1. Introduction
Well of Waters (“we”, “us”, “our”) operates a warm, church-verified community where single Christians can meet meaningful connections. We are committed to protecting the privacy and dignity of everyone who uses our Platform.
This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights you have. It is written in line with the Nigeria Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Regulation (NDPR). By using Well of Waters, you acknowledge that you have read and understood this policy.
2. Data We Collect
We collect the following categories of personal data:
Account data
Your name, email address, phone number, and password (stored in hashed form), provided when you create an account.
Church verification data
The Church Code you enter and the church it is linked to, used to confirm your connection to a participating Church Partner.
Profile & bio data
Information you choose to share on your profile — such as your photos, age, location, interests, testimony, and the details you provide during onboarding — so other Members can get to know you.
Assessment responses
Your answers to our onboarding assessment, which we use to understand your personality and values and to suggest more meaningful, compatible connections.
Connection & messaging data
Records of the Connections you form and the messages you exchange with other Members, kept so we can operate the service and keep the community safe.
Device and usage data
Browser type, device information, IP address, pages visited, and general interaction data, used for security, analytics, and improving the Platform.
3. How We Use Your Data
We use your personal data to:
- Create and manage your account.
- Verify your connection to a Church Partner.
- Build your profile and suggest compatible connections.
- Enable messaging and Connections between consenting Members.
- Keep the community safe and prevent fraud, abuse, and misuse.
- Provide support and respond to your requests.
- Send service notifications (and, where you consent, occasional updates you can opt out of at any time).
- Improve the Platform's features, performance, and safety.
- Comply with our legal obligations under Nigerian law.
4. Legal Basis
Under the NDPA 2023, we process your data on the following bases:
- Contract performance — processing needed to provide the service to you (for example, verifying your church and enabling Connections).
- Consent — for sensitive profile details you choose to share, optional communications, and non-essential cookies (you may withdraw consent at any time).
- Legitimate interests — safety, fraud prevention, analytics, and improving the Platform.
- Legal obligation — compliance with applicable Nigerian laws and regulatory requirements.
5. Data Sharing
We do not sell your personal data. We share data only in these limited circumstances:
- Between Members — the profile information you choose to share is visible to other verified Members. Your contact details are never shared automatically.
- Service providers — trusted providers for cloud hosting, communications, and analytics, who are contractually bound to process data only on our instructions and in line with the NDPA.
- Safety & legal — where necessary to protect Members, or where required by law, court order, or a valid request from a Nigerian regulatory authority.
- Business transfers — in the event of a merger or acquisition, your data may transfer as part of that transaction, and you will be notified in advance.
6. Your Church
We use your Church Code only to confirm that you are connected to a participating Church Partner. We do not share your private profile, assessment responses, messages, or the details of your Connections with your church.
Where a serious safety concern arises, we may, where appropriate, inform your Church Partner as part of caring for the wellbeing of the community.
7. Data Retention
We retain your personal data for as long as your account is active or as needed to provide our services. After you delete your account, we will delete or anonymise your data within 30 days, except where we are required to retain certain records for legal compliance, or where limited information must be kept to uphold a safety decision (such as a ban) and protect other Members.
8. Your Rights
Under the NDPA 2023, you have the right to:
- Access — request a copy of the data we hold about you.
- Correction — request that inaccurate or incomplete data be corrected.
- Deletion — request deletion of your data, subject to legal retention obligations.
- Objection — object to processing based on legitimate interests.
- Portability — receive your data in a commonly used, machine-readable format.
- Withdraw consent — withdraw consent for consent-based processing at any time.
To exercise any of these rights, contact us at privacy@wellofwaters.com. We will respond within 30 days. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).
10. Security
We take security seriously. Data in transit is encrypted using TLS, and sensitive data at rest is encrypted. Access to personal data is restricted to authorised staff on a need-to-know basis, and we conduct regular security reviews. No system is completely impenetrable — if you believe your account has been compromised, contact us immediately at security@wellofwaters.com.
11. Minors
Well of Waters is intended only for adults aged 18 and over. We do not knowingly collect data from minors. If we learn that a minor has created an account, we will promptly delete it and the associated data. If you believe a minor is using the Platform, please contact us at privacy@wellofwaters.com.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will notify you and update the “Last updated” date above. Continued use of Well of Waters after such notice constitutes your acceptance of the revised policy.
13. Contact Us
For any privacy-related enquiries, data requests, or complaints: