Quinbis uses personal information only where there is a clear service, communication, security, legal or properly consented reason to do so. We do not sell personal information to advertisers.
1. Who we are and when this notice applies
Quinbis Ltd ("Quinbis", "we", "us" or "our") is the data controller for the personal information described in this notice where Quinbis decides why and how that information is processed.
This notice is intended to support our obligations under the Nigeria Data Protection Act 2023, the Nigeria Data Protection Commission General Application and Implementation Directive 2025, and other applicable privacy requirements.
It applies when you visit quinbis.com, contact us, create or use a Quinbis account, use the Quinbis App, request Setup or Design services, receive reminders or notifications, make a payment, or otherwise interact with Quinbis.
Some third parties, such as payment providers, identity providers and government portals, act as separate controllers for information they collect or process for their own purposes. Their privacy notices also apply to that processing.
2. Information we handle
Contact and account information
This can include your name, email address, phone number, account status, sign-in method, profile information, business or workspace membership, communication preferences and support history.
Business and service information
When you request Setup or Design work, we may handle business names, registration details, proposed names, project briefs, creative requirements, approvals, correspondence, files and other information needed to deliver the service.
For business-registration or similar work, you may choose to provide identity or verification material, photographs, signatures, ownership information and other documents required for the requested filing or service.
Quinbis App records
Information you choose to record in the Quinbis App may include sales, Money In, Money Out, commitments, obligations, products, services, stock movements, stock points, reminders, payment follow-ups, business details, staff or workspace roles, and other operational records. Quinbis may also create summaries, alerts, calculations and Insights from the records you enter.
Payments and transaction records
We may handle invoice numbers, amounts, payment status, transaction references, refund or dispute status and related records. Card or bank-payment details entered on Paystack checkout are handled by Paystack; Quinbis does not receive or store your full card details through that checkout flow.
Sign-in, email and notification information
If you use Google sign-in, Google may provide a verified email address and basic profile information needed to connect the sign-in to your Quinbis account. Transactional emails may be delivered through Brevo. If you enable web push, we may store a browser push subscription, device or browser information, notification preferences and delivery records needed to send and troubleshoot notifications.
Website, device and security information
Depending on the tools enabled, we may process IP address, browser or device type, pages visited, session and security information, referral information, campaign parameters, advertising click identifiers, diagnostic records and security logs.
If optional advertising measurement is enabled and you allow it, Quinbis may use Google Ads and Meta measurement to understand whether a campaign led to an enquiry, checkout or verified purchase. This may involve campaign identifiers, browser or device signals and, for supported server-side measurement, appropriately transformed contact information and conversion details.
Where information comes from
Most information comes directly from you. We may also receive information from a person authorised to act for your business, a team member, Google sign-in, Paystack, a government or service portal involved in work you requested, or your browser and device when you use Quinbis.
3. How and why we use information
We use personal information only for purposes connected to operating Quinbis and providing the services you request. Depending on the activity, our lawful basis may be steps taken at your request before a contract, performance of a contract, our legitimate interests, a legal obligation or your consent.
We may use information to:
- create and secure accounts, manage sign-in and maintain workspace access;
- respond to enquiries, support requests and service communications;
- prepare, deliver and administer Setup and Design work;
- operate Quinbis App records, calculations, Insights, stock controls and business summaries;
- create and deliver reminders, notifications and service emails you have enabled or that are necessary to a requested service;
- process and reconcile invoices, payments, refunds and disputes;
- maintain service, security, audit and fraud-prevention records;
- improve performance, reliability, usability and security;
- where optional measurement is enabled and consent is required, measure whether campaigns lead to enquiries, checkout activity and verified purchases;
- meet legal, regulatory, tax, accounting, record-keeping or compliance obligations.
Where consent is the basis for processing, you may withdraw it for future processing. Withdrawal does not make earlier lawful processing invalid, and some services may still require information that is necessary to perform a contract or meet a legal obligation.
Transactional and service messages are different from direct marketing. If Quinbis uses personal information for direct marketing where consent or an opt-out is required, we will provide the appropriate choice.
4. Sharing and service providers
We do not sell personal information to advertisers.
We may share information with service providers only where reasonably needed to operate Quinbis or deliver a service. Depending on what you use, these can include hosting and infrastructure providers, Brevo for transactional email, Paystack for payment processing, Google for sign-in, browser push services for notifications, and Google or Meta where optional advertising measurement is enabled.
