Privacy notice

For the HR and payroll website and mobile apps, powered by Rosta. Last updated 22 October 2026.

Who is responsible for your data

Your employer (your employer) gave you access and decides what personal data is kept about you and why. Under the Nigeria Data Protection Act 2023 your employer is the data controller. Rosta is run by BlazonShots Ltd, which processes the data on your employer's behalf as a data processor, only to provide the service.

What is collected

• Identity and contact: name, work email, phone, address, state of residence, date of birth, gender, marital status, nationality, next of kin and emergency contact.
• Employment: employee number, job title, department, branch, line manager, dates you started or left, employment type, and documents your employer or you upload (contracts, letters, certificates, proof for tax reliefs, medical certificates for leave).
• Pay and tax: salary and pay structure, payslips, PAYE tax workings and reliefs, pension details (administrator and RSA PIN), NHF number, TIN, your salary bank account, loans and salary advances, expense claims and receipts, and benefits such as health insurance and group life cover, including dependants you add.
• Identity numbers: BVN and NIN where your employer asks for them. They are encrypted, and only the last four digits are ever shown.
• Time and attendance: the times you clock in and out, leave requests and balances, timesheets and corrections. If your employer checks location, the app reads your location only at the moment you tap clock in or clock out, never in the background. If your employer asks for one, a photo taken with the front camera when you clock in.
• Account and security: your sign-in email, two-factor settings and sign-in records. Your password is held by our sign-in provider as a one-way hash; nobody can read it.
• Your phone (mobile app): a random identifier the app creates, the app version, the type and name of the phone, a push notification token, and a public key the app uses to prove clock-ins came from your phone. The app does not collect advertising identifiers, your contacts, or any photos other than those you take or choose in it.
• Activity records: a log of changes made in the system (who changed what, and when), kept for security and audit.

Why it is used

• To pay you and produce payslips (your employment contract).
• To work out and pay PAYE tax, pension, NHF, NSITF and ITF to the authorities, as Nigerian tax, pension and labour laws require (legal obligation).
• To run leave, attendance, loans, expense claims, benefits and requests, and to send you notifications about them (your contract and your employer's legitimate interests).
• Location and photos at clock-in, only where your employer turns them on: to confirm you clocked in at work (your employer's legitimate interests). Your employer should tell you before using them.
• To keep the service secure and prevent fraud (legitimate interests).

Your data is never sold, and it is not used for advertising.

Who it is shared with

• People at your employer who need it for their role: HR, payroll and finance staff, and your line manager for things they approve.
• Service providers that host and deliver the service, under contract: Supabase (database, file storage and sign-in), Vercel (website hosting), Expo with Google Firebase Cloud Messaging and Apple Push Notification service (to deliver push notifications: the title and a short line of text), and the email service used for notification emails.
• Payment providers your employer connects to pay salaries (for example Paystack or Flutterwave): your name, bank details and the amount.
• Tax authorities, pension fund administrators and other bodies, through the remittances your employer makes.

Some of these providers store or process data outside Nigeria. Such transfers are made under the Nigeria Data Protection Act with contractual safeguards.

How long it is kept

• Employment, pay, tax and pension records: by your employer for as long as Nigerian tax, pension and labour laws require, including after you leave.
• Clock-in photos: deleted automatically after the period your employer sets (90 days unless they change it).
• Your sign-in: until you or your employer close your account. Push notification records are deleted after a week.

How it is protected

All traffic is encrypted (HTTPS). BVN, NIN and bank account numbers are encrypted in the database. Each organisation's data is kept apart by row-level security in the database. Two-factor sign-in is available, and the app can be locked with your fingerprint or face. Clock-ins from the app are signed with a key that stays in your phone's secure storage.

Your rights

Under the Nigeria Data Protection Act 2023 you can ask to see your data, have it corrected, have it deleted (except records the law requires your employer to keep), restrict or object to some uses, receive a copy in a portable format, and withdraw consent where consent is the basis. You can also complain to the Nigeria Data Protection Commission.

Ask your employer's HR team first, because they control your data. You can also contact BlazonShots Ltd at info@blazonshotsltd.com. Many details can be corrected yourself from Self-service or the app's Me tab; HR approves the change.

Deleting your account

In the mobile app, go to Me → Security → Delete my account, or ask your HR team. See how account deletion works.

Changes

This notice may be updated as the service changes. The date at the top shows the latest version.