Privacy Policy

This Privacy Policy explains GreenRev's personal-data practices in a layered, user-facing format designed around Nigerian requirements and widely used international privacy-notice principles.

1. Who We Are and Scope

This Privacy Policy explains how GreenCrest Ltd, operator of GreenRev, collects, uses, shares, retains and protects personal data through the GreenRev website, applications, dashboards, marketplace and related services.

Where GreenCrest Ltd determines the purposes and means of processing, it acts as the data controller. Independent sellers, payment providers, lenders, logistics providers and other partners may separately act as controllers for their own processing.

2. Information We Collect

Account and identity data

Name, username, email, phone number, account credentials in protected form, profile information, date of birth where required, identity documents and verification results where necessary.

Business and dealer data

Business/dealership name, registration details, business contact information, authorised representatives, verification documents, subscription information and related account data.

Vehicle, listing and ownership data

Listings, photographs, VIN/chassis information, registration information, mileage, service or inspection records, ownership documents and information about vehicles, parts or services.

Transaction and communications data

Enquiries, deal/order IDs, transaction status, prices, commissions, delivery confirmations, refunds, complaints, disputes, reviews, messages and support records.

Payment data

Payment-provider references, amounts, status, masked payment details and settlement information. Complete card credentials may be collected directly by payment providers rather than GreenRev.

Finance-referral data

Information you submit for finance or BNPL referral or preliminary eligibility, plus related referral status. Finance providers may collect additional information directly.

Location data

Approximate location and, with permission or when needed for a feature, precise device location.

Technical and usage data

IP address, device identifiers, browser/app version, operating system, timestamps, searches, clicks, viewed screens/pages, crash, diagnostic and security information.

Cookies and similar technology data

Identifiers and usage data collected through cookies, SDKs and similar technologies, subject to applicable consent requirements.

3. Sources of Personal Data

We collect data directly from you when you register, list or enquire about an item, transact, request a service or finance referral, communicate with another user, contact support or otherwise use GreenRev.

We may receive data from other marketplace users, dealers, payment providers, logistics partners, verification providers, finance partners, analytics/security providers and lawful public sources.

Where information is obtained from another source, we use it only where we have an appropriate lawful basis and provide information required by applicable law.

4. Purposes and Lawful Bases

GreenRev processes personal data only for defined purposes and on an appropriate lawful basis. The principal activities are:

• Account creation, authentication and requested services: contract or steps requested before contract.
• Listings, enquiries, transactions, delivery and support: contract and legitimate interests in operating the marketplace.
• Payments, refunds, accounting and transaction records: contract, legal obligations and legitimate interests.
• Finance/BNPL referrals: steps requested by you before a potential contract, consent where appropriate, and applicable legal obligations.
• Identity verification, security and fraud prevention: legitimate interests and legal obligations where applicable.
• Location-based features: consent where device permission/consent is required, or contract where necessary for a requested service.
• Service analytics and product improvement: legitimate interests, with consent for non-essential tracking where required.
• Direct marketing: consent or another lawful basis permitted by applicable law, with opt-out rights.
• Legal claims, regulatory requests and compliance: legal obligations and legitimate interests in protecting legal rights.

Our legitimate interests include operating and securing the marketplace, preventing fraud, improving services, protecting users and legal rights, and understanding service performance. We consider whether those interests are overridden by users' rights and interests.

5. Sensitive Personal Data

We seek to minimise collection of sensitive personal data. Where sensitive data is necessary, we will rely on an appropriate legal condition and apply enhanced safeguards. Do not publish unnecessary sensitive information in public listings, reviews or free-text fields.

6. Payments

Independent payment providers may process payment credentials and apply their own privacy notices. GreenRev may receive transaction references, amount, status, limited payment identifiers, settlement details and fraud signals necessary to administer transactions.

We do not intend to store complete card credentials unless an approved architecture and appropriate security and compliance controls are implemented.

7. Finance and BNPL Referrals

If you ask us to connect you with a finance provider, we may transmit the information reasonably necessary for that referral. The provider may independently conduct identity, affordability, anti-fraud and credit assessments under its own privacy notice.

A finance provider's decision and its processing are not controlled by GreenRev unless expressly stated otherwise.

8. Location Data

With appropriate permission, precise location may be used for nearby vehicles, dealers, mechanics, rentals, logistics or other location-based features. You can manage device permissions in your device settings.

We may use approximate location derived from IP address for security, localisation or analytics. We aim not to collect precise location where approximate location is sufficient.

9. Cookies and Similar Technologies

GreenRev may use strictly necessary technologies for authentication, security, preferences and core functionality. Analytics, advertising or other non-essential technologies will be used in accordance with applicable consent requirements.

Where applicable, a cookie banner or Cookie Policy will identify the technologies actually deployed, their purposes and available choices.

10. Who We Share Data With

We may share personal data with relevant marketplace counterparties; payment processors; logistics, mechanic, inspection and rental providers; finance providers you ask us to contact; identity and fraud-prevention services; hosting, communications, analytics and customer-support suppliers; professional advisers; and competent authorities where legally required.

