Privacy Policy

1. Who we are

Go Digital (“Go Digital”, “we”, “us”) is a digital transformation platform for Nigerian micro, small and medium enterprises (MSMEs). It is implemented by the Digital Transformation Center Nigeria on behalf of the Deutsche Gesellschaft für Internationale Zusammenarbeit (GIZ) GmbH, with co-funding from the European Union.

This policy explains what personal information we collect when you use the platform, why we collect it, who we share it with and the choices you have. It applies to MSMEs, service providers, partner organisations and anyone else who visits or registers on the platform.

2. Information we collect

We collect information in three ways: what you give us, what your use of the platform generates, and what partners share with us on your behalf.

• Account details: your name, email address, phone number and password when you register or accept an invitation.
• Business profile: your organisation’s name, registration details, sector, size, location and contact person, and any supporting documents you upload for voucher eligibility.
• Assessment answers: your responses to the digital readiness assessment and the scores and recommendations derived from them.
• Activity on the platform: listings you view, requests you make or receive, messages and files exchanged in an engagement, voucher applications, payment claims, reviews and help requests.
• Technical information: device type, browser, IP address, pages visited and the cookies described in our Cookie Policy.
• Information from partners: where a partner organisation registers you or imports your details, the information they provide about you.

3. How we use your information

We use your information to run the platform and the Go Digital programme. In particular, we use it to:

• create and manage your account and business profile;
• match your business with relevant services, providers, resources and self-help guidance;
• process requests, engagements, voucher applications and payment claims;
• send notifications about activity that concerns you, by email and within the platform;
• provide support, including follow-up by an authorised advisor where you have asked for help or consented to it;
• vet, approve and monitor service providers and their listings;
• produce aggregated reporting on programme reach and outcomes for GIZ and its partners;
• keep the platform secure, prevent misuse and meet our legal obligations.

We process your information on the basis of your consent, the performance of the platform’s terms with you, our legitimate interest in running a safe and effective programme, and legal obligations that apply to us.

4. Who we share it with

We do not sell your personal information. We share it only where needed to deliver the platform:

• Service providers you request a service from see the details needed to respond, including your business profile and the content of your request.
• MSMEs that request a provider’s service see that provider’s public listing and organisation profile.
• Authorised support advisors and case managers see your profile, assessment results and engagement history where you have consented to follow-up support.
• The voucher grant administrator sees voucher applications, approvals, redemptions and related payment claims in order to administer the subsidy fund.
• GIZ, the Digital Transformation Center Nigeria and programme partners receive aggregated, non-identifying reporting. Individual records are shared only where necessary for programme oversight and audit.
• Service providers that host and operate the platform on our behalf, such as cloud infrastructure, email delivery and file storage, process data under contract and only on our instructions.
• Public authorities where we are required to by law or a valid legal request.

5. How long we keep it

We keep your information for as long as your account is active and for as long afterwards as we need it to meet programme reporting, audit and legal requirements. Voucher and payment records are kept for the period required by the funding agreement. When information is no longer needed we delete it or anonymise it so it can no longer identify you.

6. How we protect it

We use technical and organisational measures appropriate to the sensitivity of the data, including encrypted connections, access controls scoped to each role, audit logs of significant actions and regular review of who has access. No system is completely secure, so we also ask you to keep your password confidential and to tell us immediately if you suspect your account has been compromised.

7. Your rights

Under the Nigeria Data Protection Act 2023 you have the right to:

• access the personal information we hold about you;
• ask us to correct information that is inaccurate or incomplete;
• ask us to delete your information, subject to records we must keep;
• object to, or ask us to restrict, certain processing;
• withdraw consent you have given, without affecting processing that took place before you withdrew it;
• receive a copy of the information you gave us in a portable format;
• lodge a complaint with the Nigeria Data Protection Commission.

To exercise any of these rights, contact us using the details at the end of this policy. We will respond within the time the law allows and may need to verify your identity first.

8. Children

The platform is intended for businesses and the adults who represent them. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact us and we will remove it.

9. Changes to this policy

We may update this policy as the platform and the programme evolve. When we make a material change we will notify registered users by email or through a notice on the platform, and we will always show the date of the latest version at the top of this page.

10. Contact us

Questions, requests or complaints about this policy or how we handle your information can be sent to support@godigital.ng.