Where you ask Quinbis to complete registration or another filing, relevant information may be submitted to the Corporate Affairs Commission or another government or service portal needed to carry out the requested work.
Information may also be made available to an authorised Quinbis team member or an external professional assigned to your service where that access is necessary and permitted. Where the product requires your approval before an external professional can access client information, that access remains blocked until the required approval is recorded.
We may disclose information where required by law, court order or lawful authority, or where reasonably necessary to establish, exercise or defend legal rights, investigate misuse, or protect users and systems.
Third parties that independently determine how they use information are responsible for their own privacy practices.
5. How long we keep information
We keep personal information only for as long as reasonably necessary for the purpose it was collected, to provide ongoing service, maintain required records, resolve disputes, protect security or meet legal obligations.
Documents and service files
Identity and verification material collected mainly to complete registration or similar work - such as identity documents, passport photographs and signatures - is normally scheduled for deletion about 90 days after the relevant service is completed or cancelled. It may be kept longer while work, a correction, dispute, security issue or legal obligation remains active.
Intermediate project working files are normally scheduled for deletion about 180 days after the related project is completed or cancelled. Files classified as temporary are normally scheduled for deletion about 30 days after upload. A documented retention hold may keep a file longer where there is a valid operational, legal, security or dispute-related reason.
Completed documents and final deliverables do not have a routine cleanup date by default and may be retained for longer so they remain available through your Quinbis account. You should still keep your own copies of important documents.
Security, technical and payment records
Expired or used account-verification and password-reset records, older login-attempt data, older advertising-matching data, IP or browser identifiers retained in audit history, and private application-error logs are subject to shorter operational retention periods. Payment, accounting, transaction, regulatory and dispute records may be kept for the period required by applicable law or legitimate record-keeping needs.
When information is no longer required and no other lawful reason applies, we may securely delete it or irreversibly de-identify it.
6. Your privacy rights and choices
Subject to applicable law, you may have the right to:
- be informed about how your personal data is processed;
- request access to personal data we hold about you;
- request correction of inaccurate or incomplete information;
- object to or request restriction of certain processing;
- request deletion where the law allows it;
- request portability of eligible personal data;
- withdraw consent where consent is the basis for processing;
- raise concerns about solely automated decisions that produce legal or similarly significant effects;
- complain to the Nigeria Data Protection Commission.
Some rights can be limited where Quinbis must keep or continue processing information for a lawful reason, including legal record-keeping, security, dispute resolution or the rights of another person.
To make a privacy request, use the Privacy option on the Quinbis Contact page. We may ask for enough information to verify the request and protect the account or information involved.
7. Cookies, security, international processing and automation
Cookies and local storage
Quinbis uses cookies, browser storage or similar technologies for account sessions, security, preferences and site functionality. Optional advertising or campaign measurement is handled separately from essential functionality and, where a choice is required, is not enabled until the relevant choice has been made. You can decline optional measurement without losing essential site functions.
Security
We use reasonable organisational and technical measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. No website, device or transmission method can be guaranteed to be completely secure. You should protect passwords, devices, email accounts and one-time codes.
If a personal-data breach occurs, Quinbis will assess it and make notifications to affected people or the Nigeria Data Protection Commission where required by applicable law.
International processing
Some technology providers may store or process information outside Nigeria. Where a cross-border transfer is subject to Nigerian data-protection law, Quinbis will use an applicable lawful transfer basis or protection mechanism and take reasonable steps to ensure the transfer receives the protection required by law.
Automated calculations and Insights
The Quinbis App can automatically calculate totals, create alerts and generate business summaries or Insights from information recorded in the App. These features are intended to support everyday business decisions. Quinbis does not currently use them to make solely automated decisions about you that produce legal or similarly significant effects.
8. Children, changes, questions and complaints
Quinbis is designed for business use and is not directed at children creating accounts or submitting business information on their own. If we learn that a child's personal information has been processed in circumstances that require a parent, guardian or other legal authorisation, we will take appropriate steps.
We may update this notice when our services, providers, processing activities or legal obligations change. The latest version will be published on this page with an updated date. Where a change materially affects how we use personal information, we will provide additional notice where appropriate.
Questions, requests or complaints about privacy can be sent through the Quinbis Contact page. We will respond as promptly as reasonably possible and within applicable legal time limits.
If you are not satisfied with our response, you may complain to the Nigeria Data Protection Commission or use another remedy available under applicable law.