This is the central privacy policy for Kadutech websites, customer and staff portals, KMarketplace, and the Kadutech products listed below. It explains what information we handle, why we use it, when another organisation controls it, and the choices available to you.
Who is responsible
Kadutech Services is responsible for personal data it decides to collect for its own websites, products, commerce, accounts and support. For a system deployed for a school, hospital, church, employer, merchant or other customer organisation, that organisation may be the data controller and Kadutech may act as its service provider or data processor. Questions can be sent to contact@kadutech.com or by phone or WhatsApp at +234 706 202 5993.
Our privacy principles and lawful reasons
We aim to process personal data fairly, transparently, securely and only for stated purposes. Depending on the activity, we rely on your consent, steps requested before or performance of a contract, compliance with legal obligations, protection of vital interests, or legitimate interests such as securing our services, preventing fraud and improving reliability. We use sensitive data only where an appropriate legal basis and additional safeguards apply.
Product-specific disclosures
This register is maintained with the policy. A product-specific notice may add detail at the point of collection, but it does not reduce the protections described here.
Kadutech website, service marketplace and hardware store
Who: Visitors, prospective customers and buyers
Information: Contact details, consultation or quotation requests, order and delivery information, support conversations, and purchase records.
Why: Respond to enquiries, recommend and deliver services or hardware, provide support, prevent fraud, and keep required business records.
Kadutech customer accounts and licensing
Who: Customers, authorised organisation users and licence holders
Information: Email address, one-time sign-in codes and security events, organisation details, entitlements, product keys, billing and access history.
Why: Authenticate users, administer licences and entitlements, send service notices, and protect accounts from misuse.
KMarketplace public store
Who: Shoppers and order recipients
Information: Name, email, phone number, delivery or billing address, delivery state, order contents, payment reference, fulfilment updates and support messages.
Why: Create and fulfil orders, process and reconcile payments, send receipts and delivery updates, resolve disputes, and prevent fraud.
KMarketplace merchant portal
Who: Applicants, store owners and merchant staff
Information: Identity and contact details, business registration and KYC documents, pickup address, catalogue, orders, settlement account verification and operational activity.
Why: Review merchants, operate storefronts, connect Paystack settlement, fulfil orders, manage risk, and meet legal or payment-network obligations.
Kadutech Academy
Who: Learners, guardians where applicable, instructors and corporate clients
Information: Contact and enrolment details, course selections, payment references, learning progress, submissions, attendance and support correspondence.
Why: Provide training, track progress, administer programmes, issue learning communications, and maintain payment or completion records.
KaduCare
Who: Participating organisations, members and authorised care teams
Information: Member profiles, contact details, attendance, welfare notes and, where the organisation enables it with an appropriate basis, member photographs used for attendance workflows.
Why: Provide organisation-managed attendance and welfare services. The participating organisation normally determines the people and records entered; Kadutech operates the platform under its instructions.
SafeTrack
Who: Participating schools, guardians, staff and authorised users
Information: Account and contact details plus attendance, safety, transport or emergency workflow data configured by the participating organisation.
Why: Deliver organisation-controlled safety and accountability workflows. A school or deploying organisation may be the primary data controller for its community.
Luach Chanoch
Who: Application users
Information: Calendar settings, onboarding state, display preferences, private journal entries and local reminder schedules remain on the user’s device in the current offline version.
Why: Provide offline calendar, journal and reminder functions. The current app requires no account, advertising, analytics or remote-content service.
Kadutech Labs, Jobs API, Kadutech AI and experimental products
Who: Pilot users, developers, customers and research participants
Information: Account or API-client details, prompts and submitted content, usage and security logs, feedback, project configuration and service records, depending on the product used.
Why: Operate the requested product, secure and improve pilots, provide technical support, measure reliability, and administer subscriptions or authorised access.
Kadutech HMS and customer-operated business systems
Who: Deploying organisations and their authorised users
Information: The information configured by the deploying organisation, which may include patient, workforce, operational or billing records in a dedicated deployment.
