Privacy Policy

1. Information We Collect

To provide ledger and alert services, Haske CRM logs:

• Merchant Information: User registration credentials, business profile names, Kano-based addresses, emails, and active phone numbers.
• Customer Ledger Records: Customer names, debt balances, phone numbers, and reference details inputted directly by workspace staff.
• Usage Analytics: IP address logs, session metrics, local offline cache configurations, and synchronization queues.

2. Merchant Consent & Responsibility (Protective Clause)

Haske CRM serves purely as a data processor on behalf of the registered merchant (the data controller):

• Customer Consent Liability: The merchant (you) assumes full, sole legal responsibility for obtaining clear consent from your customer contacts before storing their numbers and credit files on Haske CRM.
• Indemnification: You agree to indemnify and hold Haske Technologies harmless against any claims, investigations, or NDPC penalties arising from customer records uploaded without appropriate legal basis.
• Data Use: Records are processed only to render billing calculations, send automated notifications, and synchronize databases. We do not sell or inspect customer files for other purposes.

3. Third-Party Processors

We coordinate with licensed local integrations to settle payments and dispatch notifications:

• Paystack Payments: Secure bank and card verification. We assume zero liability for Paystack server dropouts or gateway billing errors.
• Termii & WhatsApp: Recipient telephone numbers are transmitted to trigger alerts. Any breach occurring at the integration gateway level is subject to their respective policies.

4. Data Subject Rights (NDPA 2023)

Registered merchants and their customers hold specific rights under the NDPA 2023, including:

• Right to Review: Merchants can request extracts of their profile data stored in our archives.
• Right to Erase: You can request account deactivation, after which we will purge all workspace archives (barring data retained for billing compliance audits).

5. Security & Encryption

All database transactions utilize SSL/TLS transit encryptions. We exclude liability for credential sharing, security leaks at user devices, or unauthorized access to physical terminals on the merchant's premises.

6. Compliance & DPO Contact (Kano)

Any concerns, compliance audits, or requests under the NDPA 2023 must be directed to our Data Protection Officer:

Email: sadman@mubarakdigital.com
Address: Haske Compliance Team, Kano Head Office, Kano State, Nigeria.

Escalation reports can also be submitted to the Nigeria Data Protection Commission (NDPC).