Skip to content
SabiReal

Your Data Rights

How we keep data, protect it, handle complaints and inspect factories.

All legal documents

Last updated 2 November 2026 · Version 1

In brief

  • You have rights over your personal data under the Nigeria Data Protection Act 2023.
  • To use them, write to support@sabireal.com with "Data request" in the subject line.
  • We respond within 30 days, at no extra cost.
  • Company and identity verification is automatic, but we never reject anyone automatically.
  • If you are not happy with our answer, you can complain to the Nigeria Data Protection Commission.

  1. 1.Your rights

    The Nigeria Data Protection Act 2023 (NDPA) and the NDPC's General Application and Implementation Directive (GAID) 2025 give you these rights over the personal data we hold about you:

    SabiReal is a brand of Worllet Limited, a company registered in Nigeria.

    RC number: 7014396.

    Address: Port Harcourt, Nigeria.

    • Access: ask whether we hold data about you and get a copy of it.
    • Correction: ask us to fix data that is wrong or incomplete.
    • Deletion: ask us to delete data we no longer need or have no lawful reason to keep.
    • Restriction: ask us to pause using your data while a question about it is settled.
    • Objection: object to us using your data where we rely on our legitimate interests.
    • Portability: get data you gave us in a common, machine-readable format, or ask us to send it to another organisation where that is possible.
    • Withdrawing consent: where we rely on your consent, withdraw it at any time. This does not affect what we did before. For WhatsApp messages from a brand, reply STOP.
    • Automated decisions: not to be subject to a decision based only on automated processing that has legal or similarly significant effects on you.

  2. 2.How to make a request

    Write to support@sabireal.com and put "Data request" in the subject line. Tell us which right you want to use and give enough detail for us to find your records, for example the email or phone number you used with us, your company name, or a report reference.

    You can ask for someone else, such as a family member, if you send their written authority with the request.

  3. 3.How we confirm it is you

    We only act on a request once we are satisfied it comes from the person the data is about, or from someone they have authorised.

    • Business users: we answer requests sent from the email address on the account, or we ask you to confirm the request from it.
    • Consumers: we ask for details that match our records, such as the phone number or email given with a report or a warranty registration.
    • We never ask for your password, your card details or your full NIN to confirm a request.

    If we cannot confirm who you are, we tell you and explain what else we need.

  4. 4.If you only checked a product code

    You can make a request too. Please know that we may not be able to find your checks. We do not take a name or account for a check, and we store a scrambled key of your device or WhatsApp number, not the number or device itself. Unless you can give us something we can match, such as the WhatsApp number you checked from, we may have no way to tell which checks are yours.

    Where we cannot identify you in our records, we will say so, and the data cannot be linked to you by us either.

  5. 5.How long it takes and what it costs

    We respond within 30 days of receiving your request, or of confirming your identity if we need to. Where the law allows, we may extend this once, for example for a complex request, and we will tell you why within the first 30 days.

    Making a request is at no extra cost. Where a request is clearly unfounded or excessive, for example the same request repeated many times, the law may let us charge a reasonable fee or refuse it, and we will explain why.

  6. 6.When we may refuse

    We may refuse a request, in full or in part, where the law allows. For example:

    • we cannot confirm your identity;
    • the request is clearly unfounded or excessive;
    • we must keep the data by law, such as payment and tax records, or for an open dispute or investigation;
    • answering would reveal another person's personal data;
    • the data is part of our security and audit records that we must keep intact.

    If we refuse, we tell you why and how you can complain.

  7. 7.Automated decisions in manufacturer onboarding

    When a company registers, we verify it automatically. We look up its CAC record through our provider Dojah, and we match the representative's NIN and selfie. When the record is active and the details match, the company or person is verified straight away.

    We never reject a company or a person automatically. If a match is unclear, or our provider is down, the case waits for our team and a person decides. You can also ask for a person to review any outcome by writing to support@sabireal.com with "Data request" in the subject line.

  8. 8.Complaining to the regulator

    If you are not happy with how we handled your request or your data, please tell us first so we can try to put it right.

    You also have the right to complain to the Nigeria Data Protection Commission (NDPC), the data protection regulator in Nigeria, at any time. Its contact details are on its official website.