Privacy Policy

TAB is run by Bill Intelligent Flow Technologies Limited ("we", "us"), a company in Lagos, Nigeria. This policy covers the website at tab.africa and the TAB app at app.tab.africa. For the data described here we are the data controller under the Nigeria Data Protection Act 2023 (NDPA).

It sits beside our company-wide Privacy Notice, which covers all of our products. Where the two describe TAB differently, this policy applies.

When you visit this website:

• What you send us through the contact form: your name, email address, phone number and message.
• If you accept analytics, how you use the site: the pages you view, where you came from, your device and browser type, and an approximate location worked out from your IP address. See the Cookie Policy.
• Technical logs kept by our hosting provider, such as your IP address and the time of a request, so we can keep the site secure and working.

When your business uses TAB:

• Account details: the name, email address and phone number of the owner and of any staff you add.
• Business details: your business name, type, address and, where you provide it, your CAC registration.
• Verification details we are required to collect, such as the owner's identity information and Bank Verification Number (BVN).
• The bank account your takings are settled into.
• Records of what happens in your account: orders, bills, payments, credits, settlements and withdrawals.
• What you tell us when you contact support.

When you order, book or pay through a business that uses TAB:

• The details the business asks for, such as your name and phone number, and what you ordered or booked.
• The status of your payment. Your card or bank details are handled by the payment processor that completes the payment.

The NDPA requires a lawful basis for each use of personal data. These are ours:

We do not sell, rent or trade personal data. We share it only where we need to run TAB, where the law requires it, or where you ask us to:

• Banks and payment processors, to collect payments and settle them to your account.
• Identity verification providers, to complete the checks the law requires.
• Service providers who work for us under contract: Cloudflare (hosting), Resend (email delivery), Google (Google Analytics, with your consent, and the fonts this site uses) and Plausible (privacy-friendly visit counts, with your consent).
• The other parts of our company, where your TAB account is linked to our other products.
• Regulators, law enforcement and courts, when the law requires it.
• A buyer or successor, if all or part of our business is sold or merged. We would tell you first.

A business that uses TAB sees the order and payment details of its own customers, because it needs them to serve those customers.

When a business takes your order or booking through TAB, that business decides what to collect and why, and is responsible for it. We process that data on the business's behalf to run the service. If you have a question about it, contact the business first; we will help it answer you.

Some of our service providers store or process data outside Nigeria, including in the United States and the European Union. When that happens we rely on the safeguards the NDPA allows, such as transfers to countries with adequate protection or contracts that bind the provider to protect the data.

• Contact form messages: for as long as we need to deal with your enquiry and any follow-up.
• Account and transaction records: for as long as your account is open, and afterwards for as long as the law requires us to keep financial and verification records.
• Analytics cookies: up to two years, unless you clear them sooner. See the Cookie Policy.

When we no longer need data, we delete it or make it anonymous.

Data travels to and from TAB and this website encrypted, and access to it is limited to the people and systems that need it. If a breach puts your rights at risk, we will tell the Nigeria Data Protection Commission and you, as the law requires.

Under the NDPA you have the right to:

• be told how your data is used, which is what this policy is for;
• get a copy of the data we hold about you;
• have it corrected if it is wrong or incomplete;
• have it deleted, where we have no legal reason to keep it;
• restrict or object to how we use it;
• receive it in a format you can take elsewhere;
• withdraw consent at any time, without affecting what was done before;
• not be subject to a decision made only by automated means that significantly affects you.

To use any of these, write to support@billif.com. We may need to confirm who you are, and we reply within 30 days. If you are not satisfied, you can complain to the Nigeria Data Protection Commission.

TAB is a service for businesses and is not meant for anyone under 18. We do not knowingly collect data from children through this website.

When we change this policy we update the date at the top. If a change affects how we use your data in a significant way, we will tell account holders by email or in the app before it takes effect.

• Email: support@billif.com
• Phone: +234 913 277 8473
• Post: Bill Intelligent Flow Technologies Limited, Lagos, Nigeria