Privacy Policy

KidMonth Tech Ltd ("KidMonth", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals who interact with our Platform, with particular care and diligence afforded to the personal data of children. This Privacy Policy explains how we collect, use, store, share, and protect personal information in compliance with the Nigeria Data Protection Regulation 2019 ("NDPR"), the General Data Protection Regulation (EU) 2016/679 ("GDPR") for users in the European Economic Area, and applicable international data protection principles.

By using the Platform, you consent to the practices described in this Privacy Policy. If you do not agree, you must discontinue use of the Platform immediately.

We process personal data for the following lawful purposes:

• Account Registration & Authentication: To verify identity and manage user accounts;
• Service Delivery: To process marketplace transactions, Scheduled Gift Orders, VTU requests, and voucher redemptions;
• Contest Administration: To manage contest entries, voting, results, and prize disbursements;
• Prizeback Earnings: To calculate and disburse earnings to children's bank accounts on behalf of Contestants who participate in Prizeback voting;
• Communications: To send transaction confirmations, contest updates, service notices, and promotional communications where consent has been given;
• Platform Improvement: To analyse usage patterns and improve the User experience;
• Legal Compliance: To fulfil obligations under Nigerian law and applicable international law;
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent or unlawful activity.

KidMonth is deeply committed to the safety and privacy of children. The following principles govern how we handle children's personal data:

• All children's data on the Platform is registered and managed by a Parent or Guardian, who provides explicit consent on behalf of the child;
• Children's data is used solely for the purposes of contest participation, Platform engagement, and prize disbursement — never for advertising profiling or sale to third parties;
• Profile photographs, videos, and contest entries submitted for children may be displayed publicly on the Platform and in promotional materials where the Parent or Guardian has granted permission. Parents may withdraw this permission at any time by contacting [email protected];
• KidMonth does not knowingly permit any third party to directly contact or solicit a child through the Platform;
• Parents and Guardians retain the right to review, correct, or delete their child's data at any time. Requests should be directed to [email protected].

KidMonth does not sell your personal data. We may share data in the following limited circumstances:

• Partners: Where a transaction involves a Partner, relevant order details (name, delivery address, order specifications) are shared with that Partner for fulfilment purposes only;
• Payment Processors: Payment data is shared with authorised payment gateway providers for transaction processing;
• Affiliates: Affiliate tracking data (sign-up and purchase activity) is shared with Affiliates to calculate their earnings, without disclosing full personal details of referred Users;
• Legal Authorities: Where required by Nigerian law, court order, or other legally binding government request;
• Service Providers: Trusted technology and hosting providers who process data on our behalf under strict confidentiality obligations.

Any third party receiving data from KidMonth is contractually obligated to handle it in accordance with applicable data protection law.

We retain personal data for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law. Specifically:

• Active account data is retained for the duration of the account;
• Transaction and financial records are retained for a minimum of 6 years in accordance with Nigerian tax and financial regulations;
• Contest entry data and results are retained for 3 years for record-keeping purposes;
• Upon account deletion, personal data is anonymised or deleted within 90 days, except where retention is required by law.

Subject to applicable law, you have the following rights in respect of your personal data:

• Right of Access: To request a copy of the data we hold about you;
• Right to Rectification: To request correction of inaccurate or incomplete data;
• Right to Erasure: To request deletion of your data where there is no lawful basis for continued processing;
• Right to Restriction: To request that we limit the processing of your data in certain circumstances;
• Right to Object: To object to processing based on legitimate interests;
• Right to Data Portability: To receive your data in a structured, machine-readable format;
• Right to Withdraw Consent: Where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact [email protected]. We will respond within 30 days of receipt of a valid request.

KidMonth implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include encryption of data in transit, access controls, and regular security reviews.

Notwithstanding the above, no method of electronic transmission or storage is entirely secure. KidMonth cannot guarantee absolute security and shall not be liable for breaches that occur despite reasonable security measures, provided we act promptly upon discovery.

By accessing, registering on, or using the KidMonth Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, storage, disclosure, and processing of your personal data in accordance with this Policy and applicable law. Where you register a child on the Platform, you confirm that you are the child's legal Parent or Guardian and are authorised to provide consent on the child's behalf where required.