Privacy Policy
Learn more about Veedez's collection of data and usage policies, as well as your rights as a Veedez user.
Last updated on the 30th September 2024.
General
Privacy Notice for Veedez users and Website Visitors
"Veedez” is operated by Shago Payments Limited, together with Kopo-Kope Microfinance BankLimited and Veedez Limited (hereinafter referred to as “Veedez”, “we”, “us” or “our”, including its successors, affiliates and assignees). This Privacy Policy (Policy) describes how and whenVeedez may collect, use, secure and share information collected in connection with our mobileapplication, websites, contents, products and any related services (collectively referred to as“the Services”), and your choices regarding that information.
This Policy applies when you access our Services via our website, www.veedez.com or our mobile application (the "Platforms").
Please read this policy carefully, as we may update it from time to time by posting a new version on the Platforms with an updated date. If we make material changes, we will notify you using the email address associated with your account or by posting a notice on thePlatforms. Your continued use of our services after the effective date will be anacknowledgement of an updated Policy. Please read this Policy carefully to ensure informed consent.
By accessing and using our Platforms and Services, you agree to the processing of your personal information in accordance with this Privacy Policy.
1. COLLECTION OF PERSONAL DATA
We may collect various types of data, including data you provide or make available to us directly, information collected from your devices (including web and mobile). Some of this data may be considered “personal information” or “personal data'' under the applicable privacy or data protection laws. We will also collect personal information categorized as ‘sensitive’ under the data protection laws. The categories of personal information we collect will typically depend on whether you are registering on our website as a merchant, service provider, pos agent or VAS vendor. As we deal primarily with businesses, the type of personal informationwe collect will generally also include business data (such as the name, size and location of the business you work for and your role within the business), contact information (such as your name and physical address, email addresses, and telephone numbers, bank name, bank account name and any other relevant information
When we Collect Information
You may provide information directly to us when you:
- Visit the Platforms.
- Use or access the Services, including when you create an account.
- Visit our offices or attend any of our physical events; we may also collect your personal information for identification, events management, security, and promotional purposes.
- Communicate with us or contact us for customer or technical support. When you contact us via other means than the in-app chat, we collect the following information so we can answer your questions or take action:
- a) Phone Number you’re calling from and information you give us during the call.
- b) Email Address you use and the contents of your email (and any attachments).
- c) Public details from your social media profile (like Instagram or Twitter), if you reach out to us via these platforms and the contents of your messages or posts to us.
- Participate in Veedez offers, contests, or special events;
- Subscribe to newsletters or sign up to hear about current or upcoming products; and/or
- Complete surveys offered by us or on our behalf.
Types of Information We Collect
We may collect, receive, use and store different types of information about you, including the following:
- Identifying Information: data that identifies you such as your full name, maiden name, username, title, marital status, date of birth, gender, and national identification number.
- Financial Information: such as your bank account details, bank verification number.
- Contact Information: such as your phone number, email address, billing address, and residential address.
- Device Information: such as your IP address, device identifiers, hardware model, operating system, mobile network information, and other information on the devices you used to access the Platforms.
- Account Information: such as your username, password, image, transaction history, transaction details, point of service terminal information, account preferences, feedback, survey responses, account and service usage, log information on your activity accessing the Platforms and our services.
- Location Information: such as your current location disclosed by GPS technology or other location technology.
- Business Information: business users may provide business-related information such as data concerning their customers and personnel, and business address.
Sensitive Personal Information
Sensitive Personal Information is defined as personal information about a data subject’s race, ethnic origin, genetic or biometric data, religious/philosophical/political opinions, health status, sex life, trade union membership, and other information prescribed by the Nigeria Data Protection Commission.
We collect the following sensitive personal information further to the know-your-customer/client checks required under applicable financial services regulations in Nigeria: (i) Biometric data, such as facial recognition and (ii) information about whether you are a politically exposed person.
