Privacy Policy

Last Updated: January 27, 2026
Effective Date: January 27, 2026

Introduction

Whozed (“we”, “us”, “our”) operates the website https://whozed.com.ng/ (the “Website”). We are committed to protecting your privacy and handling your personal data with care, transparency, and in full compliance with applicable data protection laws.

This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit and interact with our Website. It applies to all users regardless of location and complies with:

  • General Data Protection Regulation (GDPR) – for users in the European Union
  • Nigeria Data Protection Regulation (NDPR) 2019 – for users in Nigeria
  • Protection of Personal Information Act (POPIA) – for users in South Africa
  • Other applicable international data protection laws

Please read this Privacy Policy carefully. By using our Website, you acknowledge that you have read and understood this policy and consent to our data practices as described herein.

1. Data Controller and Contact Information

Whozed is the data controller responsible for your personal information.

Contact Details:
Email: info@whozed.com.ng
Website: https://whozed.com.ng/

For any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the details above.

2. Information We Collect

We collect information to provide, improve, and protect our services. The types of data we collect include:

2.1 Information You Provide Directly

Contact Forms and Email Communication: When you contact us through forms or email, we collect:

  • Full name
  • Email address
  • Subject line and message content
  • Any additional information you voluntarily provide

Newsletter Subscriptions (if applicable):

  • Email address
  • Name (optional)
  • Subscription preferences

Comments (if enabled):

  • Name or username
  • Email address
  • Website URL (optional)
  • Comment content
  • Date and time of comment

2.2 Information Automatically Collected

When you visit our Website, we automatically collect certain technical and usage information:

Technical Information:

  • IP address
  • Browser type and version
  • Operating system
  • Device type (desktop, mobile, tablet)
  • Screen resolution
  • Preferred language settings
  • Time zone

Usage Data:

  • Pages visited and content viewed
  • Time and date of visits
  • Time spent on pages
  • Click patterns and navigation paths
  • Referring website or source
  • Search queries entered on our site
  • Links clicked (internal and external)

Location Data:

  • Approximate geographic location based on IP address (country and city level)
  • We do not collect precise geolocation data

2.3 Cookies and Similar Technologies

We use cookies, web beacons, and similar tracking technologies. See Section 7 for detailed information about our cookie practices.

3. How We Use Your Information

We process your personal data for the following purposes:

3.1 Website Operation and Communication

  • To respond to your enquiries, questions, and requests
  • To provide and maintain Website functionality
  • To deliver content you request
  • To manage user comments and discussions (if applicable)
  • To send administrative updates and important notices

3.2 Content Improvement and Personalisation

  • To understand how users interact with our content
  • To identify popular topics and biographies
  • To improve content quality and relevance
  • To personalise user experience based on preferences

3.3 Analytics and Performance

  • To analyse Website traffic and user behaviour
  • To monitor and improve Website performance
  • To identify technical issues and bugs
  • To conduct research and statistical analysis
  • To understand user demographics and interests

3.4 Marketing Communications (with consent)

  • To send newsletters featuring new biographies and updates (only if you opt-in)
  • To inform you about new features or content
  • To share relevant articles and resources

3.5 Legal Compliance and Protection

  • To comply with legal obligations and regulations
  • To enforce our terms and conditions
  • To protect our rights, property, and safety
  • To prevent fraud, spam, and abuse
  • To respond to law enforcement and legal requests

3.6 E-E-A-T and Quality Assurance

  • To maintain content quality standards
  • To verify information accuracy
  • To build and demonstrate expertise and authoritativeness
  • To ensure trustworthiness of our platform

4. Legal Basis for Processing (GDPR Compliance)

Under GDPR Article 6, we process your personal data based on the following legal grounds:

4.1 Consent (Article 6(1)(a) GDPR)

  • Newsletter subscriptions
  • Non-essential cookies and tracking
  • Marketing communications
  • Optional data collection

You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

4.2 Legitimate Interests (Article 6(1)(f) GDPR)

  • Website analytics and improvement
  • Security and fraud prevention
  • Responding to enquiries
  • Operating and maintaining our Website
  • Understanding user behaviour for content improvement

We balance our legitimate interests against your rights and freedoms.

4.3 Legal Obligation (Article 6(1)(c) GDPR)

  • Complying with applicable laws and regulations
  • Responding to valid legal requests
  • Maintaining records as required by law

4.4 Contractual Necessity (Article 6(1)(b) GDPR)

  • Providing services you explicitly request
  • Fulfilling our obligations to users

5. WordPress-Specific Data Processing

Our Website is built on the WordPress content management system, which processes data as follows:

5.1 Comments System

When you leave a comment on our blog (if enabled):

Data Collected:

  • Display name (required)
  • Email address (required, not displayed publicly)
  • Website URL (optional)
  • Comment content
  • IP address (for spam detection and moderation)
  • Browser user agent string
  • Comment timestamp

Data Storage:

  • Comments are stored in our WordPress database indefinitely
  • This enables comment threads and proper moderation
  • Your email address generates a Gravatar hash (if you use Gravatar service)

Gravatar Integration: If your email is associated with Gravatar:

  • An anonymised hash of your email may be sent to Gravatar
  • Your profile picture will be displayed next to your comment
  • Gravatar has its own privacy policy: https://automattic.com/privacy/

5.2 Contact Forms

Contact form submissions are:

  • Sent to our designated email address
  • May be temporarily stored in our database depending on plugins used
  • Retained only as long as necessary to respond to your enquiry
  • Not shared with third parties except as required to respond

5.3 Embedded Content

When you view embedded content (videos, images, social media posts):

  • The embedding service may collect data about your visit
  • Cookies may be set by the third-party service
  • Your interaction is subject to their privacy policies

Examples include:

  • YouTube videos (Google Privacy Policy applies)
  • Twitter/X posts (X Privacy Policy applies)
  • Instagram embeds (Meta Privacy Policy applies)

5.4 WordPress Cookies

WordPress may set the following functional cookies:

For All Visitors:

  • wordpress_test_cookie – Tests if cookies are enabled (session cookie)

For Authenticated Users (if applicable):

  • wordpress_logged_in_[hash] – Indicates authentication status
  • wordpress_sec_[hash] – Security authentication
  • wp-settings-{user_id} – Customises WordPress interface
  • wp-settings-time-{user_id} – Persistence setting for preferences

These cookies are essential for Website functionality.

5.5 Media Uploads

If you upload images or files (if applicable):

  • EXIF metadata (including GPS location data) may be embedded in images
  • This metadata may be visible to anyone who downloads the image
  • We recommend removing sensitive metadata before uploading

6. Google Services and Third-Party Tools

We use various Google services and other third-party tools to operate and improve our Website.

6.1 Google Analytics

Purpose: Website analytics and user behaviour analysis

Data Collected:

  • How you use our Website (pages viewed, clicks, time on site)
  • Device and browser information
  • Approximate geographic location (country/city)
  • Referring websites and traffic sources

Google Analytics Cookies:

  • _ga – Distinguishes unique users (expires after 2 years)
  • _gid – Distinguishes unique users (expires after 24 hours)
  • _gat – Throttles request rate (expires after 1 minute)
  • _gat_gtag_[property-id] – Throttles request rate for specific property

Privacy Measures:

  • IP Anonymisation (anonymizeIP): We have enabled IP anonymisation, which truncates your IP address before processing, preventing personal identification
  • Data Retention: Google Analytics data is retained for 26 months, after which it is automatically deleted
  • Google Signals: We may use Google Signals for cross-device tracking and demographics (only with cookie consent)

Opt-Out Options:

Google’s Privacy Policy: https://policies.google.com/privacy

6.2 Google Fonts

Purpose: Enhanced typography and design

How It Works:

  • We may load fonts from Google’s servers or host them locally
  • When loaded from Google, your IP address may be transmitted to Google
  • Google may collect usage statistics

Privacy Considerations:

  • Loading fonts is necessary for proper Website display
  • We use Google’s privacy-enhanced font loading where possible
  • Local hosting minimises data sharing with Google

Google Fonts Privacy: https://developers.google.com/fonts/faq/privacy

6.3 Google AdSense (if applicable)

If we display advertisements through Google AdSense:

Purpose: Website monetisation through advertisements

Data Collected:

  • Browsing history and interests (for personalised ads)
  • Demographic information
  • Device and browser details

Cookies Used:

  • Various advertising cookies set by Google and ad partners
  • Used for ad personalisation, frequency capping, and measurement

Your Privacy Controls:

Non-Personalised Ads: If you opt-out, you’ll still see ads, but they won’t be based on your interests.

