Privacy Policy
paprikka.ng - Immigration Guidance Platform
Effective Date: June 23, 2025 | Last Updated: June 23, 2025
1. Introduction
Bare Metal Studio Oy ("we", "our", "us") operates paprikka.ng, an immigration guidance platform helping Nigerians explore global career opportunities. This Privacy Policy explains how we handle your personal data in compliance with the Nigeria Data Protection Act 2023 (NDPA) and international best practices.
2. Data Controller
Bare Metal Studio Oy
Business ID: 3381172-3
Lapinlahdenkatu 16, 00180 Helsinki, Finland
Email: privacy@paprikka.ng
Nigerian Operations: Lagos, Nigeria
3. Information We Collect
Information You Provide
- Account: Name, email, phone number, password (encrypted)
- Profile: CV/resume, skills, education, work experience, languages
- Immigration: Visa preferences, travel history, destination interests
- Documents: Certificates, transcripts, reference letters
Information We Collect Automatically
- Technical: IP address, browser type, device information
- Usage: Features used, time spent, interaction patterns
- Location: City/state from IP address
Sensitive Information
Immigration documents and passport details are sensitive data. We process these only with your explicit consent for specific visa guidance purposes.
4. How We Use Your Information
| Purpose | Legal Basis |
|---|---|
| Provide immigration guidance | Contract performance |
| Match visa opportunities | Legitimate interest |
| Store your documents | Consent |
| Send important updates | Legitimate interest |
| Prevent fraud and abuse | Legitimate interest |
| Comply with laws | Legal obligation |
| Send newsletters | Consent |
5. Information Sharing
We share your data only with:
Service Providers
- Amazon Web Services (hosting)
- SendGrid (email delivery)
- Paystack/Stripe (payments)
When You Choose
- Immigration consultants you select
- Educational institutions or employers you apply to
Legal Requirements
- When required by Nigerian law or valid legal process
We NEVER sell your personal data.
6. Data Location
Your data is processed in:
- Nigeria: Local operations and support
- EU (Finland): Technical infrastructure
- Secure backups: EU region
All transfers use encryption and appropriate safeguards per NDPA requirements.
7. Data Retention
- Active accounts: While you use our service
- Inactive accounts: Archived after 12 months, deleted after 24 months
- Immigration records: 10 years (legal requirement)
- Documents: Until you delete or 5 years maximum
- Email logs: 12 months
8. Your Rights
Under NDPA, you have the right to:
- Access your personal data
- Correct inaccurate information
- Delete your account and data
- Export your data
- Object to certain processing
- Withdraw consent anytime
Exercise your rights:
- Self-service: Account settings
- Email: privacy@paprikka.ng (7-day response)
9. Security
We protect your data using:
- Industry-standard encryption (TLS 1.3, AES-256)
- Secure password hashing
- Regular security audits
- Access controls and monitoring
- Staff training on data protection
10. Cookies
| Type | Purpose | Legal Basis |
|---|---|---|
| Essential | Login, security | Legitimate interest |
| Analytics | Service improvement | Consent |
| Marketing | Relevant content | Consent |
Manage preferences via cookie banner on our website.
11. Children
Our service is for users aged 18 and above. We don't knowingly collect data from minors.
12. Contact Information
Data Protection Inquiries:
Email: privacy@paprikka.ng
Complaints:
- Contact us first: privacy@paprikka.ng
- Nigeria Data Protection Commission: info@ndpc.gov.ng
13. Changes
We'll notify you of material changes via email. Check the "Last Updated" date for the latest version.