Data Protection
VioTrack handles two categories of data: vehicle compliance data aggregated from public government sources, and personal data provided by users when they interact with our platform. We treat both with rigour, but our obligations to personal data are particularly serious.
How Our Data Pipeline Works
The diagram below shows how VioTrack processes vehicle compliance data — from raw government sources through to a verified, unified compliance record — entirely on Google Cloud.
System Architecture Overview
The diagram below shows how government data sources flow through VioTrack's Google Cloud-native intelligence pipeline to the end-user compliance interface.
VioTrack intelligence pipeline — from government data sources to citizen compliance interface. Phase 2 elements shown in amber.
Our Regulatory Framework
VioTrack operates in full compliance with:
- Nigeria Data Protection Regulation (NDPR) 2019 — issued by the National Information Technology Development Agency (NITDA)
- Nigeria Data Protection Act 2023 (NDPA) — the primary data protection legislation establishing the Nigeria Data Protection Commission (NDPC)
- NDPC Operational Guidelines — sector-specific guidance for technology platforms operating in Nigeria
Our Data Protection Principles
Lawful Basis
We collect and process personal data only when we have a clear lawful basis — contract, consent, legitimate interest, or legal obligation.
Purpose Limitation
Data collected for compliance checking is not used for advertising. Data used for insurance processing is not used for analytics. We keep these separate.
Data Minimisation
We collect only what is necessary for the specific service being provided. We do not collect data speculatively for future use cases.
Security by Default
Encryption at rest and in transit. Workload Identity Federation on Google Cloud. Role-based access. No long-lived credentials in our infrastructure.
Data Residency
Nigerian user data is processed in accordance with NDPA data localisation requirements. We use Google Cloud with appropriate data region controls.
Accountability
We maintain records of all data processing activities. Our Data Protection Officer can be reached at dpo@viotrack.africa.
Government Data Handling
The vehicle compliance data in our platform is sourced from publicly accessible Nigerian government systems (FRSC, AutoReg, MVA, KWIRS, PayVis, AskNIID). This data relates to vehicle registrations and compliance status, not personal identity. We handle it as follows:
- We do not link vehicle registration data to named individuals without explicit user consent
- Compliance checks show vehicle status, not personal owner information
- Owner information is only surfaced when a user authenticates as the registered owner of the vehicle
- We maintain a full audit trail of every data synchronisation event with government sources
Your Rights
Under NDPR and NDPA 2023, you have the right to access, rectify, erase, and port your personal data. You also have the right to object to processing and to withdraw consent where processing is consent-based.
To exercise any of these rights, contact our Data Protection Officer: dpo@viotrack.africa
You may also submit complaints to the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.
Contact
Data Protection Officer: dpo@viotrack.africa
General: hello@viotrack.africa
For our full Privacy Policy, see viotrack.africa/privacy.html