Why: Kadutech generally processes this information for the customer organisation under contract. The customer organisation determines permitted users, purposes, notices and retention unless Kadutech is separately identified as controller.
MYF Lagos and other managed community platforms
Who: Members, administrators, visitors and programme participants
Information: Account, membership, content, programme, communication and activity data that the relevant organisation chooses to manage through the service.
Why: Provide the organisation’s requested digital service. Product or programme notices may supplement this policy where a partner organisation determines the processing.
KMarketplace checkout and browser storage
To reduce repeated typing, the KMarketplace cart saves the name, email, phone number, delivery or billing address and state you enter in that browser. It is stored locally on the device, expires after 90 days, and is replaced as you update the form. Kadutech does not store card details, online-banking credentials or payment PINs. You can remove the remembered checkout details at any time by clearing site data for kstore.kadutech.com in your browser. Theme preferences and essential sign-in session data may also be stored locally or in strictly necessary cookies.
Payments and merchant settlement
Paystack processes checkout payments and merchant settlement-account verification. Kadutech receives transaction references, status, amount and limited settlement confirmation needed to reconcile orders, but payment-card entry occurs on Paystack. Paystack handles information under its own applicable privacy notices.
Service providers and disclosures
We disclose only the information needed to operate a service: Cloudflare supports hosting, storage, security and network delivery; Resend supports transactional email; Paystack supports payments and settlements; and approved AI infrastructure providers may process prompts for clearly identified AI features. We may also disclose information to professional advisers, delivery partners, authorities where legally required, or a successor in a properly managed business transaction. Merchants receive the customer details required to fulfil their own orders and must protect them. We do not sell personal data.
AI recommendations and automated processing
AI features may use the requirements, budget or content you submit to generate a recommendation or draft. Do not include confidential, health, financial or identity information unless the feature clearly requests it. AI output can be incomplete or incorrect and is not used by Kadutech as the sole basis for decisions that produce legal or similarly significant effects. You may request human review.
Retention
We keep information only as long as reasonably necessary for the stated purpose, an active account or contract, security and dispute handling, and applicable legal, tax or accounting duties. KMarketplace browser checkout details expire after 90 days. Transaction, licence and audit records may be retained for the period required to demonstrate purchases, entitlements and compliance. KYC documents are restricted and reviewed for deletion when the relationship and applicable retention duties end. Where a customer organisation controls the data, its approved retention schedule applies.
Security and international processing
We use access controls, role-based permissions, encryption in transit, restricted operational systems, security logging, backups and vulnerability review proportionate to the service. No system can be guaranteed completely secure. Some providers may process information outside Nigeria; where this happens, we assess the provider and use lawful transfer safeguards appropriate to the information and service.
Your choices and rights
Subject to applicable law, you may ask to be informed about processing, access or correct your personal data, object or restrict certain processing, withdraw consent, request deletion or portability, and ask for human review of a significant automated decision. Some requests may be limited by another person’s rights or a legal retention duty. Contact us from the email associated with your record. You may also complain to the Nigeria Data Protection Commission.
Children
Kadutech does not knowingly invite children to open general commerce or merchant accounts. Products used by schools, learning programmes or community organisations must be configured with appropriate notices, permissions and guardian or organisational controls. Contact us if you believe a child’s data has been submitted without an appropriate basis.
Policy updates
This page is the policy of record. Kadutech will add new products to the product register and update the version and effective date when processing materially changes. Where a change significantly affects your rights, we will provide an additional notice through the relevant product or registered contact channel. Earlier commitments continue to apply to information collected while they were in effect unless a lawful change is clearly communicated.
Contact and requests
Send privacy questions, access or deletion requests, and suspected privacy incidents to contact@kadutech.com. Please identify the product involved and do not send passwords, one-time codes, card details or sensitive identity documents by ordinary email.