NIPCO PLC ("NIPCO", "we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you interact with NIPCO through our website, at our retail stations, in connection with our products and services, or through any other channel.
This policy is issued in accordance with the Nigeria Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Regulation (NDPR). We encourage you to read it carefully.
1. Introduction
NIPCO PLC, incorporated in Nigeria (RC 309339), with its registered office at 1 & 15 Dockyard Road, Apapa, Lagos, is the data controller responsible for personal information collected through our website at nipcoplc.com, our retail station loyalty programme, our job application portal, and through other customer, contractor, investor and employee-facing channels.
NIPCO's Data Protection Officer can be contacted at dpo@nipcoplc.com.
2. Data We Collect
The type of personal information we collect depends on your relationship with NIPCO. We may collect:
- Identity Data: Name, date of birth, national identification number, passport number, driver's licence number.
- Contact Data: Address, email address, telephone numbers.
- Transaction Data: Details of products and services you have purchased or enquired about, and payment transaction records.
- Loyalty Programme Data: NIPCO Rewards membership details, transaction history, points balance, and redemption records.
- Technical Data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our website.
- Usage Data: Information about how you use our website, products and services.
- Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences.
- Employment Application Data: CV, qualification records, employment history, references, and assessment results for job applicants.
We do not intentionally collect any special categories of personal data (such as data about your race, ethnicity, religion, health, sexual orientation or political opinions) unless legally required to do so or with your explicit consent.
3. How We Use Your Data
We use your personal data for the following purposes:
- To provide and manage products and services you have requested, including fuel purchases, LPG cylinder supply, and loyalty programme membership.
- To process and manage your job application.
- To manage our contractual relationships with suppliers, contractors and partners.
- To communicate with you about your account, transactions, or enquiries.
- To send you marketing communications where you have given consent or where we have a legitimate interest in doing so.
- To comply with our legal and regulatory obligations, including tax, anti-money laundering, and anti-corruption requirements.
- To improve our website, products, and services through analytics and research.
- To protect NIPCO's legal interests and enforce our contractual rights.
4. Legal Basis for Processing
Under the NDPA, we process your personal data on the following legal bases:
- Contract: Processing necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
- Legal Obligation: Processing necessary to comply with a legal obligation to which NIPCO is subject.
- Legitimate Interests: Processing necessary for our legitimate interests, such as fraud prevention, network and information security, and direct marketing to existing customers, provided those interests are not overridden by your rights and interests.
- Consent: Where you have given clear, specific, informed and unambiguous consent to processing for a particular purpose, such as receiving marketing emails.
5. Data Sharing
We may share your personal data with:
- Group companies: Other NIPCO subsidiaries and affiliates where necessary for operational or administrative purposes.
- Service providers: Third parties who perform services on our behalf, such as IT service providers, payment processors, marketing agencies, and logistics companies. These parties are bound by data processing agreements requiring them to protect your data.
- Regulatory authorities: The NMDPRA, NESREA, FIRS, and other regulatory bodies where we are required by law to disclose information.
- Professional advisers: Lawyers, auditors, and consultants who provide professional services to NIPCO.
We do not sell your personal data to third parties for their own marketing purposes.
6. Retention Periods
| Category of Data | Retention Period |
|---|
| Customer transaction records | 7 years from the date of the last transaction |
| Loyalty programme member data | Duration of membership + 3 years after closure |
| Job application data (unsuccessful) | 12 months from the date of the decision |
| Employee records | Duration of employment + 7 years |
| Supplier / contractor records | Duration of contract + 7 years |
| Website enquiry / contact form data | 3 years from the date of submission |
| CCTV footage (retail stations) | 30 days unless required for an investigation |
7. Your Rights
Under the NDPA, you have the following rights in relation to your personal data:
- Right of access: You may request a copy of the personal data we hold about you.
- Right to rectification: You may request that we correct inaccurate or incomplete data.
- Right to erasure: You may request that we delete your personal data in certain circumstances.
- Right to restrict processing: You may request that we restrict the processing of your data in certain circumstances.
- Right to data portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format.
- Right to object: You may object to processing based on legitimate interests or for direct marketing purposes.
- Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact our Data Protection Officer at dpo@nipcoplc.com. We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).
8. Data Security
We have implemented appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, alteration, or disclosure. These measures include encryption of data in transit and at rest, access controls limiting data access to employees who need it to perform their duties, regular security assessments and penetration testing of our IT systems, staff training on data security and privacy, and incident response procedures for data breaches. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the NDPC in accordance with the timelines required by the NDPA.
9. Cookies
Our website uses cookies and similar tracking technologies to distinguish you from other users, to improve your browsing experience, and to compile aggregate statistical data about usage. We use the following categories of cookies:
- Strictly necessary cookies: Required for the operation of the website. These cannot be switched off.
- Analytical / performance cookies: Allow us to count visits and understand how users navigate our website. All data collected is aggregated and anonymous.
- Functionality cookies: Enable enhanced functionality and personalisation, such as remembering your language preference.
- Targeting cookies: Set by our advertising partners to build a profile of your interests and show relevant ads. These are only set with your consent.
You can set your browser to refuse cookies or to alert you when cookies are being sent. However, some parts of our website may not function properly if cookies are disabled.
For questions, requests or complaints about this Privacy Policy or our handling of your personal data, please contact:
Data Protection Officer, NIPCO PLC
1 & 15 Dockyard Road, Apapa, Lagos, Nigeria
Email: dpo@nipcoplc.com
Tel: +234 811 559 0117
This Privacy Policy was last updated on 1 January 2025. We reserve the right to update it from time to time to reflect changes in law, our data practices, or our business. The current version will always be available on this page.