01 Introduction
This Privacy Policy explains how IP Express collects, uses, stores, and protects your personal data when you register for or use our internet services and customer portal. We process personal data in accordance with the Nigeria Data Protection Act 2023 (NDPA) and applicable regulations.
The data controller is IPEXPRESS, of 1, PSSDC Road, Encounter House, Magodo GRA, Phase 2, Lagos.
02 Data we collect
Account and identity data: full name, email address(es), phone number, residential/installation address, city, state, postal code, portal username, and a copy of your government-issued identification submitted for verification (KYC). Service and billing data: subscription plan, billing type, invoices, payments, and account balance. Technical data: information necessary to provide connectivity, such as assigned IP addresses, router/equipment identifiers, and service usage records. Portal data: login activity and actions you take in your account. Communications: messages, support tickets, and comments related to your account.
03 How we use your data
To verify your identity and activate service; to provide, maintain, and support your connection; to bill you and process payments; to communicate service notices, invoices, and password/security emails; to prevent fraud and secure our network; to comply with legal and regulatory obligations, including lawful requests from Nigerian authorities; and to maintain internal records and audit logs of account activity.
04 Legal bases
We process your data on the bases of contract performance (providing the service you signed up for), legal obligation (identity verification, tax, and regulatory record-keeping), our legitimate interests (network security, fraud prevention, service improvement), and consent where specifically requested (which you may withdraw at any time without affecting prior processing).
05 Identity documents
Copies of government-issued ID are stored in restricted, access-controlled storage. They are accessible only to authorized staff for verification and compliance purposes, are never displayed publicly, and are never shared with other customers or used for marketing.
06 Sharing
We do not sell your personal data. We share it only with: payment processors to complete transactions; service contractors (e.g., installation technicians) to the extent needed to serve you; regulators, law enforcement, or courts where legally required; and professional advisers under confidentiality. Any processor we engage is bound by data-processing obligations consistent with the NDPA.
07 Data retention
We keep account and billing records for as long as your account is active and thereafter for the period required by Nigerian tax, telecommunications, and data protection rules. Identity documents are retained while your account is active and for the legally required period after closure, then securely deleted.
08 Security
We protect your data using measures including encrypted connections, role-based access controls, restricted private storage for identity documents, audit logging of administrative actions, and password-based authentication with secure reset workflows. No system is perfectly secure; if a breach affecting your rights occurs, we will notify you and the Nigeria Data Protection Commission as required by law.
09 Your rights
Under the NDPA you may request access to your data, correction of inaccurate data, deletion where legally permissible, restriction of or objection to certain processing, and a copy of data you provided in a portable format. You may also lodge a complaint with the Nigeria Data Protection Commission. To exercise any right, contact us using the details below; we will respond within the timelines required by law.
10 Cookies and portal sessions
The portal uses strictly necessary cookies/session storage to keep you signed in and secure your session. We do not use advertising cookies in the portal.
11 Children
Our services are contracted with adults. We do not knowingly collect personal data from children for account purposes.
12 Changes
We may update this policy; material changes will be notified via the portal or email and reflected in the "Last updated" date.
13 Contact / Data Protection
Data protection enquiries: Reveal data protection email
Office: 1, PSSDC Road, Encounter House, Magodo GRA, Phase 2, Lagos.