Skip to content
PartMap

Privacy notice

PartMap is operated by Gripd SaaS Technologies Ltd (RC 9853060), Lagos, Nigeria(“we”). We are the data controller for the information described here. This notice explains what we hold, why, and for how long, and is written to comply with the Nigeria Data Protection Act 2023. For any privacy question or request, email support@partmap.ng.

Effective 21 October 2026.

Business listings

We publish business contact information intended for public commercial contact: business names, addresses, business phone and WhatsApp numbers, websites and categories. Listings come from open data that permits reuse (currently OpenStreetMap), from businesses that send us their own details, and from business facts we gather ourselves.

Some small businesses use a personal phone number as their business number. Where a listing contains information about an identifiable person, we process it on the basis of legitimate interest in helping the public find businesses, and we honour requests to correct, restrict or remove it.

For each listing we record its source, when it was imported and when it was last checked, so we can show where information came from and handle disputes.

When you list your business

The list your business form asks for your name, your role at the business and a phone number or email. We use them only to check the submission and contact you about it. They are never published. The business details you send are published only if we approve the listing.

Visitors

  • Usage events. We record anonymous events such as searches performed, filters used, profiles opened and contact buttons clicked, to learn which categories and places people need. These events do not include your IP address, device identifiers or account details. Search text is stored as typed, so please don't search for personal information.
  • Abuse prevention. To limit spam we keep a one-way, salted hash derived from your network address for up to one day. We cannot turn it back into your address.
  • Reports. If you send a correction report we keep its contents. Your phone or email is optional, used only to follow up on that report, and never published.
  • Server logs. Like any website, our hosting provider sees your IP address and browser details when it delivers a page, and keeps them briefly in its logs for security and troubleshooting.
  • Cookies. Public pages set no cookies and load nothing from advertising or tracking services. Map and directions links take you to OpenStreetMap or Google only when you choose to open them. The admin area uses a strictly necessary session cookie.

Why we use it

  • Legitimate interests: publishing business listings, understanding how the directory is used, preventing abuse and keeping the service secure.
  • Taking steps you ask for: reviewing a listing you submit or a correction you report, and contacting you about it.
  • Legal obligations: where the law requires us to keep or disclose information.

We make no automated decisions with legal or similarly significant effects. Possible duplicate listings are flagged automatically, but a person decides what happens to them.

Who processes data for us

We don't sell personal data. These providers process it on our behalf:

  • Vercel Inc. hosts the website. Pages are served from London, United Kingdom, through Vercel's worldwide network.
  • Neon hosts our database in London, United Kingdom.

Both are based in the United States, so information we hold is stored and processed outside Nigeria. We rely on these providers' data protection terms, including standard contractual clauses where they apply, to keep it protected to the standard the Nigeria Data Protection Act requires. We share information otherwise only when the law requires it.

Security

Data is encrypted in transit. Contact details from submissions and reports are visible only to our administrators, behind a password-protected admin area, and every change made there is logged.

How long we keep it

  • Usage events: 12 months.
  • Correction reports: 12 months after the report is resolved.
  • List-your-business submissions, including your name and contact details: 6 months after we review them.
  • Abuse-prevention hashes: 1 day.
  • Published listings: while they remain accurate and in use. Removed listings are suppressed immediately and their contact details deleted. A minimal record is kept so the listing isn't imported again.

An automatic job deletes data once its period ends.

Your rights

You may ask to access, correct or delete personal information about you, restrict or object to its use, or withdraw consent where we rely on it. Email support@partmap.ng or use the correction form. We reply within one month, and won't charge you unless a request is clearly excessive.

If you're unhappy with how we handle your information, please contact us first. You can also complain to the Nigeria Data Protection Commission at ndpc.gov.ng.

Children

PartMap isn't intended for anyone under 18, and we don't knowingly collect information from minors.

Changes

If we change this notice, we'll update the effective date at the top.