iwantam

Privacy Policy

Last updated: 29 September 2026

9JAGLOBALMEDIA LIMITED, RC 9755058, of 2 Atbara Street, Wuse 2, Abuja, FCT, Nigeria ("iwantam", "we") is the data controller for personal data processed on iwantam. We process your data in line with the Nigeria Data Protection Act 2023 (NDPA) and the General Application and Implementation Directive issued by the Nigeria Data Protection Commission (NDPC). Where you live outside Nigeria, we also respect the data protection rights your local law gives you. Our Data Protection Officer is [DPO NAME], reachable at privacy@iwantam.com.

1. What we collect

| Data | Examples | Why we need it | Lawful basis | | --- | --- | --- | --- | | Account data | Email address and the one time sign in codes we send | To create your account and let you sign in securely | Contract | | Profile data | Full name, nickname, phone, country, state, city, street address, profile photo | To show who you are, deliver goods and let the other party on a deal reach you | Contract | | Vendor data | Shop name, bank name, account name and number | To show vendors on offers and bills so buyers can pay them | Contract | | Marketplace activity | Requests, offers, photos, messages, ratings, reviews, bills, delivery status, reports | To run the marketplace and handle disputes | Contract, legitimate interest | | Payment records | Credit and badge purchases, Flutterwave transaction references | To add credits, keep accounts and meet tax duties | Contract, legal obligation | | Verification data | National ID number (such as NIN), passport or driver's licence details, date of birth, live selfie result, business registration number, match results | To award and maintain the Verified badge and prevent fraud | Explicit consent | | Technical data | Device, browser, IP address, log in times, cookies | To keep iwantam secure and working | Legitimate interest, consent for non essential cookies |

Selfie images and facial match results are biometric data, which the NDPA treats as sensitive personal data. We only process them with your explicit consent, and only when you choose to get verified.

We do not knowingly collect data from anyone under 18.

2. Who can see your data

Other users. Your nickname, photo, city, country, shop name, ratings, completed deals and Verified status are public on iwantam. Your full name, street address, phone number, email and bank details are shown only to the person you are dealing with, on the bill you share, and to our authorised staff.

Identity verification provider. Smile ID (or another provider we appoint) checks your details against official records. It acts as our data processor under a written contract.

Payment provider. Flutterwave processes payments for credits and badge fees. We never see or store your full card details.

Service providers. Hosting, database, email and SMS providers who process data for us under contract, such as Supabase and Resend.

Authorities. Law enforcement, regulators or courts where the law requires it or to prevent fraud.

We do not sell your personal data. We do not use it for direct marketing without your consent.

3. Storage outside Nigeria

Some of our providers store data outside Nigeria, and iwantam users can be in any country. Where data leaves Nigeria we transfer it only as the NDPA allows, using safeguards such as NDPC approved contract clauses, and we keep a record of each transfer.

4. How long we keep it

| Data | How long | | --- | --- | | Account and profile, including drafts | While your account is open, then deleted or anonymised after an approved deletion request | | Requests, offers, photos and messages | While your account is open, and up to 12 months after closure where needed to handle disputes | | Payment and credit records | Six years, to meet tax and accounting duties | | Verification result (verified or not, date, provider reference) | While the badge is active, and up to 24 months after for fraud prevention | | Verification selfies and ID images | Not stored by iwantam. Our provider deletes them in line with our contract | | Security logs and audit records | 12 months for security logs, six years for administrator audit records |

5. Your rights

You can ask us to: tell you what data we hold and give you a copy; correct data that is wrong; delete your data; restrict or object to how we use it; move your data to another service; withdraw consent at any time; and not be subject to decisions made only by automated means that seriously affect you.

You can download a copy of your data at any time from your Profile settings. Send other requests to privacy@iwantam.com. We will confirm receipt within 72 hours and respond within 30 days. We may ask you to confirm your identity first.

If you are unhappy with how we handle your data, you can complain to the Nigeria Data Protection Commission at ndpc.gov.ng, or to the data protection authority in your own country.

6. How account and data deletion works

To protect users from fraud and accidental loss, deletion on iwantam goes through a review step.

  1. You request deletion from your Profile settings or by email. Your profile is hidden from other users straight away.
  2. We confirm the request came from you.
  3. A super administrator reviews the request within 7 days. They check for open transactions, unresolved disputes, fraud reports and records we are legally required to keep.
  4. If approved, we delete or anonymise your data within 30 days of your request. Records we must keep by law, such as payment records, are kept only for the required period and are not used for anything else.
  5. If we cannot delete some data yet, we tell you what we are keeping, why, and for how long. We will never refuse a deletion request without a lawful reason.

Every deletion request and decision is logged.

7. Security

We use encryption in transit, one time sign in codes, access controls based on roles, private storage for photos, and logging of administrator actions. Only staff who need your data to do their job can see it.

If a data breach is likely to put your rights at risk, we will report it to the NDPC within 72 hours of becoming aware of it and tell affected users without undue delay.

8. Cookies

We use essential cookies to keep you logged in and secure. We ask for your consent before using any analytics or marketing cookies, and you can change your choice at any time.

9. Changes

We will tell you about material changes to this policy by email or on iwantam before they take effect.

10. Contact

Data Protection Officer: [DPO NAME], privacy@iwantam.com, 9JAGLOBALMEDIA LIMITED, 2 Atbara Street, Wuse 2, Abuja, FCT, Nigeria.