This policy explains what personal data Wadata HR collects, why we collect it, how we use it, and your rights. We have written it in plain language because we believe you deserve to understand exactly what happens to your data.
Wadata HR is operated by Wadata HR Solutions Limited, a company registered in Nigeria with its principal place of business in Awka, Anambra State.
When this policy refers to "Wadata HR", "we", "us", or "our", we mean Wadata HR Solutions Limited. When it refers to "you", we mean the business owner, administrator, or individual accessing our platform.
You can contact us at: privacy@wadatahr.com
We collect the following categories of personal and business data:
Account Information: Name, email address, WhatsApp number, business name, CAC number, Tax Identification Number (TIN), and state of operation.
Worker Data: Full names, email addresses, phone numbers, National Identification Numbers (NIN), Tax Identification Numbers (TIN), job titles, salary information, bank account details, Pension Fund Administrator (PFA) details, and RSA numbers of employees registered on the platform.
Payroll Data: Monthly salary calculations, statutory deductions (PAYE, pension, NHF, NSITF), net pay figures, and payroll run history.
Compliance Data: Records of statutory remittances including PAYE, pension, WHT, NSITF, and NHF remittance history.
Contract Data: Employment contract details, signing dates, and digital signature records.
Payment Data: Subscription billing information processed through Flutterwave. We do not store card details - these are held by Flutterwave in accordance with PCI DSS standards.
Technical Data: IP addresses, browser type, device information, and usage logs for security and performance monitoring.
We use your data to:
We do not sell your data to third parties. We do not use your data for advertising purposes.
Under the Nigeria Data Protection Act 2023 (NDPA), we process your data on the following legal bases:
Contractual necessity - to provide the services you have subscribed to.
Legal obligation - to maintain records required by Nigerian tax and labour law.
Legitimate interests - to improve our platform and prevent fraud.
Consent - where you have explicitly opted in to optional features.
When you enter worker data into Wadata HR, you are acting as the data controller for that information and your workers are the data subjects. This means you are responsible for:
Wadata HR acts as a data processor on your behalf. We process worker data only as instructed by you through the platform and in accordance with this policy. Workers may also contact us directly at privacy@wadatahr.com if they have concerns about how their data is being processed.
We do not sell, rent, or share your data with third parties for commercial purposes. We share data only in the following limited circumstances:
Flutterwave - payment processing for subscriptions. Flutterwave's Privacy Policy is available at flutterwave.com/ng/privacy-policy.
Resend - email delivery for payslips, contracts, and compliance notifications. Only the recipient email address and email content are shared.
Supabase - our database and authentication provider. Data is stored on Supabase servers. Supabase's Privacy Policy is available at supabase.com/privacy.
Legal requirements - we may disclose data if required to do so by Nigerian law, court order, or a legitimate request from a regulatory authority.
Business transfers - if Wadata HR is acquired or merges with another company, your data may transfer as part of that transaction. We will notify you before this happens.
Your data is stored on secure servers provided by Supabase. We implement the following security measures:
No system is completely immune to security risks. If we become aware of a breach that affects your data, we will notify you promptly.
We retain your account data for as long as your account is active. If you close your account, we will delete your data within 90 days unless we are required by law to retain it for longer.
Under the Nigeria Data Protection Act 2023, you have the right to:
To exercise any of these rights, contact us at privacy@wadatahr.com. We will respond within 14 working days.
For complaints, you may also contact the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.
Wadata HR uses essential cookies only:
We do not use tracking, analytics, or advertising cookies. You can disable cookies in your browser settings but this may affect how the platform functions.
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and update the date at the top of this page. Your continued use of Wadata HR after changes are posted means you accept the updated policy.
If you have questions about this policy or how we handle your data, contact us: