Section 2 · Effective 1 September 2026

Privacy Policy

How AMTA collects, uses, shares and protects personal data under the Nigeria Data Protection Act 2023.

2.1 Information Collection

AMTA collects information a user provides directly (name, contact details, date of birth, profile content, payment and delivery details for marketplace orders, identity documents for verification), information generated by use of the Platform (posts, messages, votes cast, purchase history, device and log data), and information from third parties such as payment processors and identity verification providers.

2.2 Use of Personal Data

Personal data is used to operate and secure the Platform's accounts, feeds, and messaging; to process marketplace orders and payments; to run votes and competitions fairly, including fraud checks; to communicate with users about their account or transactions; and to improve the Platform's features. Data is processed only for purposes for which a lawful basis exists under the NDPA, such as contract performance, consent, or legitimate interest.

2.3 Data Sharing and Disclosure

AMTA shares personal data with vendors and buyers as necessary to fulfil a marketplace order, with payment processors to complete transactions, with service providers who support the Platform's operation under confidentiality obligations, and with regulators or law enforcement where required by Nigerian law. AMTA does not sell personal data to third parties for their own independent marketing use.

2.4 Data Security Measures

AMTA applies administrative, technical and physical safeguards — including encryption in transit, access controls, and regular security reviews — to protect personal data against unauthorised access, alteration, or loss, consistent with the Security Policy.

2.5 User Rights and Choices

Users may access, correct, or request deletion of their personal data, object to certain processing, and withdraw consent where processing is consent-based, subject to the retention obligations described in the Data Retention & Deletion Policy. Requests may be submitted through account settings or the Account & Data Deletion page.

2.6 Data Transfer

Where personal data is transferred outside Nigeria — for example, to a cloud hosting or payment provider — AMTA ensures the recipient offers an adequate level of protection or that appropriate safeguards, such as standard contractual clauses, are in place, in line with NDPA requirements for cross-border transfer.

2.7 Retention of Personal Data

Personal data is retained only for as long as necessary to fulfil the purposes described in this Policy, to comply with tax, consumer protection, and other legal obligations, and to resolve disputes, after which it is securely deleted or anonymised.

2.8 Cookies and Tracking Technologies

The Platform uses cookies and similar technologies to keep users signed in, remember preferences, and understand how features are used, as detailed in the Cookie Policy.

2.9 Contact for Privacy Concerns

Privacy questions, complaints, or data subject requests may be sent to privacy@amtacitizens.com; unresolved complaints may also be referred to the Nigeria Data Protection Commission.