HomeAbout UsBlogGovernancePrivacyTerms
Legal

Privacy Policy

Last updated: 1 January 2025 · Effective: 1 January 2025

1. Introduction

ZidaKredit Nigeria Limited ("ZidaKredit", "we", "our", or "us") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and the rights you have over it.

By using our website, mobile application, or any of our services, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of our services.

2. Information We Collect

We collect information you provide to us directly and information we receive from third parties or collect automatically.

Personal Identification Information: Full name, date of birth, government-issued ID number (BVN, NIN, passport, driver's licence), home and work address, email address, and phone number.

Financial Information: Bank account details, bank statement history, salary information, employment details, and existing loan obligations. This information is used solely for credit assessment purposes.

Device and Usage Data: IP address, browser type, operating system, pages visited, time spent on our platform, and referring URLs. This data helps us improve our services and detect fraud.

Communications: Records of correspondence with our customer support team, including emails, chat logs, and call recordings where applicable.

3. How We Use Your Information

We use your personal information for the following purposes:

Loan Processing: To assess your creditworthiness, make loan decisions, and disburse funds.

Identity Verification: To confirm your identity and prevent fraud, money laundering, and other financial crimes in compliance with CBN AML/KYC regulations.

Service Delivery: To manage your account, send you statements, communicate important updates, and provide customer support.

Marketing (with consent): To send you information about our products, promotions, and financial tips. You may opt out of marketing communications at any time.

Regulatory Compliance: To meet our obligations under Nigerian law, including the CBN Act, NDPR, and any applicable financial services regulations.

Analytics and Improvement: To understand how our platform is used and continuously improve the user experience.

4. Legal Basis for Processing

Under the Nigeria Data Protection Regulation (NDPR) and applicable law, we process your personal data on the following legal bases:

- Contractual necessity — processing is required to fulfil the loan agreement between you and ZidaKredit. - Legal obligation — processing is required to comply with applicable laws and regulations. - Legitimate interests — processing is necessary for fraud prevention, security, and improving our services. - Consent — where required, we obtain your explicit consent before processing certain types of data, particularly for marketing purposes.

5. Sharing Your Information

We do not sell your personal data. We may share your information only in the following circumstances:

Credit Bureaux: We submit loan performance data to licensed credit bureaux in Nigeria (e.g. CRC, FirstCentral) in accordance with CBN guidelines.

Service Providers: We engage trusted third-party vendors for payment processing, identity verification, cloud hosting, and analytics. These providers are bound by data processing agreements and are prohibited from using your data for any other purpose.

Regulatory Authorities: We may disclose information to the CBN, EFCC, or other government agencies where required by law or in response to a valid legal order.

Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity, who will be bound by the terms of this policy.

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

Loan records and related financial data are retained for a minimum of 7 years in compliance with the Company and Allied Matters Act (CAMA) and CBN guidelines.

If you request deletion of your account and all associated data, we will process your request within 30 days, except where retention is required by law.

7. Security

We implement industry-standard security measures to protect your data, including:

- End-to-end encryption of sensitive data in transit and at rest - Access controls limiting data access to authorised personnel only - Regular security audits and penetration testing - Multi-factor authentication for all internal systems

While we take every reasonable precaution, no system is completely impenetrable. In the unlikely event of a data breach that affects your rights and freedoms, we will notify you in accordance with NDPR requirements within 72 hours.

8. Your Rights

Under the Nigeria Data Protection Regulation (NDPR), you have the following rights:

Right of Access: You may request a copy of the personal data we hold about you at any time.

Right to Rectification: If any of your information is inaccurate or incomplete, you have the right to request correction.

Right to Erasure: In certain circumstances, you may request that we delete your personal data. This right is subject to our legal retention obligations.

Right to Object: You may object to the processing of your data for marketing purposes at any time.

Right to Data Portability: You may request that we provide your data in a structured, machine-readable format.

To exercise any of these rights, contact us at: privacy@zidakreditng.com

9. Cookies

Our website uses cookies to enhance your browsing experience. Cookies are small text files stored on your device that help us remember your preferences and understand how you use our platform.

We use session cookies (which expire when you close your browser) and persistent cookies (which remain on your device until deleted).

You may disable cookies through your browser settings, though this may affect the functionality of some features on our platform.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Where changes are significant, we will notify you by email or via a prominent notice on our website.

The most current version of this policy will always be available on our website. Your continued use of our services after any update constitutes acceptance of the revised policy.

11. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact our Data Protection Officer:

Email: info@zidakreditng.com Phone: +234 913 103 8965 Address: ZidaKredit Nigeria Limited, 13B Adedoyin Ogungbe Street, Lekki Phase 1, Lagos State.

You also have the right to lodge a complaint with the National Information Technology Development Agency (NITDA), which is the supervisory authority for data protection in Nigeria.