Who this covers
This policy applies to The Bee Ve Holdings Ltd ("Bee Ve") and its six divisions: Bee Ve Solutions, ARK, Bee Ve Business Service, Bee Ve Advisory, Bee Ve Intelligence and Bee Ve Academy. It covers this website and every ARK product: Accounting, HR, IDBs, Retail and E-invoicing.
Bee Ve is the data controller for data about our own clients, staff, applicants and website visitors. For data a client business keeps in ARK, such as its employees' payroll records, that business is the controller and we process the data on its instructions.
What we collect
- Website enquiries: your name, business name, email, phone number and message when you use our contact form.
- Clients: contact and identity (KYC) details, and financial records such as invoices, receipts, bank and payment data.
- Employees of ARK HR clients: staff records, payroll, leave, contracts and performance reports.
- Job applicants: CVs, biodata and cover letters.
- ARK users: names, email addresses, and the device and log data needed to keep accounts secure.
We use this data only to answer you, deliver the services you contract us for, meet our legal duties, and keep our systems secure. We do not sell personal data.
Where it is kept
ARK and our email run on established cloud providers whose servers are outside Nigeria. We chose them for security, reliability and uptime.
| Service | Provider | Location | What it holds |
|---|---|---|---|
| ARK applications | Render | Frankfurt, Germany (EU Central) | The ARK apps and the data passing through them |
| ARK database | Render | Frankfurt, Germany (EU Central) | Client books, HR records, user accounts |
| Email and calendar | Zoho Mail | Zoho's data centres | Correspondence, Monday digests, event invitations |
| Website contact form | FormSubmit, delivering to Zoho Mail | Delivered to our Zoho Mail inbox | Enquiries you send through this website |
Legal basis for the transfer
We transfer personal data outside Nigeria under Part VIII (sections 41 to 43) of the Nigeria Data Protection Act 2023 and the Nigeria Data Protection Commission's General Application and Implementation Directive, in force since 19 September 2025.
Germany is bound by the EU General Data Protection Regulation, which gives protection comparable to the Act. The Commission has not yet issued an adequacy decision for Germany, so we also rely on section 43:
- Performance of a contract. The transfer is needed to deliver the bookkeeping, HR, retail or reporting services our client has contracted us for.
- Client instructions. Where a client business is the controller, we transfer data only as its data processing agreement with us allows.
- Informed consent. Where neither applies, we ask for your consent after explaining the possible risks. You can withdraw it at any time.
If the Commission approves transfer instruments such as standard contractual clauses, or issues an adequacy decision covering our providers' locations, we will adopt them and update this policy.
How we protect it
- Encryption of data in transit between your device and ARK, and at rest on our providers' servers.
- Need-to-know access. Accountants never see client contact details or KYC documents; only reviewers and administrators do.
- Approval for deletions. Removing invoices, receipts, customers or vendors needs an administrator's sign-off.
- Leak deterrence. ARK screens carry a user watermark and administrators monitor for leaks.
- Written terms with providers. Our hosting and email providers are bound by data processing terms.
- Breach response. We will notify the Nigeria Data Protection Commission within 72 hours of becoming aware of a breach likely to put people at risk, and tell affected people without delay where the risk is high.
Your rights
Under the Act you can ask us to:
- Tell you what personal data we hold about you and give you a copy
- Correct data that is wrong or incomplete
- Delete data we no longer have a lawful reason to keep
- Restrict or stop certain uses of your data, or object to them
- Send your data to you or another provider in a usable format
- Withdraw any consent you have given
If your data is in ARK because your employer or a business you deal with uses it, contact that business first; we will help them respond.
Contact and complaints
Use the contact form on our home page and choose "Data protection request". We acknowledge every request within 24 hours.
If you are not satisfied with our answer, you can complain to the Nigeria Data Protection Commission.