Google AdSense Privacy: https://policies.google.com/technologies/ads

6.4 Google reCAPTCHA (if applicable)

If we use reCAPTCHA to protect forms from spam:

Purpose: Security and spam prevention

Data Collected:

  • Hardware and software information
  • Browser details and plugins
  • Mouse movements and typing patterns
  • IP address
  • Cookies

Privacy Considerations:

  • reCAPTCHA operates in the background
  • Data is used by Google for bot detection
  • Subject to Google’s Privacy Policy and Terms of Service

Google reCAPTCHA: https://policies.google.com/privacy

6.5 YouTube Embedded Videos (if applicable)

When we embed YouTube videos:

Privacy-Enhanced Mode:

  • We use YouTube’s no-cookie domain (youtube-nocookie.com) where possible
  • Cookies are only set when you play a video

Data Collected (when you interact with videos):

  • Video viewing behaviour
  • Device and browser information
  • IP address

YouTube Privacy Policy: https://policies.google.com/privacy

6.6 Google Search Console

Purpose: Website performance monitoring and search optimisation

Data Collected:

  • Search queries leading to our site
  • Click-through rates
  • Website indexing status
  • Technical errors

Privacy Note: This is a backend tool and doesn’t directly collect user data from visitors.

7. Cookies and Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files stored on your device when you visit websites. They help websites remember your preferences, authenticate users, and analyse usage.

7.2 Types of Cookies We Use

Strictly Necessary Cookies:

  • Essential for basic Website functionality
  • Cannot be disabled without breaking site features
  • Examples: session management, security, cookie consent preferences

Performance and Analytics Cookies:

  • Help us understand how visitors use our Website
  • Collect anonymous statistical data
  • Examples: Google Analytics cookies

Functionality Cookies:

  • Remember your preferences and settings
  • Provide enhanced features
  • Examples: language preferences, display settings

Advertising/Marketing Cookies (if applicable):

  • Track your browsing to show relevant ads
  • Measure advertising campaign effectiveness
  • May be set by third-party advertisers

7.3 Cookie Duration

Session Cookies:

  • Temporary cookies deleted when you close your browser
  • Used for essential functions like navigation

Persistent Cookies:

  • Remain on your device for a set period or until manually deleted
  • Used for analytics, preferences, and personalisation
  • Duration varies from days to years depending on purpose

7.4 Third-Party Cookies

Third-party services (Google, social media, advertising networks) may set their own cookies when you interact with their content on our Website. We do not control these cookies.

7.5 Managing Your Cookie Preferences

Cookie Consent Banner: When you first visit our Website, you’ll see a cookie consent banner allowing you to:

  • Accept all cookies
  • Reject non-essential cookies
  • Customise cookie preferences by category

Your preferences are stored for 12 months.

Browser Cookie Controls: You can manage cookies through your browser settings:

  • Google Chrome: Settings > Privacy and Security > Cookies and other site data
  • Mozilla Firefox: Options > Privacy & Security > Cookies and Site Data
  • Safari: Preferences > Privacy > Cookies and Website Data
  • Microsoft Edge: Settings > Cookies and site permissions > Cookies and site data
  • Opera: Settings > Privacy & Security > Cookies

Important: Disabling necessary cookies may affect Website functionality and user experience.

Do Not Track (DNT): Some browsers offer “Do Not Track” signals. Currently, there is no universal standard for responding to DNT. Our Website does not specifically respond to DNT signals, but you can control tracking through cookie settings.

7.6 Cookie List

For a complete list of cookies used on our Website, please refer to our Cookie Policy (if available separately) or contact us at info@whozed.com.ng.

8. Third-Party Services and Plugins

Our Website may use additional third-party WordPress plugins and services, which may process your data:

8.1 Email Marketing Services (if applicable)

If we use services like Mailchimp, ConvertKit, or similar:

  • Purpose: Sending newsletters and marketing emails
  • Data Collected: Email address, name, subscription preferences
  • Privacy: Subject to provider’s privacy policy
  • Control: Unsubscribe links in all marketing emails

8.2 Comment Management (if applicable)

If we use Akismet or similar spam filtering:

  • Purpose: Preventing spam comments
  • Data Collected: Comment content, author details, IP address
  • Privacy: Akismet Privacy Policy: https://automattic.com/privacy/

