Data processing

Data processing overview

How Buk.ng separates merchant-controlled customer records from platform-controlled account, billing, security, and operations records.

Last updated: May 26, 2026

Roles

For merchant customer records, the merchant is generally the controller and Buk.ng acts as a processor. Buk.ng may also act as a controller for its own account, billing, security, and platform operations data.

Sub-processors

Payment, hosting, email, SMS, WhatsApp, monitoring, and support providers may process limited data needed to deliver the service.

Data requests

Buk.ng includes intake workflows for access, deletion, correction, and opt-out requests. Requests must be verified before release or deletion of data.

Cross-border processing

Some infrastructure or providers may operate outside Nigeria. Buk.ng should assess provider safeguards before production use.

Breach handling

Suspected security incidents should be triaged, contained, documented, escalated, and communicated according to applicable obligations.