Privacy Policy

Last updated: 23 October 2026

Who we are and what this covers

Venix Partners Limited (RC 1907456) is a company registered in Nigeria and licensed by the Nigerian Communications Commission as a Value Added Service operator. Our office is at 35 Yesufu Sanusi Street, Off Adeniran Ogunsanya, Surulere, Lagos.

We are the data controller for the personal data described here. This policy covers this website, enquiries and job applications sent to us, our business clients and partners, and subscribers to telecom services that Venix runs directly, such as Caller Ring Back Tunes. Where a network operator or a client decides why and how data is used, we act as their data processor and follow their written instructions.

Our consumer platforms, including BillMagic, BingeBay, Turnaj, FlyGidi, Uceni Games, Mesaj and Venix Cloud, each publish a privacy notice on their own website. Those notices add detail for each platform and sit alongside this policy.

We follow the Nigeria Data Protection Act 2023 and the General Application and Implementation Directive 2025 issued by the Nigeria Data Protection Commission, together with the data protection duties in the Nigerian Communications (Consumer Code of Practice) Regulations 2024. Where the EU or UK General Data Protection Regulation applies to you, we meet its requirements too.

Our Data Protection Officer

We have appointed a Data Protection Officer to oversee how we handle personal data. You can reach the DPO at dpo@venixpartners.com or by post at our office address, marked for the attention of the Data Protection Officer.

What we collect

Visiting this website. Our hosting provider records basic technical details for security and performance, such as your IP address, browser type, the page requested and the time of the request. This website sets no cookies and runs no advertising tools. We count visits with Vercel Web Analytics, which uses no cookies and stores nothing in your browser. It records the page you viewed, the site that referred you, your country and city, and your device, operating system and browser type. A visitor is recognised only by a temporary value worked out from the request, which is discarded after 24 hours, so we see totals and never who you are.

Contacting us. Your name, company, email address, phone number, the topic you choose and your message.

Applying for a job. Your CV, cover note, contact details, work history, qualifications and anything else you choose to send.

Business clients and partners. Names, job titles and contact details of the people we deal with, contract and billing records, and the technical details needed to run an integration, such as API credentials, server IP addresses and usage logs.

Subscribers to Venix services. Your mobile number, network, the service you subscribed to, the date, time and channel of your consent, subscription and renewal history, charges, cancellation requests and any complaint you make. We do not collect your NIN, BVN, card details or bank account details for these services.

We do not ask for sensitive personal data such as health, religion or ethnicity. Please do not include it in messages or applications.

Where it comes from

Most of it comes from you. Some comes from mobile network operators and licensed aggregators when you subscribe to a service through them, from clients who use our platforms to reach their own customers, and from recruiters or referees you name in an application.

How we use it and why we are allowed to

• Replying to enquiries and keeping a record of what was agreed. Our lawful basis is our legitimate interest in running our business, or steps you asked us to take before a contract.
• Delivering, billing and supporting services you or your organisation signed up for. Our lawful basis is performance of a contract.
• Recording subscription consent and handling opt out, refund and complaint requests. Our lawful basis is compliance with a legal obligation under NCC rules.
• Assessing job applications. Our lawful basis is steps you asked us to take before a contract of employment.
• Keeping our systems secure and preventing fraud. Our lawful basis is our legitimate interest and, where it applies, a legal obligation.
• Meeting tax, audit, licensing and regulatory duties, including responding to lawful requests from the NCC, the NDPC and other authorities. Our lawful basis is compliance with a legal obligation.
• Sending marketing messages. Only with your consent, which you can withdraw at any time.

Where we rely on legitimate interest, we have weighed it against your rights and freedoms and you can object at any time. We do not sell personal data and we do not use it for purposes you would not reasonably expect.

Who we share it with

We share personal data only where it is needed and lawful, and we bind every recipient to keep it confidential and secure. Recipients include:

• Mobile network operators and licensed aggregators, so a subscription can be started, billed or stopped.
• Payment processors and banks, for transactions you make.
• Our technology providers: Vercel, which hosts this website; Supabase, which stores enquiries; and Google, which carries our email.
• Professional advisers such as auditors, lawyers and insurers.
• Regulators, courts and law enforcement, where the law requires it.
• A buyer or investor, if all or part of our business is sold or restructured, under the same protections set out here.

