The laws we follow
Salesmova is built to comply with the Nigeria Data Protection Act 2023 (NDPA), which is enforced by the Nigeria Data Protection Commission (NDPC), and with the General Application and Implementation Directive 2025 (GAID), which sets out how the Act is applied. The NDPA replaced the earlier Nigeria Data Protection Regulation (NDPR) as the main data protection law in Nigeria.
Our role
- As a data controller: for information about people who visit our website, join the waitlist, contact us or hold a Salesmova account.
- As a data processor: for the leads, contacts and conversations a business stores in Salesmova. The business decides how that data is used, and we process it only on its instructions.
How we protect data
- We collect only what we need, for clear and stated purposes.
- Data is encrypted in transit and access is limited to people who need it to do their job.
- We keep records of our processing activities and review them regularly.
- We carry out data protection impact assessments before launching features that may affect privacy.
- Our team receives data protection training.
Your rights
Under the NDPA you can ask us to:
- confirm whether we hold your personal data and give you a copy
- correct data that is inaccurate or incomplete
- delete your data where there is no lawful reason to keep it
- restrict or object to certain processing
- move your data to another provider in a commonly used format
- withdraw consent at any time, where processing is based on consent
If your data is held by a business that uses Salesmova, contact that business first. We will support them in responding to you.
How to make a request or complaint
Email hi@salesmova.com with the subject "Data protection request". We will verify your identity and respond without undue delay. If you are not satisfied with our response, you have the right to complain to the Nigeria Data Protection Commission at ndpc.gov.ng.
Data breaches
If a personal data breach is likely to put people at risk, we will notify the Nigeria Data Protection Commission within 72 hours of becoming aware of it, and inform affected people and businesses without undue delay.
Transfers outside Nigeria
Where data is processed outside Nigeria, we use providers and safeguards that meet the transfer requirements of the NDPA.
Cookies and tracking
We ask for your consent before storing attribution data in your browser. See our Cookie Policy.