Privacy Policy
In effect from
This policy explains what NetLink learns about you when you buy WiFi from us, what we do with it, and how to have it corrected or deleted. It is written to meet the Nigeria Data Protection Act 2023.
On this page
The short version
- We collect what it takes to sell you a voucher and run the WiFi: your email, your phone number if you make an account, and how much data each device uses.
- We never see your card details. The payment company takes them on its own page.
- We don’t sell your data, show you adverts, or use analytics or tracking tools.
- We delete records on a fixed schedule, from 7 days for an unfinished signup to 6 years for a paid order, which the law requires us to keep.
- You can ask to see, correct or delete your data by writing to privacy@netlink.com.ng.
This summary helps you find your way. The full text below is what applies.
1. Who is responsible for your data
NetLink is a business based at No 14 Tunde Idiagbon Street, Kulende Estate, Ilorin, Kwara State. We are the data controller: we decide what is collected and why, and we answer for it under the Nigeria Data Protection Act 2023 (NDPA).
For anything in this policy, write to privacy@netlink.com.ng. That address reaches the person responsible for data protection here.
2. What we collect
What we hold depends on what you do. Buying a voucher without an account is the least:
| When you | We record |
|---|---|
| Buy a voucher | Your email, the hostel and plan, the amount, the payment reference and whether it was paid. A phone number too, if you give one. |
| Create an account | Your email, your phone number, your password (stored only as a one-way hash we cannot reverse), and the date you agreed to our terms. |
| Use the WiFi | Your device’s hardware (MAC) address, the name your device announces, the IP address the network gives it, when it connected, and how much data it used. This is linked to your voucher, so it can be linked to you. |
| Apply to run a hostel | The hostel’s name and address, its rough size, and anything you write to us. If you become an operator, the bank account your payouts go to. |
| Visit this website | Your IP address and browser details in our server logs, as any website receives them. |
We never receive your card number, PIN or bank login. You type those on the payment company’s own page, and it tells us only whether the payment succeeded.
3. Why we use it
The NDPA lets us use personal data only for a stated reason with a lawful basis. Ours are:
- To sell you a voucher and run the WiFi (performing our contract with you): taking payment, sending your code, showing your balance, and stopping a voucher at its data or time limit.
- To keep financial records (legal obligation): Nigerian tax law requires us to keep records of every sale.
- To keep the service safe (legitimate interests): spotting fraud, stopping people guessing voucher codes, and investigating abuse of the network.
- To pay hostel operators (contract with the operator): working out each hostel’s sales and sending its payout.
We do not send marketing messages or sell your data. Nothing is decided about you automatically, apart from what a voucher itself enforces: its data cap, time limit and device limit.
5. How long we keep it
Records are deleted automatically once their purpose is over. This runs every day, on this schedule:
| Record | Kept for |
|---|---|
| An account whose phone number was never confirmed | 7 days |
| Sign-in codes and password-reset links | 90 days |
| A checkout you started and never paid | 90 days |
| Per-device usage, including MAC addresses | 90 days |
| A record of a device being disconnected or blocked | 90 days, or while the block stands if it is longer |
| An application to run a hostel that we turned down | 365 days |
| A paid order and the voucher it bought | 6 years, as tax law requires |
| Your account | Until you ask us to close it |
When usage records are deleted, your voucher keeps its total data used, because that is what your balance and any refund depend on.
6. Cookies and browser storage
This website sets no cookies. It stores three things in your own browser:
- Your sign-in, until you close the tab or sign out.
- Your light or dark theme choice, if you picked one.
- The last hostel you viewed, if you run more than one.
All three are needed for the site to work as you asked, so they need no consent, and none of them leaves your device. There are no analytics, advertising or tracking tools on this site, and our fonts are served from our own domain rather than a third party.
The payment page belongs to the payment company, which may set its own cookies to process your payment and prevent fraud. Its own privacy policy covers those.
7. How we protect it
These measures apply to every account and every order:
- Passwords are stored as Argon2 hashes, which cannot be turned back into the password.
- Sign-in codes and reset links are stored as hashes, and expire.
- Every connection to this site and our servers is encrypted.
- Only the people who run the platform can see customer records, each with their own login.
- Hostel operators can see only their own hostel’s figures.
If a breach puts your data at risk, we will tell the Nigeria Data Protection Commission within 72 hours of finding out, and tell you directly if you are affected.
8. Your rights and how to use them
Under the NDPA you have the right to:
- know what we hold about you, and get a copy
- have anything wrong corrected
- have your data deleted, except what the law requires us to keep
- ask us to stop using it while a complaint is looked into
- receive your data in a format you can take elsewhere
- object to a use based on our legitimate interests
Write to privacy@netlink.com.ng from the email address on your account or order. We may ask one question to confirm it is you, and we reply within 30 days. It costs nothing.
Asking us to delete your account removes it, your phone number, and anything you sent to apply as an operator. Orders you paid for stay for 6 years, because tax law requires it. They keep the email the receipt went to, but lose your phone number and any link to an account.
9. If you are under 18
The service is for people aged 18 and over. If you are under 18, a parent or guardian must agree to this policy and our Terms of Service for you before you buy or sign up. If you are a parent and think your child gave us data without your agreement, write to privacy@netlink.com.ng and we will delete it.
10. Changes to this policy
When this policy changes, the date at the top changes with it. If a change affects what we collect or who receives it, we email everyone with an account at least 14 days before it takes effect.
11. Complaints
Tell us first at privacy@netlink.com.ng and we will try to put it right. You can also complain to the Nigeria Data Protection Commission at ndpc.gov.ng, at any time, whether or not you have contacted us.