Privacy Policy for Disone
Effective Date: 20 April 2026
1. Introduction
Disone (“Disone”, “we”, “our”, or “us”), operated by Disone Technologies, is an independent registered technology company that provides cloud-based software for vehicle repair workshops and related businesses.
Disone Technologies is committed to protecting the privacy and security of personal data in accordance with the Nigeria Data Protection Act, 2023 (NDPA) and applicable regulations issued by the Nigeria Data Protection Commission (NDPC).
We process personal data lawfully, fairly, transparently, and only for legitimate business purposes.
2. Information We Collect
We may collect the following categories of information:
Personal Information
- Full name
- Email address
- Telephone number
- Business information
- Billing information
- User account credentials
Business Information
- Workshop information
- Customer records
- Vehicle information
- Service history
- Job cards
- Invoices
- Inventory records
- Financial records entered into the platform
Technical Information
- Device information
- Browser type
- IP address
- Login records
- Cookies
- Usage analytics
- Security logs
3. Lawful Basis for Processing
Under the Nigeria Data Protection Act (NDPA), we process personal data on one or more of the following legal grounds:
- Your consent
- Performance of a contract
- Compliance with legal obligations
- Protection of vital interests where applicable
- Our legitimate business interests, provided such interests do not override your rights and freedoms
4. How We Use Your Information
We use your information to:
- Provide and operate the Disone platform
- Manage workshop operations
- Process bookings, inspections, invoices and payments
- Communicate with users
- Provide customer support
- Improve our services
- Maintain platform security
- Detect fraud and unauthorized activity
- Comply with legal and regulatory obligations
We only process personal data for purposes that are lawful and compatible with the reasons for which it was collected.
5. NDPA Compliance
Disone Technologies has implemented appropriate technical and organizational measures to safeguard personal information in accordance with the Nigeria Data Protection Act (NDPA).
Our data protection program includes:
- Access controls
- Encryption
- Secure cloud hosting
- Data backup and recovery
- Security monitoring
- Staff confidentiality obligations
- Incident response procedures
- Periodic security reviews
6. Data Ownership
All customer information, vehicle information, invoices, inventory records and operational data entered into Disone remain the property of the respective workshop using the platform.
Disone Technologies acts as a service provider processing such information solely for the purpose of delivering the services requested by the workshop.
7. Data Sharing
Disone Technologies does not sell personal data.
We do not share your workshop’s customer information, vehicle records, invoices, inventory data or business information with any other workshop using the Disone platform.
Each workshop operates within a logically separate and secure environment.
We may share information only where necessary with carefully selected service providers that support our operations, including:
- Payment service providers
- Cloud hosting providers
- Email and messaging providers
- Technical support providers
These providers are contractually required to protect personal data and process it only for authorized purposes.
We may also disclose information where required by law, court order or regulatory authority.
8. International Data Transfers
Where personal data is transferred or stored outside Nigeria, Disone Technologies will ensure that such transfers comply with the Nigeria Data Protection Act by implementing appropriate safeguards and ensuring an adequate level of protection for the personal data.
9. Data Retention
We retain personal data only for as long as necessary to:
- Provide our services
- Meet legal obligations
- Resolve disputes
- Enforce agreements
- Maintain business records where required by law
When personal data is no longer required, it will be securely deleted or anonymized.
10. Your Rights Under the NDPA
Subject to applicable law, you have the right to:
- Request access to your personal data
- Request correction of inaccurate data
- Request deletion of personal data where applicable
- Withdraw consent where processing is based on consent
- Object to certain processing activities
- Request restriction of processing
- Request transfer of your personal data where applicable
- Lodge a complaint with the Nigeria Data Protection Commission (NDPC)
Requests may be submitted using the contact details below.
11. Data Breach Notification
Where a personal data breach occurs that is likely to pose a significant risk to your rights and freedoms, Disone Technologies will respond in accordance with the Nigeria Data Protection Act, including notifying the Nigeria Data Protection Commission and affected individuals where legally required.
12. Children’s Privacy
Disone is intended for business users and is not directed at persons under the age of 18.
We do not knowingly collect personal data from children.
13. Changes to this Policy
This Privacy Policy may be updated periodically to reflect legal, technical or operational changes.
The updated version will be published on this page with a revised Effective Date.
14. Contact Information
For privacy requests or enquiries, contact:
Disone Technologies
Email: disoneapp@gmail.com
If you believe your rights under the Nigeria Data Protection Act have been violated, you may also submit a complaint to the Nigeria Data Protection Commission (NDPC).