Privacy Policy
This policy explains how Ventrix (“we”, “us”), handles personal data when you visit ventrix.app or use Ventrix. We follow the Nigeria Data Protection Act 2023 (NDPA) and, where it applies to you, the EU/UK GDPR.
1. Two roles we play
- As controller we decide how your personal data is used when you visit our website, contact us, or sign up as a customer contact.
- As processor we handle the records a customer stores in Ventrix (items, people, transactions, photos) on that customer’s behalf and on their instructions. The customer is the controller of that data. If you are an employee of a customer, please contact your employer about how they use it.
2. What we collect
| Data | Examples | Why |
|---|---|---|
| Enquiries | Name, email, business name, message | To reply to you and discuss using Ventrix |
| Account data | Name, email, role, sign-in credentials, optional PIN | To create and secure accounts and let people sign in |
| Customer records | Items, shelves, people and teams, check-outs, returns, counts, notes, transaction photos | To provide the service the customer asked for |
| Billing data | Organization name, contact, payment status | To invoice and collect payment |
| Technical data | IP address, device and browser type, request logs, error reports | To keep the service secure, reliable and fast |
We do not intentionally collect special categories of personal data, and Ventrix is not meant for anyone under 18.
3. Why we use it (our legal bases)
- Contract: to provide the service and handle billing.
- Legitimate interests: to secure and improve the service and answer enquiries, where this doesn’t override your rights.
- Consent: where we ask for it, for example optional communications. You can withdraw it at any time.
- Legal obligation: such as tax and accounting records.
We do not sell personal data, and we do not use it for advertising.
4. Who we share it with
Only with service providers who help us run Ventrix, under written terms: our hosting, email and payment service providers. We may also disclose data where the law requires it, or to protect rights and safety. If our business is sold or reorganised, data may transfer to the new owner under this policy.
5. International transfers
Our providers may process data outside Nigeria. Where they do, we use safeguards required by the NDPA and, where relevant, the GDPR, such as contractual protections.
6. How long we keep it
We keep customer records for as long as the customer has an account, then for a short period afterwards so they can export it, and then delete or anonymise it unless the law requires us to keep it. Enquiries are kept for as long as needed to deal with them and for a reasonable period after. Backups are overwritten on a rolling basis.
7. Security
We use access controls, role-based permissions, encrypted connections (HTTPS), session timeouts and an activity log. No system is perfectly secure; if a breach affects your data, we will notify you and the regulator as the law requires. See our Security page.
8. Your rights
You may ask us to give you access to your data, correct it, delete it, restrict or object to its use, move it to another provider, or withdraw consent. To use these rights email privacy@ventrix.app. We may need to verify who you are. If you are a customer’s employee, we may refer you to the customer, who controls that data.
You also have the right to complain to the Nigeria Data Protection Commission, or to your local data protection authority if you are in the EU/UK.
9. Cookies and local storage
See our Cookie Policy. Our website sets no tracking cookies.
10. Changes
If we change this policy in a way that matters, we’ll update the date above and, for customers, tell you in the app or by email.
11. Contact
Ventrix
Email: privacy@ventrix.app