1. Who we are

Better Choice Solutions Ltd (company number 13359393, registered in England and Wales) of 59 Kenyon Lane, Moston, Manchester M40 9JG is the data controller for personal data collected through this website, by phone, email and WhatsApp, and at our office.

For privacy questions or to use your rights, email hello@betterchoicesolutions.co.uk, call +44 7557 376898, or write to us at the address above.

We are a private company, not a government office. For NIN and BVN enrolment we capture your details at your request and submit them through our licence partner, DEACIL Professionals Services, to the relevant Nigerian authority. Once submitted, that authority holds its own record of your data and is responsible for it as a separate controller.

2. The laws we follow

We handle personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR). Because we serve Nigerian citizens and send enrolment data to Nigeria, we also follow the Nigeria Data Protection Act 2023 (NDPA) and the rules issued under it by the Nigeria Data Protection Commission, which build on the Nigeria Data Protection Regulation 2019 (NDPR).

3. The data we collect

• Contact and booking details: your name, email address, phone number, the service you booked, the date and time, and any notes you add.

• Enquiry and quote details: what you tell us by form, email, phone or WhatsApp, including cargo details such as sender and recipient names, addresses, phone numbers, contents and weight.

• Identity and application details: information from your passport, birth certificate and proof of address, your NIN or BVN, date and place of birth, nationality, family details required by an official form, and your Nigerian bank name and account number for BVN.

• Biometric data for NIN and BVN enrolment: your photograph, fingerprints and signature.

• Children’s data, where a parent or guardian applies on behalf of a child.

• Payment records: the amount, date and service paid for. We do not store full card details.

• Website data: IP address, device and browser type, and cookie data (see section 11).

Biometric data, and any health or similar information that appears on an official form, is special category data under UK GDPR and sensitive personal data under the NDPA. We collect it only when the service you asked for requires it.

4. How we use your data and our lawful basis

• To book and manage your appointment, answer enquiries, prepare quotes and deliver the service you asked for. Lawful basis: performance of a contract with you, or steps taken at your request before a contract.

• To capture and submit your enrolment or application to the relevant authority. Lawful basis: performance of a contract and, for biometric and other sensitive data, your explicit consent, which we ask for before capture.

• To send booking confirmations and reminders by email or text. Lawful basis: performance of a contract and our legitimate interest in reducing missed appointments.

• To keep accounting and tax records and to respond to lawful requests. Lawful basis: legal obligation.

• To keep our office, systems and website secure, prevent fraud, handle complaints and improve our service. Lawful basis: legitimate interests, where these are not overridden by your rights.

• To send news or offers. Lawful basis: your consent. You can unsubscribe at any time.

You can withdraw consent at any time by contacting us. Withdrawing consent does not affect processing already carried out, and we may be unable to complete an enrolment that depends on it. We do not make decisions about you by automated means alone, and we do not sell your data.

5. Who we share your data with

• The authority or body you are applying to, such as the National Identity Management Commission (NIMC), the Nigerian banking system for BVN, and the Nigeria Immigration Service.

• DEACIL Professionals Services, our licence partner for NIN and BVN enrolment.

• Shipping, customs and delivery partners, for cargo you send through us.

• Service providers that act on our instructions: Calendly (bookings and reminders), Wix (website hosting and forms), Google (maps, business profile and reviews), our email, messaging and payment providers, and our accountants and professional advisers.

• Regulators, courts or law enforcement, where the law requires it.

If you contact us on WhatsApp, Meta processes your messages under its own privacy policy.

6. Sending data outside the UK

Enrolment and application data is sent to Nigeria, because that is where the relevant authorities are based. The UK has not made an adequacy decision for Nigeria. We make this transfer because it is necessary to carry out the service you have asked for and, for biometric data, on the basis of your explicit consent after we have explained this to you.

Some of our service providers store data in the United States or other countries. Where they do, we rely on UK adequacy regulations (including the UK and US data bridge) or on approved contract terms such as the UK International Data Transfer Agreement. For data that falls under Nigerian law, transfers out of Nigeria follow the conditions set by the NDPA.

7. How long we keep your data

• Booking and enquiry records: up to 24 months after your last contact with us.

• Copies of identity documents, application forms and biometric captures: only for as long as needed to complete and confirm your submission, and then deleted from our systems within 30 days. Original documents are returned to you at your appointment.

• Payment, invoice and cargo records: 6 years, as required for UK tax and accounting.

• Marketing preferences: until you unsubscribe or withdraw consent.

Records held by NIMC, banks or the Nigeria Immigration Service are kept under their own rules.

8. How we protect your data

Access to personal data is limited to staff who need it. Our devices and accounts are password protected, data is sent over encrypted connections, and paper documents are handled in person and not left unattended. If a data breach is likely to put your rights at risk, we will tell you without undue delay and report it to the Information Commissioner’s Office and, where Nigerian law applies, the Nigeria Data Protection Commission, within 72 hours of becoming aware of it.

9. Your rights

Under UK GDPR and the NDPA you have the right to:

• be told how your data is used and ask for a copy of it;

• have inaccurate or incomplete data corrected;

• ask us to delete your data, or to restrict how we use it;

• object to processing based on legitimate interests, and to direct marketing at any time;

• receive your data in a portable format, or have it sent to another organisation;

• withdraw consent at any time;

• not be subject to a decision based solely on automated processing.

To use any of these rights, email hello@betterchoicesolutions.co.uk. We may ask for proof of identity. We reply within one month and do not charge a fee for reasonable requests.

10. Complaints

Please contact us first so we can put things right. You also have the right to complain to the UK Information Commissioner’s Office (ico.org.uk, helpline 0303 123 1113) or to the Nigeria Data Protection Commission (ndpc.gov.ng).

11. Cookies

Cookies are small files stored on your device. This website uses:

• Essential cookies set by our website platform, Wix, for security, load balancing and remembering your cookie choice. These do not need consent.

• Functional cookies from embedded tools: the Calendly booking calendar and Google Maps may set cookies when they load so that they work properly.

• Analytics or marketing cookies, only if you accept them.

You can accept or refuse non-essential cookies in the cookie banner, change your choice at any time, and block or delete cookies in your browser settings. Blocking some cookies may stop the booking calendar or map from working.

12. Children

Services for children under 18 are arranged by a parent or guardian, who must attend and who gives any consent needed on the child’s behalf.

13. Changes to this policy

We may update this policy when our services or the law change. The date at the top of this page shows when it was last updated.