Privacy Policy

Parffic Technologies Ltd ("Parffic", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform to book or list parking spaces in Lagos, Nigeria. By using Parffic, you agree to the collection and use of information in accordance with this policy. If you disagree, please discontinue use of the platform.

We collect information you provide directly: • Account information: full name, email address, Nigerian phone number, password hash • Profile data: vehicle details (plate number, model, type) • Payment information: processed securely by Paystack — we do not store card details • Space listings (for owners): address, photos, pricing, operating hours, amenities • Communications: support requests, reviews, messages We also collect automatically: • Usage data: pages visited, features used, booking history • Device data: IP address, browser type, operating system • Location data (with your permission): used to show nearby parking spaces

We use your information to: • Create and manage your account • Process parking bookings and payments • Send booking confirmations, receipts, and expiry alerts • Facilitate QR code gate entry • Verify parking spaces (for owners) • Improve our platform through analytics • Respond to support requests • Send promotional communications (with your consent) • Comply with Nigerian legal obligations

We do not sell your personal data. We share information only with: • Paystack: to process payments securely (CBN-regulated) • Space owners: your name and vehicle plate number are shared to facilitate access • Service providers: hosting (Supabase/Vercel), analytics, SMS providers — all under data protection agreements • Law enforcement: when required by Nigerian law We do not transfer your data outside Nigeria without adequate protection safeguards.

We retain your personal data for as long as your account is active. When you delete your account: • Booking history is retained for 7 years (tax and regulatory requirements) • All other personal data is deleted within 30 days • Anonymised analytics data may be retained indefinitely

Under the Nigeria Data Protection Regulation (NDPR), you have the right to: • Access the personal data we hold about you • Correct inaccurate personal data • Request deletion of your personal data • Object to processing of your data • Data portability • Withdraw consent at any time To exercise these rights, contact us at hi@parffic.com. We will respond within 30 days.

We implement industry-standard security measures: • 256-bit TLS encryption for all data in transit • AES-256 encryption for sensitive data at rest • Paystack PCI-DSS compliance for payment processing • Regular security audits and penetration testing • Multi-factor authentication available for accounts No system is 100% secure. If you suspect unauthorised access, contact us immediately.

We use cookies and similar technologies to: • Keep you signed in to your account (essential cookies) • Remember your preferences (functional cookies) • Analyse platform usage to improve features (analytics cookies) • Deliver relevant promotions (marketing cookies — opt-in only) You can manage cookie preferences in your browser settings. Disabling essential cookies will affect platform functionality. Types of cookies we use: • Session cookies: expire when you close your browser • Persistent cookies: remain for up to 12 months • Third-party cookies: from Paystack and analytics providers

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or in-app notification at least 14 days before the change takes effect. Your continued use of Parffic after the effective date constitutes acceptance of the updated policy.

For privacy-related enquiries or to exercise your rights: Email: hi@parffic.com Address: Parffic Technologies Ltd, Victoria Island, Lagos, Nigeria Data Protection Officer: Available via the email above. If you are unsatisfied with our response, you may lodge a complaint with the Nigeria Data Protection Bureau (NDPB).