Privacy Policy

Last updated: August 20, 2026

Contents

At WorkPally ("we", "our", or "us"), your privacy is a top priority. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services. Please read this policy carefully. By using WorkPally, you consent to the practices described here.

1. Information We Collect

We collect information you provide directly and information generated automatically as you use our services.

Information you provide:

  • Account registration details (name, email address, phone number, business name)
  • Payment and billing information (processed securely by our payment partners)
  • Business data you enter into the platform (customers, products, transactions, employees)
  • Communications you send us (support requests, feedback)

Information collected automatically:

  • Log data (IP address, browser type, pages visited, timestamps)
  • Device information (device type, operating system)
  • Usage data (features used, session duration, click patterns)
  • Cookies and similar tracking technologies

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the WorkPally platform
  • Process transactions and send related notifications
  • Respond to comments, questions, and customer support requests
  • Send you technical notices, updates, and administrative messages
  • Send marketing communications (where you have consented)
  • Monitor and analyse usage patterns to improve our services
  • Detect, prevent, and address fraud, abuse, and security issues
  • Comply with legal obligations

3. Sharing of Information

We do not sell your personal data. We may share your information only in the following circumstances:

  • Service Providers: Trusted third-party vendors who help us operate our platform (e.g., hosting, payment processing, analytics) under strict confidentiality agreements.
  • Legal Requirements: Where required by law, court order, or governmental authority.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice to you.
  • With Your Consent: In any other case where you have explicitly given consent.

4. Data Security

We implement industry-standard security measures to protect your data, including:

  • TLS/SSL encryption for all data in transit
  • AES-256 encryption for sensitive data at rest
  • Regular security audits and vulnerability assessments
  • Role-based access controls for our internal staff
  • Secure, redundant data centres

While we strive to protect your information, no method of transmission over the internet is 100% secure. We encourage you to use strong, unique passwords and to notify us immediately of any suspected unauthorised access.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. Upon account closure, we retain your data for up to 30 days to allow for data export. Business data may be retained for longer periods where required by applicable Nigerian law (e.g., financial records under FIRS regulations). You may request deletion of your account and associated data at any time by contacting us.

6. Cookies

We use cookies and similar tracking technologies to enhance your experience. Types of cookies we use:

  • Essential Cookies: Required for the platform to function correctly.
  • Analytics Cookies: Help us understand how users interact with our platform.
  • Preference Cookies: Remember your settings and preferences.
  • Marketing Cookies: Used to deliver relevant advertising (only where consent is given).

You can control cookies through your browser settings. Disabling certain cookies may affect platform functionality.

7. Your Rights

Depending on your location and applicable law, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion of your personal data (subject to legal retention requirements).
  • Portability: Request your data in a machine-readable format.
  • Objection: Object to certain processing activities, including direct marketing.
  • Withdrawal of Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at privacy@workpally.com.

8. Third-Party Services

Our platform may contain links to third-party websites or integrate with third-party services (e.g., Paystack, Flutterwave, Google Analytics). This Privacy Policy does not apply to those services. We encourage you to review the privacy policies of any third-party services you use through WorkPally.

9. Children's Privacy

WorkPally is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a prominent notice on our platform at least 14 days before the changes take effect. Your continued use of WorkPally after the effective date constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact our Data Protection team: