Privacy Policy

Last updated 4 June 2026

This Privacy Policy explains how Nigerian Petroleum Exchange (NipeX)(“NipeX”, “we”, “us” or “our”) handles personal and corporate information processed through NipeXPRO(the “Platform”) — the unified upstream procurement and vendor-management service for the Nigerian oil & gas industry. It applies to vendors, prospective vendors, operator and buyer organisations, and anyone who contacts us or browses our public pages.

1. Who we are

The data controller is Nigerian Petroleum Exchange (NipeX), NNPC-NUIMS (NipeX Office), Post Square Building, Tower B, 3 Ologun Agbaje Street, off Adeola Odeku, Victoria Island, Lagos. Where we process tender and registration data on behalf of operating companies and regulators, we act as a joint controller or processor under the terms of the relevant industry agreements. You can reach us at customersupport@nipex.com.ng or by phone on 08032850332 or 09038452851.

2. Information we collect

We collect the following categories of information:

• Company and registration data — RC number and CAC records, legal and trading names, ownership and directorship details, Nigerian Content information, TIN, and harmonized product/service categories.
• Uploaded documents — mandatory registration documents (CAC certificates, tax clearance, audited financials, ISO and HSE certificates, relevant licences) and any service-specific or tender-related attachments.
• Contact and account details — names, job titles, business email addresses, phone numbers, and the credentials and multi-factor authentication data used to secure your account.
• Transactional data — registration fee payments, bids and tender responses, evaluation correspondence, contract and performance records.
• Usage data — log files, IP address, device and browser information, and activity within the Platform, collected to keep the service secure and reliable.

3. How we use your information and our lawful basis

We process your information to:

• verify your company, prequalify vendors, and maintain the harmonized vendor database (performance of a contract and our legitimate interest in a trusted marketplace);
• operate the tendering, evaluation, award, and contract-management workflows (performance of a contract);
• meet regulatory, Nigerian Content, tax, and anti-fraud obligations (compliance with a legal obligation);
• secure the Platform, prevent abuse, and provide customer support (legitimate interest);
• send service notifications and, where permitted, relevant updates (consent or legitimate interest).

4. Sharing with operators and regulators

The Platform exists to connect vendors with operating companies and the wider industry. We may therefore share your information with:

• Operating companies and buyers who view qualified vendor profiles, receive bids, and conduct evaluations and audits;
• Regulatorsincluding the Nigerian Upstream Petroleum Regulatory Commission (NUPRC) and the Nigerian Content Development & Monitoring Board (NCDMB), where required for oversight and Nigerian Content reporting;
• Service providers — payment processors, cloud hosting, identity verification, and audit partners acting under contract on our instructions; and
• Authorities where disclosure is required by law or to protect the rights and safety of users.

5. Retention

We keep registration and prequalification records for the lifetime of your vendor account and for a minimum of seven (7) years thereafter to satisfy tax, audit, and procurement-record obligations. Tender and contract data is retained in line with the relevant operator’s record-keeping requirements. Account security logs are retained for up to twenty-four (24) months. When data is no longer needed it is securely deleted or anonymised.

6. Security

We apply technical and organisational measures appropriate to the sensitivity of the data, including encryption in transit and at rest, role-based access control, mandatory multi-factor authentication for accounts, network segmentation, and continuous monitoring. Access to vendor documents is restricted to authorised personnel on a need-to-know basis.

7. Your rights

Subject to Nigerian data-protection law, you have the right to access, correct, and request deletion of your personal data; to object to or restrict certain processing; to data portability; and to withdraw consent where processing relies on it. To exercise any right, contact our Data Protection Officer using the details below. We respond within the timeframes set by the Nigeria Data Protection Act.

8. Contact and Data Protection Officer

For any privacy question, or to exercise your rights, contact the NipeX Data Protection Officer at customersupport@nipex.com.ng, by phone on 08032850332 or 09038452851, or by post at NNPC-NUIMS (NipeX Office), Post Square Building, Tower B, 3 Ologun Agbaje Street, off Adeola Odeku, Victoria Island, Lagos. You may also lodge a complaint with the Nigeria Data Protection Commission (NDPC).