AMASTASHIELDVLRENEWALS

Privacy Policy

AMASTASHIELD VLRenewals · Last updated 1 November 2026

AMASTASHIELD TECH Ltd (“we”, “us”) runs AMASTASHIELD VLRenewals, a service that helps vehicle owners in Nigeria renew their vehicle licence documents. You submit the request and pay online; one of our vetted agents carries out the renewal at the relevant office and the finished document is delivered to you by courier. We act as an independent agent and are not part of any government agency. This policy explains what personal data we collect, why, who sees it, how long we keep it, and your rights under the Nigeria Data Protection Act 2023 (NDPA).

1. What we collect

  • Account details: your full name, phone number, optional email address and a password (stored only as a one-way hash).
  • Vehicle details: make, model, year, plate number, engine size, vehicle type, and a photo or scan of the vehicle’s original document.
  • Renewal requests: what you are renewing, the documents you upload with each request, your delivery Local Government Area and street address or landmark, and the status updates and delivery proof photos added by our agent.
  • Payments: amount, reference, date and status. You pay on Paystack’s secure page; we never see or store your card number.
  • Disputes: the reason you give and any photo you attach.
  • Sign-in security: for the phone you register on and each phone or browser you ask us to remember, a coded token and a device name such as “Chrome on Android”; and, if you turn on an authenticator app, its secret key (stored encrypted) and your backup codes (stored only in coded form).
  • Technical: a session cookie that keeps you logged in, and basic server logs needed to run and secure the service. We do not use advertising or analytics trackers.

Our staff (agents, sub-admins and admins) also have accounts: name, phone, email, the state they work in, and the notices and internal messages they exchange.

2. Why we use it

  • To carry out the renewal you asked for and deliver the document (contract).
  • To take payment, prevent fraud and keep the required financial records (legal obligation, legitimate interest).
  • To contact you about your request, send password-reset and sign-in codes, and resolve disputes.
  • To keep the service secure and working.

We do not sell your data, use it for advertising, or use it for any purpose that is not described here.

3. Who sees it

  • Our agents and administrators — only what is needed to process, deliver or resolve a request. A sub-admin sees only requests in their own state. Your documents can be opened only by you, the agent assigned to that request, that state’s sub-admin and our administrators.
  • Paystack — our payment processor, which receives the payment details you enter on its page.
  • Our SMS provider — receives your phone number and the message when we send you a code or notice by SMS.
  • Courier companies — receive your name, phone number and delivery address, so they can deliver your document.
  • Our hosting provider — stores the data on our behalf.
  • Authorities — where the law requires it.

The office that processes your renewal receives the vehicle information needed to complete it. Our hosting and payment providers may process data on servers outside Nigeria; where that happens we rely on the safeguards the NDPA allows for such transfers.

4. How long we keep it

  • Your account (name, phone number, email): kept for as long as your account is open, because your phone number is how you sign in. You can delete your account at any time and these are removed. If you do not use the service for 24 months (no sign-in, request or payment), we remove the account the same way. We send you one reminder about 30 days before, as an in-app notice and by SMS where available; signing in at any time keeps the account. Staff accounts are removed by an administrator.
  • Renewal reminders (only if you switch them on): we work out from the renewals you made with us when each one can be renewed again and roughly when it expires, and remind you by in-app notice and SMS using your phone number and the vehicle’s make and model. Nothing extra is stored for this, the plate number is not used, and a small log (job number, item, date) is kept for up to 400 days so you are not sent the same reminder twice. Turn reminders off at any time under “Reminders”, or delete your account, and they stop and the log is removed.
  • Documents, photos, delivery address and plate number: deleted automatically 14 days after verified delivery (the plate number is masked rather than removed). If a dispute is open, deletion waits until it is resolved; dispute photos are deleted 14 days after the dispute is resolved. If you have another renewal of the same vehicle in progress, the vehicle document and plate stay until that one has also aged out.
  • Renewal Limit Record: to stop the same item being renewed twice for one plate within 360 days (177 days for a commercial vehicle's roadworthiness certificate), we keep after each renewal a coded fingerprint of the plate number, with the item renewed, the date and the renewal number, until about a week after the renewed document is estimated to expire (so that renewal reminders can tell it was renewed again). It contains no name or plate number. It stays even if you delete your account, because the renewal limit still applies to the plate, and is then deleted automatically.
  • Record of the Terms you accepted: the version, date and where you accepted it (registration or a payment). Kept with your payment records so we can show what you agreed to; see our Terms of Service.
  • Payment record (name, amount, reference, date): kept to meet Nigerian tax and financial record-keeping law.
  • Staff notices and internal messages: deleted after 30 days.
  • Password-reset codes: valid for 15 minutes, stored only as a hash.
  • Sign-in codes: valid for 10 minutes, stored only as a hash.
  • Remembered phones and browsers: for up to 30 days; each is deleted a day after it expires or you remove it. Your authenticator key and backup codes are kept until you turn the authenticator off or delete your account.
  • Account-deletion requests: removed 30 days after we have dealt with them.
  • The finished renewal document itself is delivered to you by courier and is never stored on our servers.

5. Your rights

Under the NDPA you may ask to see the personal data we hold about you, have it corrected, object to or restrict how it is used, withdraw consent, and have it deleted (subject to the legal records in section 4).

  • Delete your account: in the app under Settings › Delete my account, on the website via our deletion page, or by sending a request there if you can’t log in.
  • Anything else: contact us using the details below.
  • You may also complain to the Nigeria Data Protection Commission (NDPC) if you believe your data has been mishandled.

6. Security

Connections are encrypted (HTTPS). Passwords are hashed. Uploaded documents are not publicly accessible: each file is served only to the people in section 3 who are entitled to it. We can ask owners for a code sent by SMS when they sign in from a new phone or browser; to remember that a phone has passed this check we keep a random token on it (its hash is stored here) for up to 30 days, and you can remove any remembered phone in your settings. No system is perfectly secure, but we limit access and delete sensitive data promptly.

7. Children

The service is for adults who own or manage a vehicle. It is not intended for anyone under 18 and we do not knowingly collect data from children. If you believe a child has registered, contact us and we will delete the account.

8. Changes

If we change this policy we will update the date above and, for significant changes, tell you in the app or by SMS.

9. Contact us

AMASTASHIELD TECH Ltd

Contact details are being set up.