Transfers outside Nigeria

Some of our providers store or process data outside Nigeria. Enquiries are stored in the United Kingdom, this website and its contact form run on servers in the United States, and email passes through Google's global network. We make these transfers only on a basis allowed by Part VIII of the Nigeria Data Protection Act, such as a country with adequate protection, contractual clauses that give your data the same level of protection it has in Nigeria, or where the transfer is needed to perform a contract with you. You can ask the DPO for a copy of the safeguards we rely on.

How long we keep it

• Website security logs: for the short period our hosting provider keeps them.
• Enquiries that do not lead to a contract: 24 months after our last contact.
• Unsuccessful job applications: 12 months, unless you ask us to keep your CV on file for longer.
• Subscription consent, billing and complaint records: at least 2 years, as the NCC requires, and longer if a dispute or investigation is open.
• Contract, accounting and tax records: 6 years after the end of the financial year they relate to.

When a period ends we delete the data or make it anonymous so it can no longer identify you.

How we protect it

We use encryption in transit, access controls based on job role, firewalls, IP whitelisting, activity logging and ongoing monitoring. Staff and contractors who handle personal data are trained and bound by confidentiality. We assess new processing for privacy risk before it starts and carry out a Data Privacy Impact Assessment where the law requires one.

Your rights

Under the Nigeria Data Protection Act you have the right to:

• be told how your data is used, which is what this policy does;
• get a copy of the personal data we hold about you;
• have inaccurate or incomplete data corrected;
• have your data deleted where we no longer have a lawful reason to keep it;
• restrict how we use it while a concern is looked into;
• receive data you gave us in a common, machine readable format, or have it sent to another organisation;
• object to processing based on our legitimate interest, and to direct marketing at any time;
• withdraw consent at any time, without affecting what was done before;
• not be subject to a decision based solely on automated processing that has legal or similarly significant effects on you. We do not make decisions of that kind.

To use any of these rights, write to dpo@venixpartners.com. We may ask you to confirm your identity first. We do not charge for this, and we will respond within 30 days, or sooner where the law requires.

Complaining to the regulator

If you are unhappy with how we have handled your data, please tell our DPO first so we can put it right. You also have the right to complain to the Nigeria Data Protection Commission at any time, through the channels on ndpc.gov.ng. If you are in the EU or UK, you can complain to your local data protection authority.

Children

Our services are meant for adults or for children using them with a parent or guardian. We do not knowingly collect a child's personal data without the consent of a parent or guardian, as the Act requires. If you believe we hold a child's data without that consent, contact the DPO and we will delete it.

Cookies

This website sets no cookies and stores nothing in your browser. We use Vercel Web Analytics to count visits without cookies, as described above, and it does not follow you to other websites. Fonts and photographs are served from our own servers. If this changes we will update this policy and ask for your consent before any non essential cookie is set.

Marketing messages

We send promotional messages only to people who have agreed to receive them, and we respect the NCC Do Not Disturb register. Every marketing message tells you how to stop further messages. You can also text STOP to 2442 to block unsolicited promotional messages on any Nigerian network.

If something goes wrong

If a personal data breach puts your rights at risk, we will notify the Nigeria Data Protection Commission within 72 hours of becoming aware of it. Where the risk to you is high, we will also tell you without delay, in plain language, with what happened and what you can do to protect yourself.

Changes to this policy

We review this policy at least once a year and whenever the law or our services change. The date at the top shows when it was last updated. If we make a material change, we will say so on this website and, where we have your contact details and the change affects you, tell you directly.

Contact

Questions about this page can be sent to dpo@venixpartners.com or by post to Venix Partners Limited, 35 Yesufu Sanusi Street, Off Adeniran Ogunsanya, Surulere, Lagos, Nigeria.