Selar Secures User Trust

Achieving NDPC Readiness in 4 Weeks with Spurt!

When Good Ideas Stop Being Enough

As Selar scaled its platform for creators across Africa, disjointed privacy practices and undocumented data flows began to introduce significant regulatory risk.

Spurt! stepped in to lead a rapid, 4-week Data Governance Program. By mapping data ecosystems, overhauling consent mechanisms, and locking down vendor security, Spurt! transformed Selar’s compliance posture from vulnerable to NDPC audit-ready, allowing the product team to focus on growth without the looming threat of regulatory fines.

100%

NDPC Readiness: Achieved in just a 4-week sprint, compiling all mandatory documentation for DCPMI registration.

Top 5

High Risk Vendor Secured: Updated contracts with binding NDPA clauses and enforced strict security checklists.

Zero Day

Consent Tracking: Transitioned from untrackable pre-ticked boxes to a fully auditable user consent log and automated Data Subject Request (DSR) system.

100%

Production Environment Secured: Enforced TLS, encryption at rest, and mandatory 2FA across all admin and privileged accounts.

THE CHALLENGE

Rapid Growth Outpacing Compliance

Before Spurt! Selar’s focus was on rapid product development and creator onboarding. However, this hyper-growth left critical gaps in how user data was managed.

Weak Data Governance and Consent Management

Teams were collecting data across various touchpoints without a centralised data map. Consent was captured via non-compliant, pre-ticked boxes, and there was no auditable log to prove lawful basis for marketing or processing. Furthermore, as Selar integrated more third-party SaaS tools, they lacked the contractual safeguards and vendor risk assessments required by the Nigeria Data Protection Act (NDPA).

Gaps in Privacy and Risk Management

The lack of a centralised governance structure, incident response plan, and formalised Data Protection Impact Assessments (DPIA) for new features meant Selar was operating with a high level of unseen regulatory and security risk.

“"We were moving fast, but our data privacy infrastructure wasn't keeping up. We needed a system that protected our creators without slowing down our product releases." ”

THE SOLUTION

Spurt!'s 4-Week Data Governance Blueprint

Spurt! deployed a structured, four-phase intervention to centralise and automate Selar’s privacy workflows

Comprehensive Data Mapping & Audits

Spurt! initiated the engagement by conducting a 4-week employee training session and working with Selar's team leads to build a comprehensive One-Page Data Map. Every data collection form on the platform was audited to assess the business impact and legal basis of the data being requested, immediately flagging and securing sensitive information.

Bulletproof Consent & User Rights

To ensure legal compliance, Spurt! overhauled the platform's UI/UX. Pre-ticked boxes were eliminated, granular opt-ins were introduced, and a centralised Consent Log was deployed so leadership could precisely track policy agreements. Additionally, Spurt! standardised the Data Subject Request (DSR) process, giving users an easy way to manage or delete their data while assigning clear internal responders.

Hardening Technical Controls & Vendor Risk

Moving beyond policy, Spurt! drove technical engineering changes. TLS in transit, encryption at rest, and mandatory 2FA for all privileged accounts were enforced. To close the third-party backdoor, Spurt! executed a rigorous audit of Selar’s top 5 vendors, executing new Cross-Border Data Transfer Policies and legally binding NDPA clauses.

Institutionalising Governance

To ensure the changes stuck, Spurt! established a Privacy Governance RACI matrix, defining exactly who was accountable for future compliance. They introduced a streamlined DPIA process, ensuring that any future product update—like a new CRM or analytics dashboard—would automatically undergo a privacy risk assessment before launch.

THE IMPACT

From Stuck to Genuinely Investable

By standardising these processes, Spurt! effectively neutralised Selar's regulatory blind spots. Engineering and product teams no longer have to guess what compliance requires, they now have clear checklists, automated logs, and a definitive Incident Response Playbook.

With a fully prepared Compliance Gap Report and NDPC-ready documentation pack, Selar transformed its data protection from a chaotic liability into a structured asset. The leadership team can now confidently scale their operations, knowing their creators' data is legally defended and technically secure.

Turn data privacy from a liability into your competitive advantage

Don't let compliance bottlenecks slow your momentum. Schedule a 15-minute gap analysis call with our experts to pinpoint your risks and streamline your path to full compliance.

Talk to an expert today

Similar Projects

See all