Arkcess

PartnerFAQPricingBlogContact Us

Arkcess Privacy Policy

At Arkcess, we provide innovative estate security solutions, visitor access management, and levy payment systems for gated communities across Nigeria. Protecting your data and privacy is central to how we operate.This Privacy Policy explains how we collect, use, store, and safeguard personal information in line with the Nigeria Data Protection Act (NDPA) 2023, the Nigeria Data Protection Regulation (NDPR 2019), and other applicable laws. By using Arkcess, you agree that your personal data will be handled as described in this Privacy Policy.

1. Who We Are

Arkcess acts as the Data Controller for all personal data collected through our estate management platform and mobile app, and some information on the payment systems.

2. Information We Collect

We collect only the data necessary to provide safe and seamless estate management services:
  • Resident Information: Name, phone number, email, estate/unit details, access rights.
  • Visitor Records: Visitor name, phone number, access codes, entry/exit logs, time stamps.
  • Payment Information: Levy payments, transaction history, billing records (processed securely).
  • Technical Data: IP address, device details, login metadata, cookies, and app usage analytics.
  • Communications: Emails, WhatsApp messages, and customer service interactions.

    • 3. Purpose of Processing

    We process personal data for:
  • Verifying residents and granting visitor access.
  • Generating and managing visitor entry codes.
  • Processing levy payments and financial transactions.
  • Providing customer support and estate security alerts.
  • Improving our platform, services, and security features.
  • Complying with legal, tax, and regulatory requirements. atures.

    • 4. Lawful Basis for Processing

    Arkcess processes data under the following lawful basis:
  • Consent – when you voluntarily provide information.
  • Contractual Necessity – to deliver visitor management and levy payment services.
  • Legitimate Interest – securing gated communities and preventing fraud.
  • Legal Obligation – compliance with NDPA, NDPR, CBN regulations, and law enforcement directives.

    • 5. Data Sharing & Disclosure

    We never sell personal data. However, we may share information with:
  • Estate managers, administrators, and security personnel – for operational security.
  • Financial institutions and payment processors – for levy collections.
  • Regulators and law enforcement authorities – swhere disclosure is legally required.
  • Data Processors/ Service providers – such as cloud hosting, payment services and IT security vendors (bound by strict data protection agreements).

    • 6. Data Retention

    We retain personal data only as long as necessary:
  • Visitor logs – kept for estate security purposes (duration set by estate policy).
  • Payment & transaction records – fretained in line with CBN and tax regulations.
  • Resident data – maintained while you remain an active user of Arkcess.
    • When data is no longer required, we securely delete or anonymize it.

    7. Your Data Rights

    As a data subject under the NDPA, you have the right to:
  • Request access to the personal data we hold.
  • Request correction of inaccurate or incomplete data.
  • Request erasure (“right to be forgotten”).
  • Object to processing for non-essential purposes.
  • Withdraw consent at any time and clearly communicate the same (without affecting prior lawful processing).
  • Request data portability where applicable.
    • To exercise your rights, please contact us (see Section 12).

    8. Data Security

    We take data security seriously and have implemented:
  • End-to-end encryption for sensitive data.
  • Role-based access control (only authorized staff access your data).
  • Two-Factor Authentication (2FA) for system logins.
  • Regular audits and penetration testing to identify risks.

    • 9. Children’s Data

    Arkcess does not knowingly collect data from children under 18, except with parental/guardian consent.

    10. Cross-Border Data Transfers

    Where your data is transferred outside Nigeria (e.g., cloud hosting), Arkcess ensures compliance with NDPA by using adequate safeguards, including Data Processing Agreements (DPAs) with service providers.

    11. Third-Party Processors and Payment Systems

    While we (as the Data Controller) take all reasonable steps to safeguard your personal information in compliance with the Nigeria Data Protection Act (NDPA) 2023, please note that certain processing activities are carried out by third-party service providers, including but not limited to payment gateway providers and cloud hosting services.

    We do not accept liability for any loss, breach, unauthorized access, or misuse of your personal data that arises solely from the acts, omissions, or security failures of these independent third-party processors or payment systems. However, we ensure that all such providers engaged by us are under binding data protection obligations consistent with the NDPA and are required to maintain appropriate technical and organizational measures to secure your data.

    Where a breach is attributable to the fault of such third-party processors, they shall be directly responsible for any claims, liabilities, or damages arising therefrom.

    Updates to this Policy

    We may update this Privacy Policy from time to time. Any changes will be posted on our website/app with the updated effective date.

    12. Contact Us

    If you have questions, concerns, or wish to exercise your data rights, please contact:
    Arkcess Data Protection Office (DPO)Email: hello@arkcess.app, info@arkcess.app Help Center:www.arkcess.appOffice:NO 9 , OMOLARA OLUSI STREET, HOPE VILLE ESTATE, AJAH, LAGOS STATE, NIGERIA.

    Arkcess Privacy Notice (App)

    At Arkcess, your privacy matters. We collect and process only the data we need to keep your estate secure, connected, and convenient.

    What We Collect

  • Resident details (name, contact, estate info).
  • Visitor records (names, phone, entry/exit logs).
  • Levy & payment records.
  • Device and usage data.

    • Why We Collect It

  • To verify residents and grant secure visitor access.
  • To process levy payments safely.
  • To provide support and estate alerts.
  • To comply with Nigerian laws and regulations.

    • Your Rights

    Under the Nigeria Data Protection Act (NDPA), you have the right to:
  • ✔️ Access your data
  • ✔️ Correct or update it
  • ✔️ Request deletion (“right to be forgotten”)
  • ✔️ Object to certain processing
  • ✔️ Withdraw consent anytime

    • How We Protect Your Data

  • End-to-end encryption
  • Restricted staff access
  • Two-factor authentication
  • Secure cloud hosting

    • Third-Party Services (Payments & Hosting)

    To keep things running smoothly, we work with trusted third-party service providers—like payment platforms and cloud hosting companies. While we do our best to protect your personal data, please note that if a data breach or security issue happens on their side, we cannot be held responsible for it.
    That said, we only partner with providers who are required to follow strict data protection and security standards under Nigerian law. If something goes wrong because of their fault, they—not you—are directly responsible for fixing it.
    We never sell your data. Information may be shared only with estate managers, payment processors, or regulators where legally required.