Privacy Policy

Welcome to Primex ("we," "our," or "us"). Primex is a digital services platform operating at primex.ng, providing virtual phone number services, OTP verification, social media marketing (SMM) growth services, and a developer API — primarily serving users in Nigeria and across Africa.

We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect, how we use it, when we share it, and the choices you have regarding your data.

2.1 Information You Provide Directly

• Full name and email address (when you register an account)
• Password (stored in hashed/encrypted form — never in plain text)
• Phone number (if provided for account recovery or verification)
• Payment information (transaction references and wallet funding details via Palmpay — we do not store card or bank account details directly)
• Social media profile URLs or usernames (when placing SMM orders)
• Support messages submitted through our ticketing system

2.2 Information Collected Automatically

• IP address and approximate geographic location
• Browser type, operating system, and device information
• Pages visited, session duration, and usage patterns
• API access logs for Developer API users (endpoint calls and timestamps)
• Cookies and similar tracking technologies (see Section 7)

2.3 Information from Third Parties

• Payment confirmation data from Palmpay (our wallet funding partner)
• Virtual number provider data required to facilitate OTP delivery
• SMM service provider data required to fulfil social media orders

We use the information we collect for the following purposes:

• Account creation, authentication, and management
• Processing wallet funding and service transactions
• Delivering virtual numbers and forwarding OTP messages to your account
• Fulfilling SMM growth service orders
• Providing and improving our Developer API
• Sending transactional notifications (order confirmations, wallet credits, security alerts)
• Responding to support tickets and customer enquiries
• Detecting and preventing fraud, abuse, and unauthorised access
• Complying with applicable Nigerian laws and regulations
• Improving our platform through aggregated, anonymised analytics
• Sending referral and promotional communications (with your consent — you may opt out at any time)

We process your personal data under the Nigeria Data Protection Act (NDPA) 2023 on the following legal bases:

• Contract performance: Processing is necessary to provide the services you have requested.
• Legitimate interests: We process certain data to maintain platform security, prevent fraud, and improve our services.
• Legal obligation: We may process data as required by Nigerian law, including the NDPA 2023.
• Consent: Where we rely on your consent (e.g., marketing emails), you may withdraw it at any time without affecting the lawfulness of prior processing.

5.1 Service Providers

We share data with trusted third-party providers who assist in operating our platform, including:

• Palmpay — for wallet funding and payment processing
• Virtual number aggregators — to provision and deliver OTP services
• SMM fulfilment providers — to deliver social media growth orders
• Web hosting and cloud infrastructure providers

These providers are contractually bound to handle your data securely and only for the purposes we specify.

5.2 Legal and Regulatory Disclosure

We may disclose your information where required by law, court order, or government authority, or where we reasonably believe disclosure is necessary to protect the rights, property, or safety of Primex, our users, or the public.

5.3 Business Transfers

If Primex is involved in a merger, acquisition, or asset sale, your personal data may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.

We retain your personal data for as long as your account is active, or as long as necessary to provide our services and comply with our legal obligations.

• Account data: Retained for the lifetime of your account and for up to 2 years after account deletion.
• Transaction records: Retained for a minimum of 6 years in accordance with Nigerian financial record-keeping requirements.
• Support correspondence: Retained for up to 2 years after the ticket is closed.
• API access logs: Retained for up to 12 months for security and debugging purposes.

You may request deletion of your account and personal data at any time (see Section 9). Certain data may be retained where required by law or for legitimate business purposes.

Primex uses cookies and similar technologies to maintain your session, remember your preferences, and analyse platform usage.

• Essential cookies: Required for the platform to function (e.g., session authentication, PIN-based quick login).
• Analytical cookies: Used to understand how users interact with the platform.
• Security cookies: Used to detect and prevent fraudulent activity.

You can manage cookies through your browser settings. Disabling essential cookies may prevent certain platform features from working correctly.

We implement appropriate technical and organisational security measures, including:

• Password hashing using industry-standard algorithms
• Two-factor authentication (2FA) and PIN-based login options
• Email alerts for sensitive account actions (password changes, new logins)
• HTTPS encryption for all data in transit
• Access controls to restrict employee access to personal data

Under the Nigeria Data Protection Act (NDPA) 2023, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data, subject to legal retention requirements.
• Right to data portability: Request your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us using the details in Section 13. We will respond to your request within 30 days.

Primex is not intended for use by persons under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a person under 18, please contact us immediately and we will take steps to delete it.

Our platform may contain links to third-party websites or services (e.g., Palmpay, social media platforms). This Privacy Policy applies only to Primex. We are not responsible for the privacy practices of third parties and encourage you to review their privacy policies independently.

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or business practices. When we make material changes, we will notify you by email or by posting a prominent notice on the platform, at least 14 days before the changes take effect.

Continued use of Primex after the effective date of any update constitutes your acceptance of the revised policy.

If you have questions about this Privacy Policy, wish to exercise your data rights, or want to report a privacy concern, please reach out:

We aim to respond to all privacy-related enquiries within 5 business days.