Privacy Policy

1. Who We Are

TagAlong is operated by Promereo Services Ltd, a company registered in Nigeria. We provide NFC-enabled devices that help you share your contact information and digital content with a simple tap.

Contact: contact@promereoltd.com

Data Protection Officer: contact@promereoltd.com

2. What Data We Collect

We collect the following information when you use TagAlong:

• Account Information: Name, email address, phone number
• Shipping Information: Delivery address for product orders
• Profile Content: Information you choose to share on your TagAlong profile (links, social media, bio, etc.)
• Usage Data: How your TagAlong device is used (tap counts, scan times) to provide you with analytics
• Device Information: Browser type, IP address (hashed/anonymized), and device type for security and analytics
• Lead Information: When visitors submit their contact details through your TagAlong profile

3. Legal Basis for Processing

Under the Nigeria Data Protection Act 2023, we process your data based on the following legal grounds:

• Contract Performance: Account information and shipping details are processed to fulfill your orders and provide the TagAlong service
• Consent: Profile content you voluntarily add, and marketing communications (you can withdraw consent at any time)
• Legitimate Interests: Usage analytics to improve our service, fraud prevention, and security monitoring
• Legal Obligation: Financial records retained for tax and regulatory compliance

4. How We Use Your Data

We use your information to:

• Provide and maintain the TagAlong service
• Process and deliver your orders
• Display your profile when someone taps your TagAlong device
• Provide analytics about your device usage
• Send important service updates and order notifications
• Improve our products and services
• Prevent fraud and maintain security

5. Data Sharing and International Transfers

We do not sell your personal data. We share your information with:

• Service Providers: Payment processors (Paystack - Nigeria) and shipping partners to fulfill orders
• Analytics: Google Analytics to understand how our service is used (anonymized data)
• Cloud Infrastructure: Google Firebase (United States) for secure data storage and authentication
• Email Services: Resend (United States) for transactional emails
• Legal Requirements: When required by law or to protect our rights

Cross-Border Transfers: Some of our service providers are located outside Nigeria (primarily the United States). These transfers are protected by appropriate safeguards including the providers' compliance with international data protection standards and their own privacy policies. Google and other US-based providers maintain certifications and contractual commitments that ensure adequate protection of your data.

6. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encrypted data transmission (TLS/HTTPS)
• Secure cloud storage with encryption at rest
• IP address hashing for privacy protection
• Regular security reviews and vulnerability assessments
• Access controls and authentication requirements
• Rate limiting to prevent abuse

7. Your Rights (NDPA 2023)

Under the Nigeria Data Protection Act 2023, you have the following rights:

• Access: Request a copy of your personal data in electronic format
• Correction: Update or correct inaccurate or incomplete data
• Deletion: Request deletion of your data (right to erasure)
• Restriction: Request restriction of processing in certain circumstances
• Portability: Receive your data in a structured, commonly used format
• Objection: Object to processing based on legitimate interests or direct marketing
• Withdraw Consent: Withdraw consent at any time where processing is based on consent
• Complaint: Lodge a complaint with the Nigeria Data Protection Commission (NDPC)

To exercise these rights, visit our Data Request page or contact us at contact@promereoltd.com. We will respond within 30 days.

8. Cookies and Tracking

We use the following types of cookies:

• Essential Cookies: Required for authentication and core functionality (always active)
• Analytics Cookies: Help us understand how our service is used (with your consent)
• Marketing Cookies: Used for relevant advertising (with your consent)

You can manage your cookie preferences through the consent banner when you first visit our site. Analytics and marketing cookies are only set after you provide consent.

9. Data Retention

We retain your data for the following periods:

• Account Data: Until you delete your account, plus 30 days for backup removal
• Order Records: 6 years for tax and legal compliance
• Analytics Data: 24 months in aggregated/anonymized form
• Lead Submissions: Until deleted by the profile owner or upon request
• Marketing Preferences: Until you withdraw consent

10. Children's Data

TagAlong is not intended for users under 18 years of age. We do not knowingly collect personal data from children. If you are under 18, please do not use our service or provide any personal information. If we learn that we have collected data from a child under 18, we will delete it promptly. Parents or guardians who believe their child has provided us with personal data should contact us at contact@promereoltd.com.

11. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you. Our analytics are used only to improve our service and provide you with usage statistics for your device.

12. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or through the TagAlong service. The "Last updated" date at the top indicates when this policy was last revised.

13. Contact Us

If you have questions about this privacy policy or your data:

General Inquiries: contact@promereoltd.com
Data Protection Officer: contact@promereoltd.com
Company: Promereo Services Ltd
Website: www.promereoltd.com

You may also contact the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng if you have concerns about how we handle your data.