We require processors acting solely on our instructions to be subject to appropriate confidentiality, security and data-protection obligations.

We do not sell a customer database for money. If our practices materially change, we will update this Policy and provide legally required choices.

11. International Transfers

Some service providers may process information outside Nigeria. Where personal data is transferred internationally, we will use a transfer basis and safeguards required by applicable Nigerian data-protection law and assess relevant transfer risks where required.

You may contact support@greenrevs.com for information about safeguards applicable to a material international transfer involving your personal data.

12. Retention

We keep personal data only for as long as necessary for the relevant purpose and applicable legal, accounting, fraud-prevention, security and dispute requirements.

• Account/profile data: generally for the life of the account and a reasonable period after closure where required for security, disputes or legal obligations.
• Transaction, payment and commission records: for the applicable accounting, tax, dispute and regulatory retention period.
• Listings and marketplace communications: for the active transaction/listing period and an appropriate period afterwards for support, fraud prevention and disputes.
• Identity/verification documents: only as long as necessary for verification, compliance, fraud prevention or legal requirements.
• Marketing preferences and suppression records: for as long as necessary to honour your communication choices.
• Security logs: for a proportionate period based on security and fraud risk.

When exact periods depend on a statutory requirement or unresolved claim, we use those requirements and risk factors as the retention criteria.

13. Security

We use technical and organisational measures appropriate to risk, which may include encryption in transit, role-based access, secure credential handling, logging, backups, vulnerability management, vendor controls and confidentiality obligations.

No system is completely secure. Protect your password and one-time codes and report suspected unauthorised access promptly.

14. Personal Data Breaches

We maintain procedures to assess, contain, document and respond to personal data breaches. Where applicable law requires notification to the Nigeria Data Protection Commission or affected individuals, we will make the required notification.

Report suspected compromise to support@greenrevs.com.

15. Your Privacy Rights

Subject to applicable law and exceptions, you may have rights to information about processing, access, correction, deletion, restriction, objection, data portability, withdrawal of consent and safeguards concerning certain automated decisions.

Your right to object: where processing is based on legitimate interests, you may object based on your particular situation. You may object to direct marketing at any time.

To exercise a right, email support@greenrevs.com. We may verify your identity before acting and will respond within the timeframe required by applicable law.

16. Marketing Choices

Service, security, transaction and legal notices may be sent where necessary. Promotional communications will be sent on an appropriate lawful basis and will provide an unsubscribe or preference mechanism where required.

Opting out of marketing does not stop essential service communications.

17. Automated Processing and Profiling

We may use automated systems to rank search results, recommend listings, identify suspicious activity, personalise content or support marketplace analytics.

If we introduce solely automated decision-making that produces legal or similarly significant effects, we will provide any additional information, human-review options and safeguards required by applicable law.

18. Children

GreenRev is primarily intended for adults with legal capacity to enter marketplace transactions. We do not knowingly permit children to enter transactions requiring legal capacity without appropriate lawful authority.

If a service is later directed specifically to children, we will introduce age-appropriate notices and safeguards before that processing begins.

19. Public Listings and Messaging

Information intentionally published in a public listing may be visible to users and, depending on Platform configuration, search engines. Do not publish identity documents, complete home addresses, financial information or unnecessary personal data in listing text or images.

We may provide in-platform messaging or contact-protection features to reduce unnecessary disclosure.

20. Verification, Fraud and Legal Claims

We may verify identity, business information, listing ownership, transaction behaviour and device/security signals and compare information with lawful third-party sources where appropriate.

We may retain relevant evidence after account closure where necessary for fraud investigations, chargebacks, litigation, regulatory matters or protection of legal rights, subject to applicable retention principles.

21. GreenRev Passport and Connected Vehicle Data

If GreenRev offers a digital vehicle passport, service history, inspection or connected-device feature, data may include VIN, service events, inspection results, odometer readings, repairs, transaction/ownership history and device-generated information.

Before continuous telemetry or materially new connected-vehicle processing is introduced, we will provide additional notice explaining the data collected, frequency, purposes, access, sharing and retention. Vehicle data linked or reasonably linkable to an individual will be handled as personal data where applicable.

22. Business Transfers

If GreenCrest Ltd or GreenRev is involved in a merger, acquisition, restructuring, financing or sale of assets, relevant data may be disclosed to advisers and prospective counterparties subject to appropriate confidentiality and legal safeguards. We will provide notice where required.

23. Changes to This Policy

We may update this Policy for product, legal, regulatory, security or business changes. The effective date will be updated. Material changes will be communicated where required, and fresh consent will be requested where legally necessary.

24. Contact and Complaints

GreenRev
Operated by GreenCrest Ltd
Website: www.greenrevs.com
Privacy and support email: support@greenrevs.com

If you have a privacy concern, contact us first so we can investigate. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).