Privacy Policy

Smash Technology Limited ("Smash Technology," "we," "our," "us") values and respects the privacy of each of our users ("you", "your") who interact with any of our services and subsidiaries under Our Businesses section.

We are committed to safeguarding the Personally Identifiable Information (PII) and/or Sensitive Personally Identifiable Information (SPII) of all our users, ensuring your data is aligned with the highest standards of security, transparency, and proper handling in compliance with global data regulations — including NIST, GDPR, and the Nigeria Data Protection Act (NDPA).

By using any of our services, you confirm that you have fully read, understood, and accepted this policy regarding your data.

This policy applies to all users, customers, employees, and vendors engaging with subsidiaries under Smash Technology Limited — spanning transport, e-hailing, e-commerce, food delivery, bookings, virtual office solutions, travel & hospitality, real estate, and social networking. It pertains to all digital and physical data across our ads, applications, and online/in-person services.

• Develop, enhance, and keep our services operable
• Identify and validate individuals and preserve personal identification information
• Handle payments securely and prevent fraudulent schemes
• Communicate with users, answer requests, and deliver notifications
• Generate personalised experiences through data-driven recommendations
• Conduct research, analytics, and business intelligence operations
• Enhance marketing and advertising campaigns
• Stay compliant with legal, regulatory, and cybersecurity standards
• Research, create, and implement new product tools

• Explicit user consent and permission
• Fulfillment of service agreements and contractual obligations
• Legitimate interests: anti-fraud, service improvements, marketing analytics
• Compliance with cybersecurity frameworks and regulatory laws

• Affiliates & Subsidiaries: For a versatile cross-device experience across our platforms.
• Service Providers: Payment processors, hosting services, SEO tools, and support platforms.
• Regulatory Authorities: As required by law, for fraud detection or public interest.
• Business Partners & Advertisers: Only with user consent, for marketing or promotional purposes.

All third-party partners are required to comply with data protection laws, confidentiality agreements, and information security protocols.

• Encryption Protocols: AES-256 for stored data; TLS 1.3 for data in transit
• Access Control: Role-Based Access Control (RBAC) and Multi-Factor Authentication (MFA)
• Incident Response: Proactive monitoring with fast, focused breach notification
• Regular Assessments: Penetration tests, vulnerability scans, and compliance audits

• Transaction & Account Data: Retained as required by financial and administrative law
• Marketing Data: Retained based on user preferences — opt-out available at any time
• User-Requested Deletion: Contact privacy@smashtechgroup.com to request removal

• Access and obtain a copy of your data
• Request correction of inaccurate or incomplete data
• Request deletion of your personal data
• Restrict processing in specific circumstances
• Receive and transfer your data in a structured format
• Opt-out of marketing and automated decision-making
• Withdraw consent and revoke your data at any time

When personal data is transferred outside our operating country, we ensure adequate safeguards — including encryption and GDPR Standard Contractual Clauses (SCCs) — are in place.

Certain services are not intended for individuals under 13. We do not knowingly collect, process, or store data from minors without verifiable parental consent. If discovered, such data is immediately erased.

• Improve platform performance and user experience
• Analyse user behaviour and identify areas for improvement
• Deliver personalised ads and marketing content

Users can manage cookie preferences by accepting or rejecting the prompt, or via browser settings.

This policy is periodically updated to reflect legislative, technological, and business changes. We will notify you via email and in-app notifications. We encourage users to review this policy regularly.