8.3 Social Media Sharing Buttons

If we include social sharing buttons:

  • Purpose: Easy content sharing on social platforms
  • Data: May load tracking pixels from social networks
  • Privacy: Subject to each platform’s privacy policy

8.4 Content Delivery Networks (CDNs)

We may use CDNs to deliver content faster:

  • Purpose: Improved Website speed and performance
  • Data: IP address, request details
  • Examples: Cloudflare, StackPath
  • Privacy: Subject to CDN provider’s privacy policy

8.5 Security Plugins

We use security plugins to protect our Website:

  • Purpose: Firewall protection, malware scanning, brute force prevention
  • Data: IP addresses, login attempts, threat data
  • Examples: Wordfence, Sucuri, iThemes Security

8.6 Backup Services

We use backup services to protect data:

  • Purpose: Website backup and disaster recovery
  • Data: Complete website database and files
  • Security: Encrypted storage with reputable providers

9. Data Sharing and Disclosure

We respect your privacy and limit data sharing. We may share your personal information in the following circumstances:

9.1 Service Providers

We share data with trusted third-party service providers who assist in:

  • Website hosting and maintenance
  • Email delivery and marketing
  • Analytics and performance monitoring
  • Security and spam prevention
  • Payment processing (if applicable)
  • Customer support tools

Conditions:

  • Service providers are contractually bound to protect your data
  • They may only use data for specified purposes
  • They must comply with applicable data protection laws

9.2 Legal Obligations and Rights Protection

We may disclose your information when required or permitted by law:

  • Legal compliance: To comply with laws, regulations, or court orders
  • Law enforcement: In response to valid requests from authorities
  • Rights protection: To protect our rights, property, or safety
  • Fraud prevention: To detect, prevent, or investigate fraud or illegal activity
  • Terms enforcement: To enforce our terms and conditions

9.3 Business Transfers

If Whozed is involved in a merger, acquisition, asset sale, or bankruptcy:

  • Your personal data may be transferred to the new entity
  • You will be notified via email and/or prominent Website notice
  • The new entity will be bound by this Privacy Policy unless you consent otherwise

9.4 With Your Consent

We may share your information with third parties when you provide explicit consent for specific purposes.

9.5 Aggregated or Anonymised Data

We may share aggregated, anonymised, or de-identified data that cannot reasonably be used to identify you:

  • Website statistics and usage trends
  • Demographic information
  • Research and industry reports

This data is not considered personal data under GDPR, NDPR, or POPIA.

9.6 We Do Not Sell Your Data

Important: We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

10. International Data Transfers

Your personal information may be transferred to and processed in countries outside your country of residence, including:

Primary Locations:

  • Nigeria – Where our Website is based
  • European Union – For services like Google Analytics (GDPR-compliant)
  • United States – For various service providers (e.g., Google, hosting companies)
  • South Africa – For regional services

10.1 Safeguards for International Transfers

When transferring data internationally, we ensure appropriate safeguards:

For EU Data (GDPR Article 46):

  • Standard Contractual Clauses (SCCs) – EU-approved contracts ensuring GDPR-level protection
  • Adequacy Decisions – Transfers to countries deemed adequate by EU Commission
  • Privacy Shield – Where applicable and valid

For Nigerian Data (NDPR Compliance):

  • Transfers are made with appropriate security measures
  • Recipient countries or organisations provide adequate data protection

For South African Data (POPIA Compliance):

  • Transfers comply with Chapter 9 of POPIA
  • Adequate levels of protection are ensured

10.2 Your Rights Regarding Transfers

If you are in the EU, Nigeria, South Africa, or other regions with strict data protection laws, you have the right to:

  • Object to international data transfers
  • Request information about safeguards in place
  • Lodge complaints with supervisory authorities

11. Data Security

We take data security seriously and implement appropriate technical and organisational measures to protect your personal information from unauthorised access, loss, misuse, or disclosure.

