Privacy policy

This policy explains what personal data Rayex collects, why we collect it, how we protect it, and the rights you have. We process personal data in line with the Nigeria Data Protection Act, 2023 (the “NDPA”). It applies to our website and client portal.

Rayex is the data controller for the personal data described here. That means we decide why and how your data is processed. You can reach us about any privacy matter at inquiries@rayex.co.

• Account details: your name, email, phone number and company details.
• Verification data: during identity verification, your date of birth, nationality, address, ID type and number, ID images and a selfie. For businesses, registration details, ownership information and your certificate of incorporation.
• Transaction and shipment data: requests, quotes, orders, documents and tracking history.
• Usage data: basic technical information needed to run the portal securely.

• To create and manage your account and provide the service you request.
• To verify your identity and meet anti-money-laundering obligations.
• To source, pay suppliers, ship and clear your cargo.
• To keep you informed about your shipments and requests.
• To protect the service against fraud and misuse.
• To comply with legal and regulatory requirements.

Under the NDPA, we rely on your consent, the performance of our contract with you, compliance with legal obligations, and our legitimate interest in running and securing the service. Where we rely on consent, such as processing your verification data, you can withdraw it, though this may limit the features available to you.

We apply technical and organisational measures to keep your data safe, including:

• Encryption of sensitive identity fields, such as ID numbers and date of birth, at rest (AES-256-GCM).
• Storing verification documents on private storage, accessible only through authenticated requests.
• Access controls that limit who can view your data, with sensitive values masked except to authorised reviewers.
• Audit logging of actions taken on verification records.

We share personal data only as needed to provide the service, and never sell it. Recipients may include:

• Suppliers and manufacturers, to fulfil your orders.
• Carriers, freight forwarders and customs agents, to ship and clear your cargo.
• Payment and banking partners, to settle transactions.
• Service providers who help us operate the platform, under confidentiality obligations.
• Authorities, where we are legally required to disclose.

Because we operate between China and Nigeria, some data is processed outside Nigeria to deliver the service, for example when coordinating with suppliers and carriers. Where we transfer data internationally, we take steps to ensure it remains protected to a standard consistent with the NDPA.

We keep personal data for as long as your account is active and for as long as we are required to for legal, regulatory, tax and record-keeping purposes, including anti-money-laundering retention periods. When data is no longer needed, we delete or anonymise it.

Under the NDPA, you have the right to:

• Access the personal data we hold about you.
• Ask us to correct inaccurate or incomplete data.
• Ask us to delete data, where there is no overriding legal reason to keep it.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with the Nigeria Data Protection Commission.

To exercise any of these, contact us at inquiries@rayex.co.

We use only the cookies needed to keep you signed in and to run the portal securely. We do not use advertising cookies. You can control cookies through your browser settings, though disabling essential cookies may stop the portal from working.

Rayex is intended for business and adult use. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us data, contact us and we will remove it.

We may update this policy from time to time. We will change the date at the top of this page and, for significant changes, let you know in the portal.

For any privacy question or request, email inquiries@rayex.co. See also our Terms and conditions.