1. Information We Collect & Why

Getrid operates an authentic, verified campus marketplace exclusively for university students in Nigeria. We adhere to the statutory principle of data minimization (NDPA Section 24), collecting only what is strictly required to secure campus transactions:

• Account Profile: Full name, university institution, faculty, department, level, email address, and phone number.
• Student Verification (KYC): Student ID cards, admission letters, or portal screenshots to verify active student status and protect peers against scammers.
• Financial Details: NUBAN bank account numbers and beneficiary names for processing seller payouts. All payment processing is managed by PCI-DSS Level 1 licensed payment partners (Korapay). We never store debit/credit card CVVs or banking PINs.
• Marketplace Activity: Listings, messages, meetup location preferences, orders, and dispute inspection logs.

2. Lawful Basis for Processing (NDPA 2023)

In compliance with Section 25 of the Nigeria Data Protection Act 2023, Getrid processes personal data solely under the following lawful grounds:

3. Least-Privilege Support & Sensitive Document Redaction

We enforce strict internal access controls to ensure your sensitive identification documents cannot be viewed by unauthorized staff:

• Automated Document Redaction: Once your student verification is approved, raw student ID cards and matriculation documents are automatically redacted from general support tiers.
• Manager-Only Escalation: Only designated Compliance Officers and Managers with an active, audited justification can inspect raw verification files.
• PII Masking: Customer service agent consoles display masked email addresses (e.g., jo***n@unilag.edu.ng) and masked phone numbers by default.
• Inactivity Auto-Lock: Support consoles automatically lock after 20 minutes of idle inactivity to protect against unattended workstation vulnerabilities.

4. Your Rights as a Data Subject

Under the NDPA 2023, you hold enforceable rights regarding your personal information:

5. Data Retention & Erasure Schedule

We store data only for as long as necessary to provide marketplace services and satisfy statutory obligations:

• Active Student Accounts: Retained for the duration of your university enrollment and platform usage.
• Financial & Escrow Records: Retained for 5 to 7 years in compliance with CBN AML/CFT audit requirements.
• Deactivated Accounts: Retained in a dormant state for 30 days allowing easy reactivation, after which purge procedures begin.
• Rejected Verification Documents: Purged within 90 days of final adjudication unless contested.

6. Contact Our Data Protection Officer (DPO)

For privacy inquiries, data subject rights requests, or regulatory queries: