We collect information needed to provide and secure BizWatch, operate business-management features, support users, process subscriptions, and meet legal obligations. We do not sell personal information.
Introduction
Bizwatch operates BizWatch, a business-management platform that helps businesses manage activities such as sales, point-of-sale transactions, products, inventory, branches, customers, staff access, expenses, invoices, payments, reporting, and related operational records.
In this Privacy Policy, references to “BizWatch,” “we,” “us,” or “our” mean Bizwatch. References to “you” or “your” mean an individual who accesses or uses our website, applications, services, or support channels.
We are committed to processing personal information fairly, lawfully, transparently, and securely. This Policy describes our data practices and the choices and rights available to you.
Scope of this Privacy Policy
This Privacy Policy applies when you:
- visit the BizWatch website;
- create or use a BizWatch account;
- create, join, or manage a business workspace;
- use our point-of-sale or business-management tools;
- communicate with our support or administrative teams;
- receive product, service, or security communications;
- participate in surveys, trials, promotions, or onboarding;
- otherwise interact with services operated by us.
This Policy does not automatically apply to independent third-party websites, payment providers, banks, communication platforms, or other services that may be linked to or integrated with BizWatch. Those organisations may have their own privacy policies and data-processing responsibilities.
Our role when processing information
When we act as a data controller
We generally act as a data controller when we determine why and how personal information is processed. This includes information relating to:
- account registration and authentication;
- website visitors and prospective customers;
- subscriptions, invoices, and billing administration;
- platform security, fraud prevention, and system logs;
- support enquiries and service communications;
- our contractual and regulatory obligations.
When we act as a data processor
A business using BizWatch may upload, enter, manage, or otherwise process information about its customers, employees, suppliers, contractors, or other individuals. For that information, the business will generally determine the purpose and means of processing, while Bizwatch processes the information to provide the platform.
In those circumstances, the business is generally the data controller and Bizwatch acts as its data processor or service provider, subject to the applicable agreement and lawful instructions of the business.
Information we collect
The personal information we collect depends on how you interact with BizWatch and the features you use.
Account and identity information
This may include your name, profile image, username, email address, telephone number, account identifier, password hash, verification status, preferred language, and authentication details.
Business information
This may include a business name, registration details, business type, industry, address, contact information, branches, operating locations, tax information, branding, ownership details, and workspace settings.
Staff and membership information
This may include staff names, email addresses, phone numbers, assigned branches, job roles, permissions, invitation details, membership status, and records of actions performed within a business workspace.
Customer information
Businesses may record customer names, contact information, addresses, purchase histories, account balances, invoices, receipts, notes, preferences, and related customer records.
Sales and transaction information
This may include sale references, purchased items, quantities, prices, discounts, taxes, payment methods, transaction dates, cashiers, branches, refunds, returns, receipts, invoices, and transaction status.
Product and inventory information
This may include product names, descriptions, images, categories, stock quantities, stock movements, supplier details, costs, prices, barcodes, units, batches, manufacturing dates, expiry dates, and branch inventory records.
Billing and subscription information
This may include subscription plans, billing contacts, invoice details, transaction references, payment status, payment-provider identifiers, and limited payment metadata.
We generally do not intend to store complete payment-card numbers, card security codes, or online-banking credentials. Such information may be collected directly by an authorised payment provider.
Expense and financial records
Businesses may enter expense descriptions, categories, amounts, dates, supporting documents, payees, payment methods, and accounting-related information.
Support and communication information
This may include support tickets, email correspondence, attachments, chat messages, feedback, complaints, survey responses, and records of communications with us.
Device and technical information
This may include your IP address, browser type, device type, operating system, language, approximate location derived from IP address, application version, device identifiers, referring page, session information, and timestamps.
Usage and activity information
This may include login records, pages viewed, features used, actions performed, search activity, workspace events, audit records, error reports, performance information, and security-related activity.
Cookie and preference information
This may include session identifiers, consent preferences, authentication state, interface preferences, and information obtained through cookies or similar technologies.
Unless a specific BizWatch feature expressly requires it and you have a lawful reason, you should not upload sensitive personal information such as health records, biometric data, religious beliefs, political opinions, or other highly sensitive information.
How we obtain information
We may obtain personal information:
- directly from you when you register, complete forms, configure a workspace, or contact us;
- from a business owner or administrator who invites you to join a workspace;
- from authorised users who enter customer, employee, supplier, or transaction information;
- automatically when you use our website or platform;
- from payment, hosting, analytics, authentication, communication, security, or support providers;
- from publicly available sources where permitted by law;
- from integrations you or your business choose to connect to BizWatch.
How we use personal information
We may process personal information to:
- create and administer user accounts;
- authenticate users and maintain secure sessions;
- create and manage business workspaces;
- provide point-of-sale and operational features;
- record sales, inventory, expenses, and business activity;
- generate invoices, receipts, statements, and reports;
- manage subscriptions, billing, and payments;
- send account, transaction, and service notifications;
- provide customer support and resolve disputes;
- monitor system performance and availability;
- identify, investigate, and prevent fraud or misuse;
- protect accounts, users, businesses, and our infrastructure;
- maintain audit logs and operational records;
- improve usability, features, and service quality;
- perform internal analytics and business planning;
- enforce our agreements and platform policies;
- comply with legal, regulatory, and tax obligations;
- respond to lawful requests from authorised bodies;
- establish, exercise, or defend legal claims;
- communicate relevant offers or updates where permitted by law.
We will not use personal information for a materially incompatible purpose without an appropriate lawful basis or, where required, further notice or consent.
Lawful bases for processing
Depending on the circumstances, we may rely on one or more of the following grounds:
Processing needed to create your account, provide requested services, administer a subscription, or perform an agreement with you or your business.
Processing based on a clear and voluntary choice, such as certain marketing communications, optional cookies, or integrations.
Processing necessary to comply with applicable legal, regulatory, accounting, tax, security, or reporting requirements.
Processing necessary for legitimate business purposes, such as improving the service, preventing fraud, securing the platform, supporting users, and maintaining operational records, where those interests are not overridden by your rights.
Processing necessary in limited circumstances to protect someone’s life, safety, or essential interests.
Processing required for a task carried out in the public interest or under an applicable legal authority, where relevant.
Information controlled by businesses using BizWatch
Businesses using BizWatch may collect and process personal information through the platform. Each business is responsible for:
- having a lawful basis for collecting the information;
- giving appropriate privacy notices to individuals;
- collecting only information that is reasonably necessary;
- keeping its records accurate and up to date;
- assigning appropriate staff permissions;
- responding to privacy requests from its customers or staff;
- complying with applicable retention requirements;
- ensuring its use of BizWatch complies with applicable law.
If your information was entered into BizWatch by a business and you wish to access, correct, delete, or object to that information, you should normally contact that business first.
Where appropriate, we will assist the relevant business in responding to a valid privacy request.
International data transfers
Some service providers or infrastructure used by BizWatch may process information outside Nigeria or outside the country in which you are located.
Where personal information is transferred internationally, we will take reasonable steps to ensure that the transfer is permitted and protected through appropriate safeguards. Depending on the circumstances, safeguards may include:
- transfers to jurisdictions with recognised protection;
- contractual data-protection clauses;
- service-provider security and compliance commitments;
- your explicit consent where legally appropriate;
- another lawful transfer mechanism.
How long we retain information
We retain personal information only for as long as it is reasonably needed for the purpose for which it was collected, including to:
- provide and maintain the service;
- keep accurate business and transaction records;
- comply with financial, tax, and legal obligations;
- resolve disputes and enforce agreements;
- investigate fraud, misuse, or security incidents;
- maintain backups and business continuity;
- establish or defend legal claims.
Retention periods may vary according to the type of information, workspace settings, contractual requirements, business instructions, legal obligations, risk, and technical backup cycles.
When information is no longer required, we may securely delete it, anonymise it, aggregate it, or restrict its use until deletion is technically possible.
Deletion of a live account may not immediately remove every copy from encrypted backups. Backup copies may remain temporarily until the applicable backup cycle expires, unless a longer period is legally required.
How we protect information
We use reasonable administrative, technical, and organisational safeguards designed to protect personal information against accidental or unlawful loss, destruction, misuse, alteration, disclosure, or unauthorised access.
Depending on the system and risk, these measures may include:
- encrypted network communication;
- password hashing and secure authentication controls;
- role-based and permission-based access;
- workspace and business-level access restrictions;
- login monitoring and security event records;
- audit logs and administrative activity records;
- data backups and recovery procedures;
- infrastructure monitoring and vulnerability management;
- restricted administrative access;
- incident response and investigation procedures;
- security obligations for relevant service providers.
No online service can guarantee absolute security. You are responsible for keeping your login details confidential, using a strong unique password, enabling available security features, and promptly notifying us if you suspect unauthorised access.
Personal data breaches
If we become aware of a personal data breach, we will assess the incident and take appropriate steps to contain, investigate, document, and remediate it. Where required, we will notify affected organisations, individuals, or competent authorities.
Your privacy rights
Subject to applicable law and relevant exemptions, you may have the right to:
Receive clear information about how your personal information is processed.
Ask whether we process your information and request a copy of eligible personal information.
Ask us to correct inaccurate or incomplete personal information.
Ask for deletion where the information is no longer needed or another legal ground applies.
Ask us to limit processing in certain circumstances.
Object to processing based on particular lawful grounds, including certain direct marketing.
Withdraw consent for future processing where consent is the lawful basis.
Request eligible information in a structured, commonly used, machine-readable format.
Raise a complaint with us or with the competent data-protection authority.
How to submit a request
To exercise a privacy right, contact us at hello@blockzhire.com .
Please provide enough information for us to understand your request. We may ask for reasonable information to verify your identity and protect the account or data from unauthorised disclosure.
Where information is controlled by a business using BizWatch, we may direct your request to that business or assist it in responding.
We may decline or limit a request where permitted by law, including where a request is manifestly unfounded, excessive, unverifiable, affects another person’s rights, or conflicts with a legal retention obligation.
Service and marketing communications
Service communications
We may send messages necessary to operate your account or provide the service, including:
- email verification and password-reset messages;
- login and account-security alerts;
- workspace invitations;
- billing, subscription, and payment notices;
- transaction or operational notifications;
- important service or policy updates;
- support responses.
Because these communications are operational, you may not be able to opt out while maintaining an active account.
Marketing communications
Where permitted, we may send information about features, offers, educational materials, or product updates. You may unsubscribe using the link in the message or by contacting us.
Unsubscribing from marketing does not prevent us from sending necessary account, security, billing, or service communications.
Children’s privacy
BizWatch is designed for businesses and authorised business users. It is not intended to be used independently by children who do not have the legal capacity to enter into the relevant agreement.
A business must not use BizWatch to collect children’s personal information unless it has a lawful basis, provides appropriate notices, and obtains any required consent or authorisation.
If you believe that a child’s personal information has been collected improperly, contact us at hello@blockzhire.com .
Third-party services and links
BizWatch may contain links to or integrations with third-party services. These may include payment providers, financial institutions, messaging providers, maps, analytics services, cloud platforms, or other business tools.
We are not responsible for the independent privacy practices of third parties. Before providing information to a third party, review its privacy policy and terms.
Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes in our services, practices, technology, legal obligations, or business operations.
When we make changes, we will update the “Last updated” date at the top of this page. Where a change is significant, we may provide additional notice through the platform, by email, or through another appropriate channel.
We encourage you to review this page periodically.
Contact us and submit complaints
For privacy questions, requests, or complaints, contact:
We will review privacy complaints and respond within a reasonable period, subject to applicable legal requirements.
You may also have the right to lodge a complaint with the Nigeria Data Protection Commission or another competent data-protection authority.
Contact us at hello@blockzhire.com and we will help you.