VAPP Consulting — Best Travel Visa Agent in Africa

This Privacy Policy explains how VAPP Consulting Limited ("VAPP", "we", "us", or "our") collects, uses, stores, and protects personal information when you use our website, products, and services. We are committed to safeguarding your privacy in accordance with the Nigeria Data Protection Regulation (NDPR) 2019 and all applicable Nigerian data protection laws.

By accessing or using our services, you consent to the collection and processing of your personal data as described in this Policy. If you do not agree with the terms of this Policy, please do not use our services.

1. Who We Are

Data Controller: VAPP Consulting Limited, RC No. 1947042, 18 Mazini Street, Off Constantin Street, Zone 4, FCT Abuja, Nigeria.

Contact: booking@vappconsulting.com

2. Information We Collect

We collect information that is necessary to provide you with our visa facilitation, travel planning, and immigration advisory services. This includes:

2.1 Information You Provide Directly

Full legal name, date of birth, nationality, and passport details
Contact information including email address, phone number, and postal address
Travel history, visa application history, and immigration status
Employment information and financial documentation where required for visa applications
Payment information processed via our secure third-party payment providers
Correspondence and communications you send to us

2.2 Information Collected Automatically

IP address, browser type, operating system, and device identifiers
Pages visited, time spent on pages, and navigation paths on our website
Cookies and similar tracking technologies (see Section 9 below)
Referral source and search terms used to find our website

2.3 Information from Third Parties

Identity verification data from authorised third-party verification services
Embassy and immigration authority communications related to your application
Referral information from business partners or affiliates

3. How We Use Your Information

We process your personal data for the following lawful purposes:
To provide, manage, and improve our visa facilitation and travel services
To process your visa application, book embassy appointments, and manage your travel itinerary
To verify your identity and assess your eligibility for specific visa categories
To process payments and maintain financial records
To communicate with you about your application, appointments, and service updates
To send you relevant promotional information about our services where you have opted in
To comply with our legal obligations under Nigerian law and applicable international regulations
To detect, prevent, and respond to fraud, security incidents, and misuse of our platform
To analyse service usage and improve our products

4. Legal Basis for Processing

Under the NDPR, we rely on the following legal bases to process your personal data:
Contract performance: processing necessary to fulfil the services you have requested
Legal obligation: processing required to comply with applicable laws and regulations
Legitimate interests: processing to operate and improve our business, prevent fraud, and maintain security
Consent: where you have given us explicit consent, for example to receive marketing communications

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:
Embassies, consulates, and visa application centres as necessary to process your visa application
Travel service providers including airlines, hotels, and insurance companies to fulfil your itinerary
Payment processors facilitate secure transactions
Identity verification and compliance service providers
Professional advisors including lawyers and accountants bound by confidentiality obligations
Regulatory authorities and law enforcement where required by law or legal process
Business partners and affiliates on a need-to-know basis, subject to confidentiality agreements

All third parties with whom we share data are required to handle your information securely and in accordance with applicable data protection laws.

6. International Data Transfers

Your personal data may be transferred to and processed in countries outside Nigeria where embassies, consulates, and service providers are located. Where such transfers occur, we take steps to ensure appropriate safeguards are in place, including contractual protections consistent with NDPR requirements.

7. Data Retention

We retain your personal data for as long as is necessary to provide our services and to comply with our legal obligations. In practice:

Active client records are retained for the duration of the service relationship plus six (6) years
Visa application records may be retained for up to seven (7) years for compliance purposes
Payment transaction records are retained for seven (7) years in accordance with financial regulations
Marketing consent records are retained until you withdraw consent plus one (1) year

Upon expiry of the applicable retention period, data is securely deleted or anonymised.

8. Your Rights Under the NDPR

As a data subject under the NDPR, you have the following rights in relation to your personal data:
Right of access: to request a copy of the personal data we hold about you
Right to rectification: to request correction of inaccurate or incomplete data
Right to erasure: to request deletion of your data in certain circumstances
Right to restrict processing: to request that we limit how we use your data
Right to data portability: to receive your data in a structured, machine-readable format
Right to object: to object to processing based on legitimate interests or for direct marketing
Right to withdraw consent: where processing is based on consent, to withdraw it at any time

To exercise any of these rights, please contact us at legal@vappconsulting.com. We will respond within thirty (30) days. We may require identity verification before processing your request.

9. Cookies

Our website uses cookies and similar technologies to enhance your experience, analyse usage, and support marketing. We use:

Strictly necessary cookies: required for the website to function and cannot be disabled
Analytics cookies: to understand how visitors interact with our website
Marketing cookies: to deliver relevant advertising, only where you have consented

You can manage your cookie preferences through your browser settings or our cookie consent tool. Disabling certain cookies may affect the functionality of our website.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include encryption of data in transit, access controls, and regular security assessments. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

11. Children's Privacy

Our services are not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data about a child, please contact us immediately and we will take steps to delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated Policy on our website with a revised effective date. Continued use of our services after such changes constitutes your acceptance of the updated Policy.

13. Contact and Complaints

For any questions, concerns, or complaints regarding this Privacy Policy or our data practices, please contact:
Data Protection Officer: VAPP Consulting Limited

Email: booking@vappconsulting.com

Address: 18 Mazini Street, Off Constantin Street, Zone 4, FCT Abuja, Nigeria

This Privacy Policy is governed by the laws of the Federal Republic of Nigeria.