11.1 Security Measures

Technical Measures:

  • SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted
  • Secure Hosting: Our Website is hosted on secure servers with robust security protocols
  • Firewalls: Web application firewalls protect against malicious attacks
  • Malware Scanning: Regular scans detect and remove malicious software
  • DDoS Protection: Distributed denial-of-service attack mitigation
  • Software Updates: Regular updates and patches for WordPress, plugins, and themes

Organisational Measures:

  • Access Controls: Limited access to personal data on a need-to-know basis
  • Password Policies: Strong authentication requirements
  • Regular Backups: Encrypted backups stored securely
  • Security Audits: Periodic security assessments and vulnerability testing
  • Incident Response Plan: Procedures for responding to data breaches

11.2 Data Breach Notification

In the unlikely event of a personal data breach:

  • Internal Assessment: We will investigate the breach immediately
  • Regulatory Notification: We will notify relevant authorities within 72 hours (as required by GDPR, NDPR, POPIA)
  • User Notification: We will inform affected individuals without undue delay if the breach poses a high risk
  • Mitigation: We will take steps to mitigate harm and prevent future breaches

11.3 Security Limitations

Important: While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

Your Responsibility:

  • Use strong, unique passwords
  • Keep your devices and software updated
  • Be cautious of phishing attempts
  • Do not share sensitive information unnecessarily

12. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy or as required by law.

12.1 Retention Periods

Contact Form Submissions and Email:

  • Retained for up to 2 years or until the matter is resolved
  • May be retained longer if ongoing communication or legal requirement exists

Comments:

  • Retained indefinitely to maintain comment threads and site integrity
  • Deleted upon request (see Section 14.3)

Analytics Data:

  • Google Analytics: Retained for 26 months, then automatically deleted
  • Server Logs: Retained for 90 days for security and troubleshooting

Newsletter Subscriptions:

  • Retained until you unsubscribe
  • May be retained for up to 30 days after unsubscription for compliance purposes

Cookie Data:

  • Duration varies by cookie type (see Section 7.3)
  • Typically 1 day to 2 years

12.2 Deletion After Retention Period

After the retention period expires:

  • Data is securely deleted or anonymised
  • Backups may contain data for additional time until backup rotation completes
  • Anonymised data may be retained indefinitely for statistical purposes

12.3 Legal Retention Requirements

We may retain data longer if:

  • Required by law or regulation
  • Necessary for legal proceedings or disputes
  • Essential for our legitimate business interests (e.g., fraud prevention)

13. Your Rights Under Data Protection Laws

You have significant rights regarding your personal data. The specific rights available depend on your location.

13.1 Rights Under GDPR (EU Users)

If you are in the European Union, you have the following rights under Articles 15-22 of GDPR:

1. Right to Access (Article 15 GDPR)

  • Request confirmation of whether we process your personal data
  • Obtain a copy of your personal data
  • Receive information about processing activities

2. Right to Rectification (Article 16 GDPR)

  • Request correction of inaccurate personal data
  • Complete incomplete personal data

3. Right to Erasure / “Right to be Forgotten” (Article 17 GDPR)

  • Request deletion of your personal data when:
    • No longer necessary for original purpose
    • You withdraw consent (where processing is based on consent)
    • You object to processing
    • Data was unlawfully processed
    • Legal obligation requires erasure

Exceptions: We may refuse erasure if processing is necessary for:

  • Compliance with legal obligations
  • Establishment, exercise, or defence of legal claims
  • Archiving purposes in the public interest

4. Right to Restriction of Processing (Article 18 GDPR)

  • Request limitation of processing when:
    • You contest data accuracy
    • Processing is unlawful but you oppose erasure
    • We no longer need the data but you need it for legal claims
    • You’ve objected to processing pending verification

5. Right to Data Portability (Article 20 GDPR)

  • Receive your personal data in a structured, commonly used, machine-readable format
  • Transmit data to another controller (where technically feasible)
  • Applies to data processed by automated means based on consent or contract

6. Right to Object (Article 21 GDPR)

  • Object to processing based on legitimate interests or public interest
  • Object to direct marketing (absolute right)
  • Object to profiling (if applicable)

7. Right to Withdraw Consent (Article 7(3) GDPR)

  • Withdraw consent at any time (where processing is based on consent)
  • Does not affect lawfulness of processing before withdrawal

8. Right Not to be Subject to Automated Decision-Making (Article 22 GDPR)

  • Not be subject to decisions based solely on automated processing with legal or significant effects
  • (Note: We do not currently use automated decision-making)

13.2 Rights Under NDPR (Nigerian Users)

If you are in Nigeria, you have the following rights under the Nigeria Data Protection Regulation:

  • Right to Information: Know how your data is being processed
  • Right to Access: Request access to your personal data
  • Right to Rectification: Correct inaccurate data
  • Right to Erasure: Request deletion in certain circumstances
  • Right to Object: Object to processing for direct marketing
  • Right to Restrict Processing: Limit how data is used
  • Right to Data Portability: Receive data in portable format
  • Right to Complain: Lodge complaints with the Nigeria Data Protection Commission (NDPC)

13.3 Rights Under POPIA (South African Users)

If you are in South Africa, you have the following rights under the Protection of Personal Information Act:

  • Right to Access: Request confirmation and access to personal information
  • Right to Correction: Request correction or deletion of inaccurate data
  • Right to Deletion: Request destruction or deletion of personal information
  • Right to Object: Object to processing based on consent or legitimate interest
  • Right to Complain: Lodge complaints with the Information Regulator

13.4 How to Exercise Your Rights

To exercise any of these rights:

Contact Us: Email: info@whozed.com.ng
Subject: “Data Rights Request – [Your Name]”

Information to Include:

  • Your full name
  • Email address used on our Website
  • Specific right you wish to exercise
  • Details to help us locate your data
  • Proof of identity (if required for verification)

Response Time:

  • We will respond within 30 days (GDPR)
  • Within 14 days (POPIA)
  • May be extended if request is complex (with notification)

Verification: We may request additional information to verify your identity before processing requests.

Free of Charge: Exercising your rights is generally free, unless:

  • Requests are manifestly unfounded or excessive
  • You request multiple copies of the same data

13.5 Right to Lodge a Complaint

If you believe we have not handled your data properly, you have the right to lodge a complaint with the relevant supervisory authority:

European Union: Your national data protection authority: https://edpb.europa.eu/about-edpb/board/members_en

Nigeria: Nigeria Data Protection Commission (NDPC)
Website: https://ndpc.gov.ng/
Email: info@ndpc.gov.ng

South Africa: Information Regulator (South Africa)
Website: https://inforegulator.org.za/
Email: inforeg@justice.gov.za

Other Jurisdictions: Contact your local data protection authority.

14. Special Categories of Data

14.1 Sensitive Personal Data

We generally do not collect or process “special categories” of sensitive personal data, such as:

  • Racial or ethnic origin
  • Political opinions
  • Religious or philosophical beliefs
  • Trade union membership
  • Genetic or biometric data
  • Health data
  • Sexual orientation

Exception: If you voluntarily provide such information (e.g., in contact forms or comments), we will handle it with extra care and only use it for the purpose you intended.

14.2 Biographical Content

While our Website publishes biographies that may reference:

  • Public figures’ backgrounds
  • Professional achievements
  • Publicly available information

This content is about public figures and is not personal data about our Website users.

15. Children’s Privacy

15.1 Age Restrictions

Our Website is not directed at, nor do we knowingly collect personal information from, children under the age of:

  • 16 years (GDPR)
  • 18 years (NDPR – as minors in Nigeria)
  • 18 years (POPIA – as minors in South Africa)

15.2 Parental Consent

If we become aware that we have collected personal data from a child without appropriate parental consent, we will:

  • Delete the information immediately
  • Cease processing the data
  • Take reasonable steps to notify the parent/guardian

15.3 Parent/Guardian Rights

If you are a parent or guardian and believe your child has provided us with personal information:

  • Contact us immediately at info@whozed.com.ng
  • Provide proof of guardianship
  • Request deletion of the child’s data

16. Changes to This Privacy Policy

16.1 Policy Updates

We reserve the right to update or modify this Privacy Policy at any time to reflect:

  • Changes in our data practices
  • New legal or regulatory requirements
  • Introduction of new features or services
  • User feedback and privacy concerns
  • Industry best practices

16.2 Notification of Changes

When we make significant changes:

  • “Last Updated” Date: Will be updated at the top of this page
  • Email Notification: If changes materially affect your rights, we may notify you via email (if we have your email address)
  • Website Notice: A prominent notice may be displayed on our Website
  • Consent Request: We may request new consent where required by law

16.3 Continued Use

Your continued use of the Website after changes are posted constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes, please discontinue use of the Website.

16.4 Reviewing the Policy

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

17. Your Consent

By using Whozed.com.ng, you acknowledge that you have:

  • Read and understood this Privacy Policy
  • Consent to the collection, use, and processing of your personal data as described
  • Understand your rights and how to exercise them

Withdrawal of Consent: Where processing is based on consent, you may withdraw it at any time by:

  • Contacting us at info@whozed.com.ng
  • Using unsubscribe links in emails
  • Adjusting cookie preferences

Withdrawal does not affect the lawfulness of processing before withdrawal.

18. Accessibility of This Privacy Policy

We are committed to making this Privacy Policy accessible to all users. If you have difficulty accessing or understanding this policy:

  • Contact us for alternative formats (e.g., large print, audio)
  • Request clarification on specific sections
  • Provide feedback on improving accessibility

19. Additional Information

19.1 Automated Decision-Making and Profiling

We do not currently use automated decision-making or profiling that produces legal or similarly significant effects on users.

If we introduce such processing in the future:

  • We will update this Privacy Policy
  • Provide clear information about the logic involved
  • Explain the significance and consequences
  • Offer the right to human intervention

19.2 Do Not Track (DNT) Signals

Some browsers support “Do Not Track” (DNT) requests. Currently:

  • There is no universal standard for responding to DNT
  • Our Website does not specifically respond to DNT signals
  • You can control tracking through cookie settings and browser privacy features

19.3 Data Protection Officer (DPO)

We do not currently have a dedicated Data Protection Officer. All data protection enquiries should be directed to:

Email: info@whozed.com.ng

If required by law in the future, we will appoint a DPO and update this policy accordingly.

20. Specific Provisions for Different Jurisdictions

20.1 For EU Users (GDPR)

  • Representative in the EU: If required, we will appoint an EU representative
  • Data Transfers: We use Standard Contractual Clauses for transfers outside the EU
  • Supervisory Authority: You may lodge complaints with your national DPA

20.2 For Nigerian Users (NDPR)

  • Data Audit: We conduct regular data audits as required by NDPR
  • Data Protection Compliance Organisation (DPCO): We comply with NDPR requirements
  • Local Processing: Data processing activities comply with Nigerian regulations

20.3 For South African Users (POPIA)

  • Information Officer: Enquiries may be directed to info@whozed.com.ng
  • Information Regulator: You may lodge complaints with the Information Regulator
  • Transborder Data Flows: Transfers comply with Chapter 9 of POPIA

20.4 For Other Jurisdictions

Users from other countries:

  • Are protected by applicable local data protection laws
  • May have additional rights under local legislation
  • Should contact us for jurisdiction-specific information

21. Contact Information and Questions

If you have any questions, concerns, or requests regarding:

  • This Privacy Policy
  • Our data practices
  • Your personal information
  • Data protection rights
  • Complaints or feedback

Please Contact Us:

Whozed
Email: info@whozed.com.ng
Website: https://whozed.com.ng/

Response Commitment: We aim to respond to all privacy-related enquiries within:

  • 72 hours for urgent matters (e.g., data breaches, security concerns)
  • 5-7 business days for general enquiries
  • 30 days for formal rights requests (as required by GDPR)

22. Final Provisions

22.1 Severability

If any provision of this Privacy Policy is found to be invalid, illegal, or unenforceable by a court of competent jurisdiction, the remaining provisions shall continue in full force and effect.

22.2 Entire Agreement

This Privacy Policy, together with our Terms and Conditions and Disclaimer, constitutes the entire agreement between you and Whozed regarding the use of our Website and the processing of your personal data.

22.3 Governing Law

This Privacy Policy is governed by and construed in accordance with:

  • The laws of the Federal Republic of Nigeria
  • Applicable international data protection regulations (GDPR, POPIA, etc.)

22.4 Dispute Resolution

Any disputes arising from this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of Nigeria, without prejudice to your right to lodge complaints with data protection supervisory authorities.

Summary of Key Points

To help you quickly understand our privacy practices:

We collect minimal data: Only what’s necessary for Website operation
We use cookies: For analytics and functionality (you can control them)
We use Google Analytics: With IP anonymisation enabled
We don’t sell your data: We never sell or rent personal information
You have rights: Access, correct, delete, or export your data
We secure your data: Using encryption and security best practices
We’re transparent: This policy explains everything clearly
We’re compliant: GDPR, NDPR, and POPIA compliant
You can contact us: info@whozed.com.ng for any privacy concerns

Thank you for trusting Whozed with your privacy. We are committed to protecting your personal data and respecting your rights.

Last Updated: January 27, 2026
Next Review: July 2026