Privacy Policy

We collect information you provide directly to us and information generated automatically when you use our services. This includes:

• Identity & Contact Data: full name, phone number, email address, postal address, and government-issued identification where required by Nigerian law.
• Transaction Data: purchase history, order details, payment records, and shipping information across OkansPort, Okans Autos, and Okans Properties services.
• Technical Data: IP address, browser type and version, device identifiers, referring URLs, pages visited, and session duration collected automatically via cookies and similar technologies.
• Communications Data: messages, enquiries, and feedback you send through our contact forms, email, or WhatsApp channels.
• Profile Data: your account credentials, saved preferences, wishlist items, and compare lists when you register on our platform.
• Location Data: delivery addresses, preferred office branch locations, and (with your consent) precise GPS data for logistics tracking.

We do not knowingly collect personal data from children under the age of 18 without verifiable parental consent.

Okans Group processes your personal data on the following lawful bases as defined under the Nigeria Data Protection Regulation (NDPR) 2019:

• Performance of a Contract: to fulfil product orders, logistics requests, property transactions, vehicle purchases, and catering bookings you enter into with us.
• Legitimate Interests: to improve our products and services, detect and prevent fraud, ensure network and information security, and conduct internal analytics and business planning.
• Consent: to send marketing communications, newsletters, and promotional offers. You may withdraw consent at any time.
• Legal Obligation: to comply with applicable Nigerian laws, regulations, court orders, and requests from competent authorities.

We will never sell, rent, or trade your personal information to third parties for their own marketing purposes.

We may share your information with:

• Service Providers: trusted third-party vendors who assist us with payment processing, logistics and shipping, cloud hosting, email delivery, and customer support. These parties are contractually bound to protect your data.
• Business Partners: where relevant to fulfil a specific service (e.g., a vehicle importer or a property developer), we share only the minimum data necessary to complete the transaction.
• Regulatory & Law Enforcement Authorities: when required to do so by Nigerian law (including the NDPR, EFCC Act, and FIRS regulations) or by lawful order of a competent court.
• Corporate Transactions: in the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity subject to equivalent privacy protections.

Any cross-border transfer of personal data will only occur in compliance with NDPR requirements, including ensuring the recipient country provides an adequate level of data protection or that appropriate safeguards are in place.

We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• TLS/SSL encryption for all data transmitted to and from our website.
• Encrypted storage of sensitive data including passwords (hashed) and payment card details (we do not store card numbers in full).
• Regular security assessments and penetration testing.
• Role-based access controls limiting employee access to personal data on a need-to-know basis.
• Incident response procedures in accordance with the NDPR.

In the event of a data breach that is likely to result in high risk to your rights and freedoms, we will notify you and the National Information Technology Development Agency (NITDA) within the timeframes prescribed by the NDPR.

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyse traffic, and personalise content.

• Essential Cookies: necessary for the website to function (e.g., session management, shopping cart). These cannot be disabled.
• Analytics Cookies: help us understand how visitors interact with our website (e.g., Google Analytics). We anonymise IP addresses before processing.
• Preference Cookies: remember your settings such as currency, language, and view preferences.
• Marketing Cookies: used to deliver relevant advertisements. These are only set with your explicit consent.

You can manage or disable cookies through your browser settings at any time. Disabling certain cookies may affect the functionality of our website.

As a data subject under the Nigeria Data Protection Regulation, you have the following rights with respect to your personal information:

• Right of Access: to obtain a copy of the personal data we hold about you.
• Right to Rectification: to request correction of inaccurate or incomplete data.
• Right to Erasure: to request deletion of your data where there is no compelling legal reason for continued processing.
• Right to Restriction: to ask us to limit how we use your data in certain circumstances.
• Right to Data Portability: to receive your data in a structured, machine-readable format.
• Right to Object: to object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our Data Protection Officer at privacy@okansgroup.com. We will respond within 30 days as required by the NDPR.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, and regulatory requirements. Specifically:

• Customer transaction records are retained for a minimum of 6 years in accordance with the Companies and Allied Matters Act (CAMA) 2020.
• Marketing preferences and consent records are retained until you withdraw consent or for a maximum of 3 years of inactivity.
• Website analytics data is anonymised after 26 months.
• Inactive accounts may be deleted after 2 years with prior notice.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

• Data Protection Officer: privacy@okansgroup.com
• General Enquiries: hello@okansgroup.com
• Postal Address: Okans Group, 15 Admiralty Way, Lekki Phase 1, Lagos, Nigeria.
• Phone: +234 800 6526 778

You also have the right to lodge a complaint with the National Information Technology Development Agency (NITDA), the supervisory authority for data protection in Nigeria, if you believe your rights have been violated.

We may update this Privacy Policy from time to time to reflect changes in our business practices, technology, legal requirements, or regulatory guidance. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Display a prominent notice on our website homepage for at least 30 days.
• Send a notification to registered users via email where the changes significantly affect their rights.

Your continued use of our services after the effective date of any update constitutes your acknowledgement of the revised policy. We encourage you to review this page periodically.