Your Privacy, Our Priority
At SurfSpot, we value your trust. Learn how we protect your personal data, what we collect, and how we use it — all in clear, simple terms. Your safety and privacy come first, always.
Contact Us
Back to Home
Privacy Notice for SurfSpot
At CareSurf Spot Online (surfspotonline.com), we are committed to protecting your personal information and respecting your privacy across all regions where we operate. This Privacy Notice explains how we collect, use, disclose, and protect your information globally, and the rights you have regarding your data.
What Information We Collect
We may collect the following types of personal and non-personal information:
- A. Personal Information
- Contact Details: Name, phone number, email address, postal address.
- User Credentials: Account username, passwords (encrypted).
- Billing Information: Payment history, card/payment details (via third-party processors).
- Support Records: Customer service interactions, chats, and complaints.
- B. Technical and Usage Data
- Device identifiers (e.g., MAC address, IP address)
- Browser type and version
- Pages visited, time spent, and clickstream data
- Location data (approximate, based on IP)
- C. Wi-Fi and Broadband Usage Data
- Bandwidth usage, session duration
- Websites accessed via SurfSpot public Wi-Fi (aggregated/anonymised)
- Access logs, timestamps, and authentication events
How We Use Your Information
We process personal information to:
- Provide and maintain connectivity and digital services
- Authenticate user access and ensure network security
- Process payments and manage subscriptions
- Communicate service updates, promotional content (with consent)
- Monitor performance and troubleshoot issues
- Comply with legal obligations (e.g., NCC directives, tax laws)
Legal Basis for Processing (GDPR & NDPA)
We rely on the following lawful bases:
- Consent – for marketing and analytics where required
- Contract – to deliver agreed services
- Legitimate Interests – for improving service quality, detecting fraud
- Legal Obligation – for compliance with data protection and telecommunication regulations
Sharing Your Information
We do not sell your data. We may share information with:
All third-party processors are bound by confidentiality and data protection agreements.
- Service Providers: Cloud hosting, billing systems, and analytics tools
- Regulators: Nigerian Communications Commission (NCC), NDPC (Data Protection Commission), law enforcement, as required
- Business Transfers: In connection with mergers, acquisitions, or restructuring
All third-party processors are bound by confidentiality and data protection agreements.
Data Retention
We retain personal data only for as long as necessary:
- For the purposes stated in this Policy
- To comply with regulatory retention periods (e.g., 12–24 months for connection logs)
- Until you delete your account or request data erasure
Your Rights (GDPR / NDPA Aligned)
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Delete your personal data (subject to lawful exceptions)
- Object to processing based on legitimate interests
- Withdraw consent at any time
- Data portability (to receive a copy of your data)
Data Security
We implement strong administrative, technical, and physical safeguards:
However, no method of transmission over the internet is 100% secure. Use of our services is at your own risk.
- End-to-end encryption of sensitive data
- Firewalls and intrusion detection
- Role-based access controls
- Regular security audits and risk assessments
However, no method of transmission over the internet is 100% secure. Use of our services is at your own risk.
International Data Transfers
If we transfer personal data outside Nigeria (e.g., to cloud servers in the UK, EU, or USA), we ensure appropriate safeguards are in place, such as:
- Data processing agreements
- Standard contractual clauses
- Adequacy decisions (where applicable)
Cookies and Tracking
We use cookies and similar technologies to:
You can manage your cookie preferences via your browser settings. For more, see our Cookie Policy.
- Maintain login sessions
- Analyze traffic and user behavior
- Deliver relevant ads (e.g., via SurfAds)
You can manage your cookie preferences via your browser settings. For more, see our Cookie Policy.
Children’s Privacy
Our services are not intended for children under 13. We do not knowingly collect data from minors without parental consent. Parents may contact us to review or delete their child’s information.
Changes to This Policy
We may update this policy from time to time. We will notify you of material changes via email or a banner on our website.
Contact Us
If you have any questions or concerns about this Privacy Policy or how we handle your data:
SurfSpot Communications Ltd
10 Aimure Avenue, Off Ihama Road, G.R.A.
Benin City, Edo State, Nigeria
Email: privacy@surfspotonline.com
Phone: 08088555855 | 08021222802 | 09062650053
SurfSpot Communications Ltd
10 Aimure Avenue, Off Ihama Road, G.R.A.
Benin City, Edo State, Nigeria
Email: privacy@surfspotonline.com
Phone: 08088555855 | 08021222802 | 09062650053
Experience the SurfSpot Advantage
Enter your phone number or email address to connect with us, and a member of our team will reach out to you as soon as possible to assist with your inquiry.
