Cookies and similar technologies: information collected through cookies, web beacons, and similar technologies. See our Cookie Policy for details.

3.3 Information from Third Parties

Verification and identity providers: for example, Smile ID, Prembly, and other KYC/KYB partners.
Payment providers: for example, Paystack, FirstBank, and other payment processors.
Fraudprevention and security providers: information related to fraud checks, risk scoring, and security monitoring.
Public sources: information from public registries (for example, CAC) where permitted by law.
Other users: information shared by other users in the course of transactions (for example, reviews, ratings, or dispute evidence).

4. How We Use Your Information

We use your personal information for the following purposes:

To provide and operate the Platform: creating and managing accounts, listings, bookings, transactions, payouts, and customer support.
To verify identity and prevent fraud: conducting KYC/KYB checks, verifying Pros, Dealers, and other users, and detecting or preventing fraudulent or unlawful activity.
To process payments: facilitating payment processing, settlements, refunds, chargebacks, and payouts through approved payment providers.
To communicate with you: sending transactional messages, service updates, security alerts, support responses, and administrative communications.
To improve the Platform: analyzing usage patterns, conducting research, testing new features, and improving user experience, security, and performance.
To comply with legal obligations: meeting regulatory, tax, accounting, and legal requirements, and responding to lawful requests from authorities.
To enforce our terms: enforcing the Terms of Use & Marketplace Rules, this Privacy Policy, and other policies.
To protect rights and safety: protecting the rights, property, or safety of Zexus, our users, or others, including fraud prevention and risk management.

We will not use your personal information for purposes incompatible with these without your consent or as required by law.

5. Legal Bases for Processing

Under applicable dataprotection laws, we rely on the following legal bases to process your personal information:

Contractual necessity: processing is necessary to perform our contract with you (for example, to provide the Platform and process transactions).
Legal obligation: processing is necessary to comply with applicable laws and regulations (for example, tax, antimoneylaundering, or consumerprotection laws).
Legitimate interests: processing is necessary for our legitimate interests, such as fraud prevention, security, Platform improvement, and direct marketing, provided these interests are not overridden by your rights.
Consent: where required by law, we will obtain your explicit consent for specific processing activities (for example, certain cookies or marketing communications). You may withdraw consent at any time.

We may share your personal information with:

Other users: as necessary to facilitate transactions (for example, sharing your name, contact details, and transaction information with a Pro, Dealer, client, or buyer).
Payment and payout providers: to process payments, settlements, refunds, chargebacks, and payouts (for example, Paystack, FirstBank, and other financial institutions).
Verification and identity providers: to verify your identity, business registration, or professional qualifications (for example, Smile ID, Prembly, and other KYC/KYB partners).
Service providers and contractors: who assist us with hosting, infrastructure, analytics, customer support, fraud prevention, security, communications, and other operational services.
Regulators and authorities: where required by law, regulation, court order, or lawful request from a government or regulatory authority (for example, NDPC, FCCPC, CAC, EFCC, or law enforcement).
Professional advisors: lawyers, auditors, accountants, and other advisors bound by confidentiality obligations.
Successors: in connection with a merger, acquisition, restructuring, or sale of assets, where personal information may be transferred as part of the business.

We require all third parties to respect the security of your personal information and to treat it in accordance with applicable dataprotection laws.

7. Data Retention

We retain your personal information only for as long as necessary to:

Provide the Platform and complete transactions.
Comply with legal, tax, accounting, and regulatory obligations.
Resolve disputes and enforce our terms.
Protect against fraud and abuse.

Typical retention periods:

Active accounts: for as long as your account is active, plus up to 7 years thereafter for legal and tax purposes.
Transaction records: for up to 7 years after the transaction date.
Verification records: for as long as necessary to verify identity and comply with KYC/KYB obligations, plus up to 7 years thereafter.
Dispute records: for up to 7 years after dispute resolution.
Marketing data: until you withdraw consent or opt out.

We may retain certain information for longer periods where required by law or for legitimate business purposes (for example, fraud prevention).

8. Your Rights

Subject to applicable law, you have the following rights regarding your personal information:

Right of access: to request a copy of the personal information we hold about you.
Right to correction: to request correction of inaccurate or incomplete information.
Right to deletion: to request deletion of your personal information in certain circumstances.
Right to restriction: to request restriction of processing in certain circumstances.
Right to data portability: to receive your personal information in a structured, commonly used format and transmit it to another controller, where applicable.
Right to object: to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent: to withdraw consent at any time where processing is based on consent.
Right to lodge a complaint: to complain to the Nigeria Data Protection Commission (NDPC) if you believe your rights have been violated.

To exercise these rights, contact us at [email protected]. We will respond within a reasonable timeframe and may request additional information to verify your identity.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, destruction, or accidental loss.

These measures include:

Encryption of data in transit and at rest where appropriate.
Access controls and authentication mechanisms.
Regular security assessments and monitoring.
Employee training on data protection and confidentiality.
Contracts with service providers requiring appropriate security safeguards.

While we strive to protect your personal information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we will notify you and take appropriate steps in the event of a data breach as required by law.

10. International Data Transfers

Your personal information may be transferred to, stored, or processed in countries outside Nigeria, including countries that may not have dataprotection laws equivalent to those in Nigeria.

Where such transfers occur, we will ensure appropriate safeguards are in place, such as:

Contracts with recipients incorporating standard dataprotection clauses.
Transfers to recipients certified under recognized dataprotection frameworks.
Other safeguards permitted under applicable law.

By using the Platform, you consent to such transfers as described in this policy.

11. Cookies and Similar Technologies

We use cookies and similar technologies to collect information about your browsing activities on the Platform. This information helps us to:

Remember your preferences and settings.
Understand how you use the Platform.
Improve user experience and performance.
Deliver relevant content and advertising.
Analyze traffic and usage patterns.

For detailed information about the types of cookies we use, their purposes, and how you can manage or disable cookies, please see our Cookie Policy.

12. Children’s Privacy

The Platform is not intended for use by individuals under the age of 18.

We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information and terminate the account.

If you are a parent or guardian and believe your child has provided personal information to us, please contact us at [email protected].

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

Material changes will be communicated through the Platform, by email, or via a notice on the website before the changes take effect.

Continued use of the Platform after changes are posted constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Zexus Services Limited Port Harcourt, Rivers State, Nigeria.

Email: [email protected]

15. Complaints to the Regulator

If you believe your dataprotection rights have been violated, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC):

Nigeria Data Protection Commission (NDPC) Website: https://ndpc.gov.ng Email: [email protected]

Table of Contents