Information Collected Using Cookies and Similar Technologies
We and our partners may use cookies, beacons, software development kits, mobile analytics software, and/or similar technologies for several purposes, including to authenticate users, prevent fraud, preferences and settings, analyze advertising and messaging campaigns, analyze traffic and trends, personalize content (including ads), and otherwise provide the Services. These technologies may collect information about your use of our Services, mobile network, IP address, operating system, Device ID, phone contacts so you can make airtime purchases or pay contacts on Veedez, pages you view, links you tap, and other actions taken in connection with our Services.
Depending on the choices and settings available on the browser(s) you use, you may be able to disable cookies in your browser settings, but this could affect the availability and functionality of our Services.
Google Analytics
On our Platforms, we also may utilize Google Analytics, a web analysis provided by Google, to better understand your use of the Website and Services. Google Analytics collects information such as how often users visit the Websites, what pages they visit, and what other sites they used prior to visiting. Google uses the data collected to track and examine the use of the Websites, to prepare reports on its activities, and share them with other Google services. Google may use the data collected on the Platforms to contextualize and personalize the ads of its own advertising network. Google’s ability to use and share information collected by Google Analytics about your visits to the Platforms is restricted by the Google Analytics Terms of Use and the Google Privacy Policy.
Google offers an opt-out mechanism for the web available here.
2. WHY AND HOW WE MAY USE YOUR PERSONAL INFORMATION
We collect and use your personal information for a number of business and commercial purposes, including to:
- Fulfil your requests for the Services on the Platforms;
- Understand your needs, and communicate with you regarding all upgrades or changes to our products and services, and improving the products and services on our Platform;
- Respond to legitimate claims or address any reasonable belief that you have violated the rights of any third party or any of the terms or policies that govern your use of the Platform, Veedez App, or any of the Veedez products and services;
- Understand how you interact with our Service and personalize the product experience and content (including advertising and messaging campaigns);
- Administer contests, surveys, notify contest winners, and award prizes;
- Investigate or address claims or disputes relating to your use of the Services;
- Maintain the safety, security, and integrity of our Services, for example, authenticating users and providing account security and fraud detection;
- Perform internal operations necessary to develop, provide, maintain, and improve our Services, including troubleshooting, providing customer and technical support, and conducting data analysis, testing, and research;
- Continually review and analyze financial transactions for the purposes of fraud and transaction monitoring to identify suspicious behaviors, patterns, or anomalies that may indicate fraudulent activity or other illicit intentions;
- Comply with all applicable laws, regulations, and government requests, including Customer Due Diligence, Anti-Money Laundering, and Anti-Terrorism Financing requirements, Know Your Customer principles, and other relevant legal/regulatory requirements.
Personal information will at all times only be used for the purposes identified above. Please note that personal information may be used for secondary purposes; however, this secondary purpose shall be compatible with the initial purpose disclosed on collection or we shall disclose the further processing to you and obtain your consent to the extent required by applicable law.
3. LEGAL BASIS FOR PROCESSING PERSONAL INFORMATION
We understand that the Data Protection Act 2023 provides that we need to have a lawful basis for processing your personal information. At least one of the following will apply to our processing of your personal information: contractual obligation, legal obligation, legitimate interest, public interest, vital individual interest, or consent.
The Lawful basis we rely on for processing your personal information are:
Your Consent:
The primary basis for processing your Personal Data is consent. When you visit our website, you will see a clear and unambiguous display of this Privacy Policy with a link to access and review the same. Before you can use our Platforms, you will have to check a tick box to signify your consent to the collection and use of your Personal Data in accordance with this Privacy Policy. Note that once you provide consent, you may change your mind and withdraw the consent at any time by contacting us at dpo@shagopayments.com. However, please note that consent withdrawal will not affect the lawfulness of any processing carried out before you withdraw your consent.
In addition, we typically will require your consent to market and communicate our products and services. However, you can always unsubscribe from receiving our marketing content. Also, we would require you to consent to us viewing your contact list to enable you to make bill purchases (e.g. airtime, electricity) or carry out P2P transactions within the Platform.
Contractual Obligation:
We collect certain information from you to fulfill the contract we have with you, or to enter into a contract with you. We use this data to:
- Give you the services we agreed to in line with our terms and conditions.
