Privacy Policy

Mizark Global Limited ("Mizark", "we", "us", or "our") is a company registered in Nigeria. We operate the Mizark Partner Programme — a private equity partnership platform accessible at growbymizark.site (the "Platform").

For questions about this Policy, contact us at partners@mizarkglobal.com.

We use your personal data only for the purposes described below:

• To process your application and determine eligibility for the Partner Programme.
• To create and manage your account and provide access to the partner dashboard.
• To execute and manage your investment, including generating your Musharakah agreement and processing payments.
• To distribute quarterly profits to your Nigerian bank account.
• To send you transactional communications — application updates, account setup links, payment confirmations, and distribution notices. We do not send marketing emails without your explicit consent.
• To comply with applicable Nigerian laws, including financial regulations and anti-money laundering obligations.
• To improve the Platform using aggregated, anonymised usage analytics.

We process your personal data on the following legal bases under the Nigeria Data Protection Act (NDPA) 2023:

• Contract performance: processing necessary to execute and administer your Musharakah partnership agreement.
• Legitimate interests: ensuring platform security, preventing fraud, and improving our services.
• Legal obligation: complying with Nigerian financial, tax, and regulatory requirements.
• Consent: where we have obtained your explicit consent (e.g., optional communications), which you may withdraw at any time.

We do not sell your personal data. We share it only in these limited circumstances:

• Service providers: Supabase (database and authentication hosting), Resend (transactional email delivery), Paystack (payment processing), and Vercel (web hosting). All service providers are contractually required to protect your data.
• Legal requirements: when required by Nigerian law, court order, or regulatory authority.
• Business transfer: in the event of a merger, acquisition, or sale of assets, subject to equivalent data protection obligations.
• With your consent: for any other sharing you explicitly agree to.

We retain your personal data for as long as your account is active or as necessary to fulfil the purposes described in this Policy. For active partners, we retain records throughout the duration of the partnership and for 7 years thereafter, as required by Nigerian financial regulations. Applicants who are not admitted have their data retained for 12 months after our final decision, after which it is securely deleted.

We implement appropriate technical and organisational measures to protect your data, including:

• Encryption of data in transit (TLS 1.2+) and at rest.
• Password hashing using bcrypt.
• Role-based access controls — only authorised team members can access personal data relevant to their function.
• Regular security reviews of our infrastructure and third-party providers.

No transmission over the internet is 100% secure. You are responsible for keeping your account credentials confidential.

Under the Nigeria Data Protection Act 2023, you have the right to:

• Access a copy of the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erasure of data we no longer have a lawful basis to retain (subject to legal obligations).
• Restrict or object to certain processing activities.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent where processing is based on consent, without affecting prior processing.

To exercise any of these rights, email us at partners@mizarkglobal.com. We will respond within 30 days. Note that some rights may be limited where we are required by law to retain data.

We use only essential cookies required for authentication and secure session management. We do not use cookies for advertising or third-party tracking. You can disable cookies in your browser settings, but this will prevent you from logging in to the Platform.

The Platform is intended for adults (18 years and above) only. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected such data, please contact us immediately.

We may update this Policy from time to time. We will notify active partners of material changes via email at least 14 days before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Platform after changes take effect constitutes acceptance of the updated Policy.

For any questions, concerns, or requests regarding this Privacy Policy: