We care about your privacy

1. Introduction

Belema Financial Technology (referred to as "we", "us", "our") provides this Privacy & Cookie Policy to explain how we collect, process, disclose, protect, and discard personal information. By using the Services, you accept the practices described in this policy.

2. Scope & applicability

This policy applies to:

• Users of our digital products (customers, merchants, administrators, testers) in the environment.
• Data collected via digital products, APIs, and third-party services integrated with the Services.

Where local laws apply (NDPR in Nigeria and DPDPA in India), we process personal data in line with that law as applicable. If you are in a jurisdiction with specific rights (for example the EU), those rights are described below and will be respected where applicable.

3. What information we collect

a) Information you provide directly

• Account registration details (name, phone number, email, username).
• Verification data (ID documents, KYC where required).
• Transaction details (sender, recipient, amounts, descriptions).
• Payment instrument info (tokenized payment IDs; we do not store raw card PANs — payment processors may handle raw details).
• Support requests and communications.

b) Information collected automatically

• Usage and analytics data (pages visited, features used, timestamps).
• Device and connection information (device type, OS version, browser, IP address, device identifiers).
• Essential cookies.
• Logs and telemetry (error logs, performance metrics).

c) Information from third parties

• Fraud detection services, identity verification providers, payment processors, and analytics providers may share data with us as needed to provide Services.

4. How we use personal data (purpose and legal basis)

We use personal data to:

• Provide and operate the banking Services (account creation, payments, transfers).
• Process transactions and maintain transaction history.
• Authenticate users and prevent fraud.
• Comply with legal and regulatory obligations (KYC, anti-money laundering).
• Improve product functionality, analytics, and debugging.
• Communicate with you (notifications, updates, support).
• Security monitoring and incident response.

Legal basis (where applicable):

• performance of contract
• legal compliance
• legitimate interests (fraud prevention, service improvement)
• Consent for marketing & non-essential cookies

5. Roles and Responsibility

We believe that data protection is a team effort led by the following teams:

• Data Protection Officer (DPO): Oversee the implementation and enforcement of this policy and monitor compliance with the Nigeria Data Protection Regulation (NDPR).
• Information Security Team: Support the technical implementation of data protection measures.
• All Employees: Handle data in accordance with this policy and report incidents or concerns promptly.

6. Your Rights

BelemaFintech and all related products adopt all rights provided through the NDPA in Nigeria and the DPDPA. Hence your rights include, access, rectification, objection, portability, deletion, informed, restrict, complain, erasure, lodging complaint, automation, consent removal.

To exercise rights, contact [dataprivacy@belemafintech.com]. We will respond within the timeframe required by applicable law.

7. Sharing and Disclosures

We may share personal data upon obtaining consent from the data subject with:

• Service providers (payment processors, hosting, analytics, identity verification).
• Law enforcement, regulators, or courts if required by law or to protect safety and rights.
• Affiliates and subsidiaries where necessary for service operations.

All third parties must maintain appropriate security measures and are prohibited from using data for other purposes.

8. Cookies & similar technologies (summary)

We use cookies, local storage, and similar technologies to operate the site, remember your preferences, secure the platform, and collect analytics. You can accept or decline non-essential cookies using the cookie banner and settings. Essential cookies required for site operation are always active.

9. Cookies managed by third parties / analytics

If we use third-party analytics or crash reporting (e.g., Google Analytics, Sentry) they may place their own cookies. We provide granular consent controls for those cookies. You can also opt out via browser settings or opt-out links where available.

10. Data retention

We retain personal data only as long as necessary for the purposes described and to comply with legal/regulatory obligations. Typical retention:

• Transaction records: 6 years after last transaction - fulfilling NDPR and CBN requirements.

Personal data may be retained up to 3 years after the last active use of your digital platform by the data subject.

11. Security

We implement industry standard technical and organizational measures to protect personal data (encryption in transit, access controls, secure development practices). However, no system is perfectly secure; report suspected incidents to [securityoperations@belemafintech.com].

12. Data Destruction

After data must have used its entire lifecycle or upon request from the data owner, we implement industry standard practices to destroy and dispose in accordance to the approved disposal policy.

13. Children

Our Services are not directed to children under 13 (or local age of consent). We do not knowingly collect personal info of children. If detected, we will delete it and notify the requester.

14. International transfer

If personal data is transferred outside your country (e.g., to cloud providers or processors), we ensure appropriate safeguards (standard contractual clauses, data processing agreements) are in place.

15. Changes to this policy

We may update this Policy from time to time. We'll post changes on this page with a new effective date. For material changes, we will provide notice.

16. Contact & complaints

For privacy questions or complaints contact: [dataprivacy@belemafintech.com]. If unsatisfied you may contact your local data protection authority.