Privacy Policy
Last updated: August 2026. Your privacy and data protection are important to us.
1. Introduction
GasCenter ("we," "us," "our," or "Company") is committed to protecting your privacy and managing your business data in a secure, transparent, and legally compliant manner. This Privacy Policy explains how we collect, use, disclose, and otherwise process your personal and operational information when you visit our website at gascenter.com.ng (the "Site") or use our GasCenter cloud platform and services (the "Services").
This Privacy Policy is formulated in strict compliance with the Nigeria Data Protection Act (NDPA 2023) and applicable Nigerian laws governing statutory business recordkeeping. Please read this Privacy Policy carefully. By accessing or using GasCenter, you acknowledge that you have read, understood, and agree to be bound by all the provisions of this Privacy Policy. If you do not agree with our practices, please do not use our Services.
2. Legal Basis for Processing Data (NDPA Compliance)
In accordance with Section 25 of the NDPA 2023, GasCenter processes your personal and operational information under the following lawful grounds:
- Contractual Necessity: Processing required to provide our cloud ERP services, manage account authentication, process billing, and fulfill our contractual obligations to you.
- Legal & Regulatory Obligations: Retaining financial, transactional, and audit logs to comply with statutory taxation and corporate laws in Nigeria (e.g., FIRS and CAMA regulations).
- Legitimate Interests: Securing our multi-tenant cloud environment, preventing cross-tenant data leaks, preventing fraud, and optimizing system performance.
- Consent: Where required (e.g., non-essential marketing cookies), processing is based on your explicit consent, which you can withdraw at any time.
3. Information We Collect
3.1 Information You Provide Directly
- Account Registration: When you create a GasCenter account, we collect your name, email address, phone number, company name, physical address, station registration details, and password.
- Payment Information: When you subscribe to our Services, we collect billing address and payment method details (processed securely through certified, PCI-DSS compliant third-party gateways like Stripe, Paystack, or Flutterwave). Raw credit card numbers are never stored on our servers.
- Operational Data: Sales records, stock levels, pump readings, customer accounts, employee information, and financial transactions you input into GasCenter.
- Communication: Messages you send us via contact forms, email, live chat, or support tickets.
- Feedback: Surveys, reviews, and feature requests you submit.
3.2 Information Collected Automatically
- Usage Data: Pages viewed, time spent, clicks, searches, and features used within GasCenter.
- Device Information: IP address, browser type, operating system, device type, and mobile device identifiers.
- Location Data: Approximate geographic location based on IP address (not precise GPS).
- Cookies & Tracking: We use cookies, web beacons, and similar tracking technologies to recognize you and store preferences.
- Performance Data: Error logs, crash reports, and system performance metrics to improve our Service.
3.3 Information From Third Parties
We may receive information about you from third parties, including:
- Payment processors (Stripe, Paystack, or Flutterwave)
- Email service providers
- Analytics providers (Google Analytics)
- Other users who refer you to our Service
4. How We Use Your Information
We use the information we collect for the following purposes:
Service Delivery & Improvement
To provide, maintain, and improve GasCenter and its features; troubleshoot technical issues; manage multi-tenant station accounts; and develop new features.
Communication
To send you transactional emails (account confirmations, receipts, password resets), service updates, and customer support responses.
Marketing & Promotions
To send marketing emails about new features, pricing updates, and special offers (you can opt-out anytime).
Billing & Account Management
To process payments, manage subscriptions, generate invoices, and handle billing inquiries.
Legal Compliance & Security
To comply with legal and regulatory obligations, enforce our Terms of Service, prevent fraud and abuse, maintain immutable security audit logs, and protect the security of our Service and users.
Analytics & Insights
To understand user behavior, measure Service effectiveness, and generate aggregated, non-identifying statistics.
5. Data Sharing & Disclosure
5.1 We Do NOT Share Personal Data With
We do not sell, rent, or trade your personal information or operational records to third parties for marketing purposes. We do not share your operational data (sales records, stock, customer accounts) with external parties without your explicit permission.
5.2 We May Share With
- Service Providers & Sub-processors: Third parties who help us operate GasCenter (cloud infrastructure providers, payment processors, email services, analytics providers). These vendors are contractually bound through Data Processing Agreements (DPAs) to use your data only as needed and maintain security standards aligned with NDPA 2023.
- Legal Requirements & Regulators: When required by law, court order, regulation, statutory mandate, or government request (including the NDPC, FIRS, or law enforcement). We will notify you of such requests unless legally prohibited.
- Business Transfers: In the event of a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. You will be notified and given the opportunity to object.
- With Your Consent: When you explicitly authorize us to share your information with specific third parties (e.g., third-party accounting or ERP integrations).
6. Data Security
We implement industry-standard technical and organizational measures to protect your personal and operational information from unauthorized access, alteration, disclosure, or destruction, including:
- ✓ End-to-end encryption for data in transit (HTTPS/TLS 1.3)
- ✓ Strong encryption at rest for sensitive databases (AES-256)
- ✓ Secure authentication protocols (strong passwords, optional 2FA)
- ✓ Multi-tenant data isolation and role-based access control (RBAC)
- ✓ Regular security audits, system monitoring, and vulnerability testing
- ✓ Automated backups and disaster recovery procedures
However, no security system is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials.
7. Data Retention Policy & Statutory Schedule
We retain your personal information for as long as your account is active, or as long as necessary to provide Services to you. To balance individual privacy rights with statutory legal obligations in Nigeria (such as tax compliance under FIRS and corporate audit requirements under CAMA), we apply the following retention schedule:
| Data Category | Retention Period | Purpose / Statutory Ground |
|---|---|---|
| Active Account Information | Duration of active subscription | Service delivery & account management |
| Operational, Financial & Transaction Logs | 6 Years post-account termination | Statutory tax compliance (FIRS) & CAMA regulations |
| System Security & Access Logs | 2 Years from creation | Audit trails, fraud prevention & system security |
| Backup Data | Up to 1 Year (Encrypted) | Disaster recovery and business continuity |
8. Your Privacy Rights Under NDPA 2023
In accordance with the Nigeria Data Protection Act 2023, you have the following rights regarding your personal data:
- Access: The right to request confirmation and copies of personal information we hold about you.
- Correction: The right to request correction or updating of inaccurate or incomplete information.
- Deletion ("Right to be Forgotten"): The right to request deletion of your personal information, subject to statutory retention exceptions (such as tax/financial audit laws).
- Portability: The right to request a copy of your personal data in a structured, commonly used format.
- Opt-Out & Objection: The right to object to processing based on legitimate interests or opt out of marketing communications at any time.
To exercise any of these rights, please contact our Data Protection team at privacy@gascenter.com.ng or support@gascenter.com.ng. We will verify your identity and respond within 30 days as mandated by law.
9. Cookies & Tracking Technologies
We use the following:
- Session Cookies: Necessary for logging in, securing user sessions, and using GasCenter.
- Preference Cookies: Remember your settings and preferences.
- Analytics Cookies: Google Analytics to understand usage patterns (can be disabled).
- Marketing Cookies: To track campaigns and user engagement (can be disabled).
You can disable non-essential cookies in your browser settings or via our cookie preferences banner, but some features may not work properly. See our Cookie Policy for more details.
10. Children's Privacy
GasCenter is a business platform and is not intended for children under 18 years old. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will delete it immediately. If you believe we have collected information from a child, please contact us at support@gascenter.com.ng.
11. International Data Transfers
GasCenter operates primary infrastructure in Nigeria and utilizes secure global cloud servers. Where data is transferred or stored outside Nigeria, we ensure compliance with Sections 41–43 of the NDPA 2023 by ensuring that the destination country provides adequate data protection standards or by executing Standard Contractual Clauses (SCCs) and binding data protection safeguards with our hosting partners.
12. Third-Party Links
GasCenter may contain links to third-party websites and services. This Privacy Policy does not apply to external sites, and we are not responsible for their privacy practices. Please review their privacy policies before providing personal information.
13. Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect operational or regulatory changes. Material changes will be communicated via email or a prominent notice on our Site at least 14 days prior to taking effect. Your continued use of GasCenter after updates constitutes acceptance of the revised Privacy Policy. Please review this page periodically for changes.
14. Contact Us & Regulatory Complaints
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
GasCenter Privacy Team & Data Protection Officer
- Privacy Email: privacy@gascenter.com.ng
- Support Email: support@gascenter.com.ng
- DPO Email: dpo@gascenter.com.ng
- Address: 151 NTA Road, Port Harcourt, Rivers State, Nigeria
- Phone: +234 813 146 8060
If you feel that your data protection concerns have not been adequately addressed, you have the right to file a formal complaint with the Nigeria Data Protection Commission (NDPC) at www.ndpc.gov.ng.
Thank you for trusting GasCenter with your business data. We take your privacy seriously and are committed to transparent, ethical data practices.