Incident response

Reporting an incident

If you think your account, your data or MYRENTA's systems have been compromised, email hello@myrenta.me with the subject "Security incident" and describe what you saw. Please don't share passwords or full card details.

What we do

When an incident is reported or detected, we:

• Confirm what happened and contain it, for example by locking affected accounts or rotating keys.
• Work out which data and which people are affected.
• Fix the cause and check the fix works.
• Keep a written record of the incident and the steps taken.

Telling regulators

Where a personal data breach is likely to put people's rights and freedoms at risk, we notify the Nigeria Data Protection Commission within 72 hours of becoming aware of it, as required by the Nigeria Data Protection Act 2023.

Telling you

If a breach is likely to cause you high risk, we tell you directly and without undue delay, explaining what happened, what data was involved, what we have done and what you can do to protect yourself.

Payments

Card and bank payments are processed by our payment partner. If an incident affects payments, we work with them and, where needed, with your bank.