Privacy Policy

We are the data controller for the personal data described in this Policy. This means we determine the purposes and means of processing your personal data.

For all privacy-related enquiries, contact us at privacy@ohctraderoom.com.

We collect the following categories of personal data:

We process your data on the following lawful bases under the NDPA:

We share personal data only with the following categories of recipients:

• Payment processors (such as Stripe or our Nigerian acquirer) to complete transactions securely
• Hosting and infrastructure providers that run our website and store our data
• Email and CRM providers to send transactional and marketing emails
• Analytics providers (such as Google Analytics) to understand site usage and improve performance
• Professional advisers (lawyers, accountants, auditors) bound by confidentiality obligations
• Regulators or law-enforcement agencies where required by Nigerian law or a valid court order

Some of our processors are located outside Nigeria. Where this happens, we rely on the safeguards required by the NDPA — including the adequacy of the destination jurisdiction or appropriate contractual protections — to ensure your data remains safe and is handled to the same standard required within Nigeria.

We keep your data only for as long as necessary for the purposes described in this Policy:

• Account data — for the duration your account is active, and for 6 years after closure (financial-record retention requirements)
• Marketing data — until you withdraw your consent
• Support records — for 3 years from the date of the last interaction

We use essential cookies to operate the site, and — with your consent — analytics and marketing cookies to understand and improve performance. You can manage your preferences through the cookie banner displayed on your first visit and through your browser settings.

For full details on every cookie we use, see our Cookie Policy.

Under the NDPA, you have the following rights in relation to your personal data:

• Access — request a copy of the personal data we hold about you
• Rectification — have inaccurate or incomplete data corrected
• Erasure — request deletion of your data (subject to legal-retention exceptions)
• Restriction — ask us to restrict certain processing activities
• Objection — object to processing based on legitimate interests
• Portability — receive your data in a structured, machine-readable format
• Withdraw consent — at any time, without affecting the lawfulness of prior processing
• Complaint — lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng

To exercise any of these rights, email privacy@ohctraderoom.com. We will respond within 30 days.

The Services are intended for users aged 18 and over. We do not knowingly collect personal data from children under 18. If you believe a child has provided us with personal data, please contact us at privacy@ohctraderoom.com and we will promptly delete it.

We use industry-standard technical and organisational measures — including encryption in transit (TLS), access controls, and regular security reviews — to protect your data against unauthorised access, alteration, disclosure, or destruction.

No system is perfectly secure, and we cannot guarantee absolute security. In the event of a data breach that affects your rights and freedoms, we will notify you and the NDPC as required by law.

We may update this Policy from time to time. The "Last updated" date at the top of this page reflects the current version. Material changes will be communicated by email or via a prominent notice on the Services.

For privacy-related questions, access requests, or complaints about how we handle your data: