Privacy notice
Nigeria Data Protection Act 2023 · last updated 2026
Who we are
SourceBridge operates a Business-to-business procurement platform connecting Nigerian manufacturers with verified producers and aggregators of industrial raw materials. We act as a data controller for account and platform data, and as a processor for transaction records exchanged between counterparties.
What we collect
Business identity data (company name, sector, sites, registration evidence), user account data (name, work email), transaction data (Requests for Quotation, quotes, orders, quality records, disputes) and platform activity logs. We collect only what is required to verify counterparties and execute procurement transactions.
Lawful basis and consent
We process business data on the basis of contract performance and legitimate interest in operating a verified marketplace. Where personal data is processed, we rely on the consent you provide at registration, which you may withdraw at any time by contacting us.
Data minimisation and access
Access is role-based. Suppliers never see other suppliers' quotes. Buyers see only supplier information the supplier has disclosed and platform-computed performance metrics. Administrators see verification evidence and dispute records for the purpose of adjudication only, and every decision is recorded in the audit log.
Payments, credit and insurance
SourceBridge does not originate payments, credit or insurance. Where those services appear, they are delivered by licensed partners under their own terms and privacy notices.
Retention
Transaction and audit records are retained for the period required by applicable Nigerian commercial and tax law. Verification evidence is retained for as long as the organisation holds a verification level, plus the statutory retention period.
Your rights
Under the Nigeria Data Protection Act 2023 you may request access to, correction of, or deletion of your personal data, object to processing, and lodge a complaint with the Nigeria Data Protection Commission.