RevLot Privacy Policy

Last Updated: 14 October, 2025

Introduction

Welcome to RevLot Limited ("RevLot", "we", "us", or "our") Privacy Policy.

RevLot is a Nigerian-registered automotive technology company operating a digital platform that enables individuals and businesses to bid for, purchase, and sell vehicles through online auctions. RevLot provides services including vehicle inspection, escrow payment handling, and logistics facilitation for vehicle delivery across Nigeria and other African markets.

RevLot respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and safeguard your personal information when you access or use the RevLot website, mobile application, and related services, as well as your rights under Nigerian law.

This Policy has been prepared in compliance with the Nigeria Data Protection Regulation (NDPR) 2019, the Nigeria Data Protection Act (NDPA) 2023, and other applicable data protection and privacy laws.

Important Information and Who We Are

Purpose of this Privacy Policy

At RevLot, your privacy is of utmost importance. "Personal information" means any data from which your identity can reasonably be determined. We only collect and use your information in accordance with this Policy and applicable laws.

By signing up for, accessing, or using the RevLot platform or any of our related services, you consent to the practices described herein.

This Policy explains:

  • The type of personal data we collect
  • How and why we collect it
  • How we use cookies and analytics
  • How we share or disclose your data
  • Your rights under Nigerian data laws
  • Our data security and retention practices

Our platform and services are not intended for minors under 18 years of age, and we do not knowingly collect data from children.

Controller

RevLot Limited is the data controller responsible for your personal data.

Registered Address: [Revlot Business Address], Nigeria

Email: privacy@revlot.ng

Phone: +234 810 127 0941

We have appointed a Data Protection Officer (DPO) to oversee compliance with this Privacy Policy. To exercise your data rights or ask questions, please contact our DPO using the details above.

1. The Type of Personal Information We Collect

Personal data refers to information relating to an identifiable individual. RevLot may collect, use, and store the following categories of data:

a. Identity Data

Full name, gender, date of birth, national identification number, driver's licence, international passport, or other valid means of identification.

b. Contact Data

Residential or business address, email address, phone number, and other contact details.

c. Financial and Transaction Data

Bank account details, escrow wallet information, payment records, auction deposits, withdrawal history, and refund transactions.

d. Vehicle and Auction Data

Bidding records, vehicle inspection reports, auction outcomes, delivery requests, and transaction logs.

e. Technical Data

Device identifiers, IP address, browser and operating system details, app version, time zone, and interaction logs.

f. Profile and Usage Data

Account preferences, feedback, auction participation frequency, and communication history.

g. Marketing and Communication Data

Preferences for receiving notifications, auction alerts, marketing updates, and consent logs.

Failure to provide certain personal data may prevent us from offering or maintaining your account and related services.

2. How We Collect Personal Information

We collect your data through various means, including:

  • When you register or maintain an account on the RevLot platform
  • When you participate in an auction, make payments, or request delivery
  • When you interact with our support or inspection partners
  • Automatically through cookies, analytics, and system logs
  • From third-party KYC and payment processors (subject to consent)

3. How We Use Cookies

Cookies and similar technologies help us enhance user experience and improve security. We use them to:

  • Maintain secure logins and sessions
  • Analyze traffic and usage trends
  • Prevent fraud and ensure system integrity
  • Improve marketing effectiveness

You can disable cookies in your browser settings, but this may affect certain functionalities of our platform.

4. How We Use Your Personal Information

We process personal data for the following purposes:

  • To verify identity and comply with KYC/AML regulations
  • To register and manage your RevLot account
  • To process bids, payments, escrow transactions, and deliveries
  • To communicate with you about transactions, auctions, and disputes
  • To improve platform functionality and customer experience
  • To detect, prevent, or investigate fraud and unauthorized activity
  • To comply with legal and regulatory obligations
  • To send marketing information (only with your consent)

Change of Purpose

We will only use your personal data for the purposes stated above unless another use is consistent with the original intent. Where a materially different use is required, you will be notified and, if necessary, your consent will be sought.

5. Disclosure of Personal Information

To provide our services efficiently, we may share data with:

  • Payment processors (e.g., Paystack, Flutterwave) for escrow and settlements
  • Inspection and logistics partners for vehicle verification and delivery
  • Identity verification providers for KYC compliance
  • Professional advisers (auditors, legal counsel) under confidentiality obligations
  • Regulatory and law enforcement authorities where required by law

All third parties are required to maintain the confidentiality and security of your data and process it in line with our lawful instructions.

6. Security of Your Personal Information

RevLot applies robust technical and organizational measures, including:

  • End-to-end encryption of sensitive data
  • Secure cloud infrastructure and firewalls
  • Access control and internal audit logs
  • Regular vulnerability assessments and employee training

In the event of a data breach, we will promptly notify affected users and the Nigeria Data Protection Commission (NDPC) as required under Section 32 of the NDPA (2023).

7. International Transfers

Some service providers (such as cloud hosting or payment gateways) may process data outside Nigeria. Where such transfers occur, RevLot ensures compliance with Article 2.11 of the NDPR and Section 41 of the NDPA (2023) through standard contractual clauses and adequacy safeguards.

8. Data Retention

We retain your data only as long as necessary to fulfil business, legal, or regulatory obligations.

Examples:

  • Auction and payment records: minimum of 5 years (per AML laws)
  • Account data: active duration of user relationship
  • Marketing data: until consent is withdrawn

After the retention period, data is securely deleted or anonymized.

9. Your Legal Rights

Under Nigerian law, you have the right to:

  • Access your personal data
  • Rectify inaccurate or outdated information
  • Request deletion where legally permissible
  • Restrict or object to certain processing
  • Withdraw consent for marketing communications
  • Request data portability in machine-readable format

To exercise any of these rights, contact our Data Protection Officer (DPO) at: privacy@revlot.ng

10. Acceptance of this Policy

By creating a RevLot account or using our services, you acknowledge and accept the terms of this Privacy Policy. If you do not agree with this Policy, you should discontinue use of our services.

11. Revisions to this Privacy Policy

We may update this Policy periodically to reflect legal, operational, or technological changes. Material updates will be communicated via email, in-app notifications, or website notices. The latest version will always be available at www.revlot.ng/privacy.

12. Contacting RevLot

Data Protection Officer

RevLot Limited

[Insert Office Address], Nigeria

Email: privacy@revlot.ng

Phone: +234 810 127 0941

If you are dissatisfied with our response, you may contact the Nigeria Data Protection Commission (NDPC) at https://ndpc.gov.ng.