PRIVACY POLICY
Effective Date: 12 August 2025
This Privacy Policy explains how CapitalFlex (“we”, “our”, “us”) collects, uses, discloses, and protects your personal data when you use our website, mobile applications, and related services (collectively, the “Services”). We are committed to protecting your privacy in compliance with the Nigeria Data Protection Regulation (NDPR), other applicable laws, and global privacy standards.
Table of Contents
1. Scope
This Privacy Policy applies to all users of our Services and covers personal data collected online and offline. It does not apply to third-party websites or services linked to from our platform.
2. Information We Collect
- Personal Identification Data: Name, email address, phone number, residential address, BVN/NIN, and government-issued ID.
- Financial Information: Bank account details, card numbers (processed securely), and transaction history.
- Technical Data: IP address, browser type, device information, operating system, and usage logs.
- Service Interaction Data: Customer service requests, feedback, and recorded calls (where applicable).
3. How We Use Your Information
- Provide, operate, and maintain the Services.
- Verify your identity (KYC) and comply with regulatory obligations.
- Process transactions, payments, and settlements.
- Improve, personalize, and expand our Services.
- Send service updates, security alerts, and legally required notices.
- Detect, prevent, and address fraud, unauthorized activities, and legal violations.
4. Legal Basis for Processing
We process personal data under the following legal bases:
- Your consent (e.g., for marketing communications).
- Performance of a contract (e.g., providing requested services).
- Compliance with legal obligations (e.g., AML/CFT laws).
- Legitimate interests (e.g., service improvement, fraud prevention).
5. Data Sharing & Disclosure
We may share your data with:
- Service providers (e.g., payment processors, KYC verification partners).
- Regulators, law enforcement, and other authorities where legally required.
- Business partners for joint services, with your consent where required.
- Third parties in connection with a merger, acquisition, or asset sale.
6. Data Security
We use administrative, technical, and physical safeguards (including encryption, firewalls, and access controls) to protect personal data. However, no system is completely secure, and we cannot guarantee absolute protection.
7. Data Retention
We retain personal data only as long as necessary for the purposes set out in this Policy or as required by law, typically up to 7 years for financial and regulatory records.
8. Your Rights Under NDPR
- Right to access and request a copy of your data.
- Right to request correction of inaccurate or incomplete data.
- Right to request deletion (“right to be forgotten”) where applicable.
- Right to withdraw consent at any time.
- Right to object to processing based on legitimate interests.
- Right to data portability.
- Right to lodge a complaint with the Nigeria Data Protection Bureau (NDPB).
9. Cookies & Tracking
We use cookies, web beacons, and similar tracking technologies to enhance user experience, analyze usage, and deliver relevant content. You may disable cookies in your browser, but some features may not function properly.
10. International Data Transfers
Where personal data is transferred outside Nigeria, we ensure appropriate safeguards in compliance with NDPR and applicable international laws.
11. Children’s Privacy
Our Services are not intended for individuals under 18. We do not knowingly collect data from children. If we become aware of such collection, we will delete it promptly.
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. Changes will be posted with an updated “Effective Date.” Continued use of the Services after changes means you accept the updated Policy.
13. Contact Us
If you have questions, requests, or complaints regarding this Privacy Policy, contact us at:
Email: support@capitalflex.ng
Phone: 0808-CALL-NOW
Office: Abuja, Nigeria