Regulatory Framework

1. Data Protection and Privacy

Nigeria Data Protection Act (NDPA), 2023: Establishes lawful bases for processing personal data, data governance, processing registers, and data subject rights procedures.
NDPC Guidance & Registration: Designation of Data Protection Lead/Officer, publication of privacy notices, and implementation of internal privacy impact assessments.
Cross-Border Transfer Controls: Documenting transfer safeguards where cloud infrastructure (e.g., Supabase) processes data internationally.

Cybercrimes (Prohibition, Prevention, Etc.) Act, 2015: Technical protections against unauthorized database access, data compromise, and transaction tampering.
Incident Response & Log Auditing: Maintaining a documented incident response playbook and retaining timestamped access logs for operational auditing.

Money Laundering (Prevention and Prohibition) Act, 2022: Implementing KYC verification, suspicious transaction monitoring, and escalation procedures.
Paystack Merchant Terms & Escrow Mechanics: Ensuring all customer payments are processed through CBN-licensed payment switching and gateway providers.

Federal Competition and Consumer Protection Act (FCCPA), 2018: Ensuring transparent pricing, fair terms of service, clear parcel damage limits, and efficient dispute handling.
Dispute Resolution Process: Documented customer support escalation pathways for parcel claims and escrow release issues.

Companies and Allied Matters Act (CAMA), 2020: Corporate registration and statutory annual returns with the Corporate Affairs Commission (CAC).
Tax Registration & Remittance: VAT, withholding tax, and corporate tax compliance with the Federal Inland Revenue Service (FIRS).
Goods-in-Transit Insurance: Insurance coverage for parcel damage or transit loss across intercity transport corridors.

For regulatory inquiries, please contact us at:

Aerodrop Technologies Limited
99, Edet Akpan Avenue, Uyo, Akwa Ibom, Nigeria.
Email: info@aerodrop.app