DATA PROTECTION AND PRIVACY TERMS OF SERVICE
EFFECTIVE DATE: May 24, 2026
GOVERNING LAW: The Laws of the Federal Republic of Nigeria
1. INTRODUCTION AND CONSTITUTIONAL BASIS
Pursuant to Section 37 of the 1999 Constitution of the Federal Republic of Nigeria (As Amended) and the extant provisions of the Nigeria Data Protection Act (NDPA) 2023, this Data Protection Terms of Service ("Terms") governs the collection, processing, and safeguarding of personal and corporate data by Prokhure Limited ("the Platform", "We", "Us", or "Our").
Prokhure Limited is a specialized digital vendor and eCommerce platform, backed by Reindeer Capital, operating exclusively within the oil and gas industry in West Africa. By registering an account, executing a transaction on our platform, initiating Corporate Procurement processes, or participating in Project Sponsorship, you ("the User", "Vendor", "Corporate Entity", or "Sponsor") explicitly and unambiguously consent to the practices delineated in these Terms.
2. CATEGORIES OF DATA COLLECTED
To facilitate our tripartite transaction pathways, we collect the following categories of data:
Identity and Contact Data: Full names, corporate designations, email addresses, and service hotlines, collected via account registration, contact forms, and newsletter subscriptions.
Corporate & Procurement Data: Material Requisitions (MR), Requests for Quotation (RFQ), Technical Bid Evaluations (TBE), Purchase Orders (PO), and proprietary corporate requirements.
Financial & Sponsorship Data: Payment details, billing addresses, and investment/financing records strictly utilized for Project Sponsorships and general eCommerce transactions.
Logistical Data: Shipping addresses within and outside Nigeria, delivery tracking metrics, and warehouse coordination data.
Technical Data: IP addresses, browser types, and platform usage metrics collected during your interaction with the Prokhure website.
3. LAWFUL BASIS AND PURPOSE OF PROCESSING
We process your data on the following lawful grounds:
Performance of a Contract: To execute Direct eCommerce deliveries, facilitate Corporate Procurement vendor responses, and manage Project Sponsorship financing.
Explicit Consent: To send regular newsletters regarding the latest products, special offers, and platform updates.
Legitimate Interest: To optimize our IT solutions, improve platform security, and streamline traditional procurement challenges in the energy sector.
Legal Obligation: To comply with anti-money laundering (AML), tax, and statutory auditing requirements under Nigerian law.
4. DATA DISCLOSURE AND THIRD-PARTY PROCESSING
Prokhure Limited operates as an integrated ecosystem. Consequently, it is reasonably necessary to share specific data with vetted third parties:
Logistics and Warehousing Partners: For the fulfillment of equipment and material delivery.
Financial Partners: Including Reindeer Capital and integrated payment gateways, for processing eCommerce purchases and facilitating Project Sponsorship returns.
Corporate Entities & Vendors: Facilitating the exchange of RFQs, TBEs, and POs between relevant parties.
Take Notice: All third-party processors are bound by strict Non-Disclosure Agreements (NDAs) and Data Processing Agreements (DPAs) in compliance with the NDPA.
5. DATA SECURITY, RETENTION, AND BREACH PROTOCOL
Security: Prokhure Limited implements commercially reasonable, enterprise-grade security protocols (including end-to-end encryption and secure servers) to protect your data against unauthorized access, alteration, or breach.
Retention: We do not retain data indefinitely. Data is held according to the following schedules:
Financial and Transactional Data: Retained for seven (7) years in compliance with Nigerian tax, corporate, and AML laws.
User Account Data: Retained for the active lifecycle of the account. Accounts dormant for thirty-six (36) consecutive months will be permanently deleted or anonymized.
Marketing Data: Retained until the user withdraws consent or opts out.
Breach Notification: In the highly unlikely event of a data breach compromising your personal or corporate data, Prokhure Limited will notify you and the Nigeria Data Protection Commission (NDPC) within seventy-two (72) hours of becoming aware of the breach, outlining the nature of the breach and immediate mitigation steps taken.
6. YOUR RIGHTS AS A DATA SUBJECT
In consonance with the NDPA 2023, you possess the following inalienable rights:
Right of Access: To request copies of the personal data we hold about you.
Right to Rectification: To mandate the correction of inaccurate or incomplete data.
Right to Erasure (Right to be Forgotten): To request the deletion of your data, subject to overriding legal or contractual retention obligations.
Right to Data Portability: To receive your data in a structured, commonly used, and machine-readable format.
Right to Restrict Processing: To request a pause on the processing of your data under specific statutory conditions.
Right to Object/Withdraw Consent: To opt-out of marketing communications and object to certain processing activities at any time.
Right to Lodge a Complaint: To escalate any unaddressed privacy grievances to the Nigeria Data Protection Commission (NDPC).
7. CROSS-BORDER DATA TRANSFERS
While Prokhure primarily serves West Africa, operational necessity may dictate the transfer of data to servers or partners located outside Nigeria. We guarantee that such transfers shall only occur to jurisdictions recognized by the NDPC as having adequate data protection laws, or executed under binding corporate rules and standard contractual clauses.
8. LIMITATION OF LIABILITY
To the maximum extent permitted by Nigerian law, Prokhure Limited shall not be liable for any indirect, incidental, consequential, or punitive damages arising from unauthorized access to, or alteration of, your transmissions or data, provided that Prokhure Limited has fulfilled its statutory duty of care regarding data security. In any event, our aggregate liability for claims relating to data protection shall not exceed the total amount paid by you to Prokhure Limited in the twelve (12) months preceding the claim, or ₦500,000 (Five Hundred Thousand Naira), whichever is greater.
9. CHANGES TO THIS POLICY
Prokhure Limited reserves the right to review and modify this Data Protection Terms of Service to reflect technological advancements or changes in Nigerian law. Material changes will be communicated to all registered users via email and through a prominent notice on our platform prior to the changes taking effect. Continued use of the platform after such notice constitutes your acceptance of the revised Terms.
10. DISPUTE RESOLUTION
Any dispute, controversy, or claim arising out of or relating to this Data Protection Terms of Service shall be settled amicably through mutual consultation. Where such fails within thirty (30) days, the dispute shall be resolved by binding Arbitration in Port Harcourt, Nigeria, in accordance with the Arbitration and Mediation Act 2023.
11. CONTACT AND INQUIRIES
For the exercise of your rights or further inquiries regarding our data protection practices, please contact our Data Protection Officer (DPO) via:
Email: privacy@prokhure.com
Service Hotline: 0806 323 9030 (Mon - Fri, 9am - 5pm)