Privacy policy

At DuKKia.com, protecting your organisational, financial, and client information is fundamental to how we operate. This Privacy Policy outlines how we collect, process, and safeguard data across our Management Information System (MIS) modules and the ePass Digital Invite platform.

Depending on which DuKKia platform modules and services you utilize, we process the following categories of operational data:

• MIS Platform Estate Management (EY) & Landlords/Estate Agents (P2): Resident/tenant directories, property unit classifications, lease agreements, service charge levies, utility billing, and maintenance requests.
• MIS Platform Payroll Management (PY) & Time & Expense Entry (TY): Employee profiles, salary structures, tax configurations, timesheets, billable hours, and expense claim records.
• MIS Platform Vehicle Dealers (V1) & Private Money Lenders (M4): Vehicle financing contracts, inventory tracking, borrower profiles, loan schedules, interest/repayment schedules, and collateral records.
• MIS Platform Services Management (S3): Service bookings, vendor profiles, client job orders, and contractor invoicing details.
• ePass Platform Access & Event Management: Event creation details, guest registration info, digital pass generation, visitor check-in/check-out timestamps, and gate security validation logs.
• Support & Governance: Help desk ticket logs, uploaded diagnostic attachments, system user accounts, and immutable administrative audit logs.

We process data strictly for operational fulfillment, financial management, and system performance, including:

• Generating automated billing invoices, payment ledger updates, interest calculations, and direct bank reconciliations.
• Processing payroll calculations, timesheet approvals, and billable expense entries.
• Validating visitor authenticity at security gates via digital and QR passes.
• Delivering automated payment alerts, time-sensitive notifications, and operational updates via SMS or Email.
• Maintaining complete audit trails for financial, lending, property, and workplace compliance.

We adhere to enterprise security standards to ensure the confidentiality, integrity, and availability of your records. All customer environments operate within isolated database structures, ensuring complete data boundary protection between distinct organisations, estates, and commercial entities.

• Data Encryption: Sensitive system credentials and financial transaction details are secured using standard industry encryption algorithms.
• Strict Data Privacy: DuKKia strictly does not sell, lease, or rent your organisational, financial, employee, or visitor data to third-party advertisers.
• Role-Based Access Control: Only explicitly authorized personnel or designated organisational administrators can access restricted business ledgers.

To deliver uninterrupted platform functionality, we work exclusively with verified service providers (such as cloud hosting infrastructure, transactional email/SMS gateways, and banking payment processors). These partners receive only the minimum information necessary to execute their specific functions under strict confidentiality standards.

DuKKia.com is committed to handling personal data in accordance with the Nigeria Data Protection Act 2023 (NDPA) and applicable regulatory directives.

We may act as a Data Controller when processing personal information for our own business operations, including account administration, subscriptions, customer enquiries and technical support.

Where organisations use our MIS or ePass platforms to manage information relating to their employees, residents, tenants, borrowers, customers or event participants, DuKKia.com generally acts as a Data Processor, processing such information on behalf of the relevant customer organisation under applicable contractual arrangements.

Where DuKKia.com acts as a Data Controller, personal data is processed on an applicable lawful basis under the Nigeria Data Protection Act. Depending on the processing activity, these may include:

• Contractual necessity: Providing services under applicable agreements with individual customers.
• Legal obligations: Meeting applicable statutory and regulatory requirements.
• Legitimate interests: Maintaining platform security, administering our services and supporting legitimate business operations, subject to applicable safeguards and individual rights.
• Consent: Where valid consent is required for a particular processing activity.

Where DuKKia.com acts as a Data Processor, the customer organisation is generally responsible for determining the appropriate lawful basis for its processing activities.

We retain personal information for periods appropriate to the purposes for which it is processed, subject to applicable legal, regulatory and contractual requirements.

Retention periods or the criteria used to determine them may depend on the category of information, the service provided, legal record-keeping obligations and applicable customer agreements.

Where we act as a Data Processor, customer-managed information is retained, returned or deleted in accordance with applicable agreements and documented customer instructions, subject to any legal obligations requiring retention.

Under the Nigeria Data Protection Act 2023, individuals have rights relating to their personal information, subject to applicable legal conditions and exceptions.

These may include the right to:

• Be informed about personal data processing.
• Request access to personal information.
• Request correction of inaccurate information.
• Request deletion where legally applicable.
• Object to or restrict certain processing.
• Withdraw consent where consent is relied upon.
• Request data portability where applicable.
• Challenge qualifying decisions based solely on automated processing.

If your information is managed by an organisation using DuKKia.com, that organisation may be responsible for handling your request. We will provide appropriate assistance within our data protection responsibilities.

You may also lodge a complaint with the Nigeria Data Protection Commission (NDPC) through its official website: ndpc.gov.ng .

Depending on our hosting infrastructure and service providers, personal information may be processed or accessed outside Nigeria.

Where international transfers occur, we apply applicable legal requirements and appropriate safeguards in accordance with Nigerian data protection legislation.

DuKKia.com may use cookies and similar technologies for essential website functionality, authentication, session management and security.

Where additional cookies or tracking technologies are used, we provide relevant information and obtain consent where required by law.

We may update this Privacy Policy to reflect changes in our services, processing activities or applicable law.

Material changes will be communicated where required. The latest version will be available on this page.

If you have questions regarding this Privacy Policy or require administrative assistance regarding your tenant records, please log-in and submit a request via our internal Support Help Desk or Send us an email.