Effective 4 October 2026
This policy explains how OPE LTD (“SpeedNumx”, “we”) handles your personal data, in line with the Nigeria Data Protection Act 2023 (NDPA) and the regulations of the Nigeria Data Protection Commission (NDPC). We are the data controller.
What we collect
| Data | Why | Legal basis |
|---|---|---|
| Name, email, phone number, password (stored hashed) | To create and secure your account | Contract |
| Payments, wallet transactions, orders and rentals | To provide the service, keep accurate accounts and prevent fraud | Contract; legal obligation |
| SMS messages received on numbers you buy or rent | To show you your codes and messages | Contract |
| IP address, device and browser, sign-in times | To keep your account secure and detect fraud | Legitimate interests |
| Support conversations | To help you | Contract; legitimate interests |
| Identity documents (Level 2 only) | To meet limits required by our payment partners | Legal obligation; consent |
We do not sell your personal data, and we do not use it for third-party advertising.
Who we share it with
Only with service providers who help us run SpeedNumx, under contracts that protect your data:
- Payment processors: to process payments.
- Number suppliers: they see which app and country a number was ordered for, not who you are.
- Hosting, email and error-monitoring providers: to run the service and fix problems.
- Authorities, where the law requires it.
Some of these providers store data outside Nigeria. Where they do, we rely on the safeguards the NDPA allows, such as adequacy decisions or contractual protections.
How long we keep it
- Account details: while your account is open, and deleted when you close it (see below).
- Payment and transaction records: 6 years, as required by tax and anti-money-laundering law, with your personal details removed once your account is deleted.
- SMS messages on numbers you used: 90 days after the order or rental ends.
- Security logs: 12 months.
Your rights
You have the right to access your data, correct it, delete it, object to or restrict how we use it, withdraw consent, and receive it in a portable format.
- Download your data: Settings → Privacy → Download my data.
- Delete your account: Settings → Privacy → Delete my account.
- Anything else: email our Data Protection Officer at speednumx@gmail.com. We reply within 30 days.
If you’re not happy with our answer, you can complain to the Nigeria Data Protection Commission (ndpc.gov.ng).
Security
Passwords are hashed with argon2id, two-step login secrets are encrypted, connections use HTTPS, and staff access is limited, protected with two-step login and logged. If a breach puts your rights at risk, we’ll tell you and the NDPC as the law requires.
Cookies
We use only the cookies needed to keep you signed in and secure your session. We don’t use advertising cookies.
Changes
We’ll tell you about important changes by email or in the app before they take effect.
Contact: OPE LTD, Nigeria · speednumx@gmail.com