Back home

Mudeme Technology Concepts

Privacy Policy

Mudeme BizControl — a product of Mudeme Technology Concepts

Effective date: 4 July 2026 · Last reviewed: 4 July 2026

This Privacy Policy explains how Mudeme Technology Concepts, the operator of Mudeme BizControl, collects, uses, discloses, and protects personal data belonging to businesses and individuals who use our platform. This Policy is written to align with the Nigeria Data Protection Act, 2023 (NDPA) and the Nigeria Data Protection Commission's (NDPC) General Application and Implementation Directive.

By creating an account, accessing, or using Mudeme BizControl, you acknowledge that you have read and understood this Policy. If you do not agree with it, please do not use the platform.

1. Who We Are

Mudeme BizControl is owned and operated by Mudeme Technology Concepts. For the purposes of the NDPA, Mudeme Technology Concepts acts as the Data Controller in respect of business account information, and as a Data Processor in respect of personal data that our business customers ("Controllers," e.g. a shop or school using BizControl) collect about their own customers, students, or staff through the platform.

Registered address: IFS Flat 4, CITEC Mbora Estate, Jabi, Abuja, FCT, Nigeria
Data Protection Officer: Justina Ighodalo — justina.ighodalo@mudemetech.com

2. Scope of This Policy

  • Business owners and staff who create and use a Mudeme BizControl account ("Business Users").
  • Individuals whose personal data a Business User processes within BizControl — for example, their customers, debtors, or suppliers ("End Customers").
  • Visitors to our website and marketing pages.

Where a Business User inputs personal data about their own End Customers into BizControl, the Business User is the Data Controller for that data under the NDPA, and Mudeme acts as their Data Processor. Business Users are responsible for ensuring they have a lawful basis to collect and enter that data.

3. Personal Data We Collect

3.1 Data you provide directly

  • Account and business details: full name, email address, phone number, business name, sector, address.
  • Payment details processed via our payment partner — we do not store full card numbers.
  • Customer, debtor, supplier, and inventory records you enter into the platform.
  • Messages and content submitted through the AI Assistant or unified inbox features.
  • Communications you send us for support or compliance purposes.

3.2 Data collected automatically

  • Device and usage information: IP address, browser type, device identifiers, log data, pages visited, and session activity.
  • Cookies and similar technologies used to keep you signed in and understand how the platform is used (see Section 10).

3.3 Data from third parties

  • Where you connect WhatsApp, Instagram, or Facebook messaging to BizControl, we receive message metadata and content necessary to display and manage those conversations, subject to the permissions you grant through Meta's Embedded Signup process.
  • Payment confirmation data from our payment processor.

4. Purpose and Lawful Basis for Processing

Under Section 25 of the NDPA, we only process personal data where a lawful basis applies:

  • Performance of a contract — to create your account, provide the BizControl service, process payments, and deliver support.
  • Consent — for optional features such as marketing communications, and for connecting third-party messaging channels.
  • Legitimate interests — to secure the platform, prevent fraud, improve our services, and maintain business records.
  • Legal obligation — to comply with tax, financial, and regulatory record-keeping requirements applicable in Nigeria and the United Kingdom.

5. Use of AI Features

Mudeme BizControl includes an AI Assistant and AI-suggested reply features that process business data through third-party artificial intelligence providers in order to generate insights, summaries, or suggested responses. We do not use your business data or your End Customers' personal data to train third-party foundation models. AI-generated outputs are suggestions only — you remain responsible for reviewing them before relying on or sending them.

6. How We Share Your Data

We do not sell personal data. We share personal data only:

  • With sub-processors who help us run the platform (see Section 7).
  • With your consent — for example, when connecting a third-party messaging channel.
  • Where required by law, regulation, court order, or a lawful request from the NDPC or another competent authority.
  • In connection with a merger, acquisition, or sale of business assets, subject to equivalent protections.

7. Sub-Processors and Third-Party Services

  • Cloud hosting and database infrastructure.
  • Payment processing (Flutterwave).
  • Messaging platform infrastructure (Meta Platforms — WhatsApp, Instagram, Facebook).
  • AI service providers powering the AI Assistant.
  • Email and notification delivery services.

A current list of named sub-processors is available on request from our Data Protection Officer.

8. Data Retention

  • Account and business data — for the duration of your subscription and a reasonable period afterward.
  • Financial and transaction records — retained in line with Nigerian tax and financial record-keeping requirements (generally a minimum of six years).
  • Messaging data — retained for as long as the relevant channel remains connected, or as configured by the Business User.

9. Cross-Border Data Transfers

Some of our sub-processors may process data outside Nigeria. Where this occurs, we take steps required under Sections 41–43 of the NDPA to ensure an adequate level of protection.

10. Cookies and Similar Technologies

We use essential cookies to keep you securely signed in and to remember basic preferences. We may use analytics cookies to understand how the platform is used. You can control cookies through your browser settings; disabling essential cookies may affect functionality.

11. Data Security

We implement technical and organisational measures appropriate to the risk, including encryption of data in transit, access controls, regular security reviews, and audit logging. No system is completely secure — we encourage Business Users to use strong passwords and enable any available account security features.

12. Your Rights as a Data Subject

  • Be informed about how your personal data is processed.
  • Access the personal data we hold about you.
  • Request correction of inaccurate or incomplete data.
  • Request erasure, subject to legal or contractual retention requirements.
  • Object to or restrict certain processing, including direct marketing.
  • Request data portability, where technically feasible.
  • Withdraw consent at any time.
  • Lodge a complaint with the Nigeria Data Protection Commission (NDPC).

13. Children's Data

Mudeme BizControl is intended for use by business owners and staff aged 18 and above. We do not knowingly collect personal data directly from children.

14. Data Breach Notification

In the event of a personal data breach likely to result in a risk to the rights and freedoms of affected individuals, we will notify the NDPC and affected Business Users without undue delay, in line with Section 40 of the NDPA.

15. Changes to This Policy

We may update this Policy from time to time. Material changes will be notified through the platform or by email.

16. Complaints

Please contact our Data Protection Officer first so we can try to resolve the matter directly. You also have the right to lodge a complaint with the NDPC.

17. Contact Us

Mudeme Technology Concepts — Data Protection Officer
Email: justina.ighodalo@mudemetech.com
Address: IFS Flat 4, CITEC Mbora Estate, Jabi, Abuja, FCT, Nigeria