- Send you messages about your account and other services you use if you get in touch, or we need to tell you about something.
- Exercise our rights under the contracts we’ve entered into with you and resolve complaints and other issues.
Further to the contract, we may provide your Personal Data to affiliated third parties or independent/non-affiliated third parties, whether local or foreign, as necessary for the proper execution of processes related to the provision of the Services; and where the use or disclosure...
Legal Obligation:
It’s our legal duty to ensure that we are fully compliant with all applicable Financial Legislations such as Anti-Money Laundering and Counter Terrorist Financing Laws; we must collect and store your personal information. Also, to protect against fraud, we check your identity with your personal information and continually review transactions.
In addition, we may process your Personal Data where it is necessary to respond to a lawful request from a law enforcement or regulatory authority, body or agency; in the defense of legal claims or in order to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, or violations of any of our website’s terms.
Vital Interests:
We may process your Personal Data where it is necessary to protect an interest which is essential for your life, health, and bodily safety. For clarity's sake, please note that this basis is limited in scope and will come into play in matters of life and death, for instance, where we have not obtained your consent (because you are physically or legally incapable of giving it) or have any other appropriate legal basis for processing your personal data, and we have to manage a situation of emergency medical care involving you. We will not rely on this basis where you expressly refuse consent (unless you are not competent to do so).
Public Interest:
We may process your information where it is necessary for the performance of a task carried out in the public interest or in order to fulfil a public mandate imposed on us.
4. DATA SECURITY
The Security of your personal data is important to Veedez. We are committed to protecting the information we collect. We maintain administrative, technical and physical controls designed to protect the personal data we hold against loss or theft, as well as against any unauthorized access, risk of loss, disclosure, copying, misuse or modification.
Our security measures include but are not limited to, secure servers, firewall, data encryption and granting access only to employees in order to fulfil their job responsibilities.
Our Website uses Secure Sockets Layer/Transport Layer Security (SSL/TLS) to ensure secure transmission of your personal data. You should see the padlock symbol in your URL address bar once you access our Website. The URL address also starts with https:// depicting a secure webpage.
Where you use a password for any of your accounts, please ensure you do not share this with anyone, and the password is always kept confidential.
We are committed to conducting our business in accordance with these principles in order to ensure that the confidentiality of your personal data is protected and maintained. Transmitting information is not entirely secure. We would take all reasonable steps to ensure that your personal data is secured and well protected.
Veedez has put in place procedures to deal with suspected personal data breaches. We will also notify you and the relevant regulator of a breach, where we are required to do so.
If you believe that your privacy has been breached or compromised, please contact us via email: dpo@shagopayments.com.
5. DISCLOSURE AND RETENTION
Disclosures
We may share information in specific situations and with specific third parties to help provide you with the Services you require. Veedez will not disclose any of your personal information to any third party, except:
a. To its employees, independent contractors, subsidiaries, affiliates, consultants, business associates, service providers, suppliers, and agents, acting on its behalf for the performance of the Services further to any of the identified purposes;
b. To third-party financial services providers, including for the provision of banking services, for the facilitation/provision of credit products to you, to assess your eligibility for credit products, for the administration and performance of credit products. You may also provide information directly to these financial services partners on its site or platform. When this is done, they are the data controller(s) of such data, and Veedez disclaims any liability arising from the use or misuse of the data you provide directly to third parties. You should review the terms and conditions of such third parties (including privacy policy) before providing any information to them directly;
c. To third parties who may be interested in offering you financial products and services, to process repayments of loans under the credit products and other related purposes and you have agreed we may share your personal information with;
d. To fraud prevention service providers that use the information to provide services to us;
e. In relation to Veedez Point of Sale (POS) Agents, to insurance companies, insurance brokers, insurance intermediaries, and insurance underwriters for the purposes of providing and administering insurance policies with respect to the POS terminals and operations;
f. It has reason to believe that disclosure is necessary to identify, contact or bring legal action against someone who may be causing injury to or interference (either intentionally or unintentionally) with Veedez’s rights or property, other users of the Site, products or services, or anyone else that could be harmed by such activities;
g. It has your consent to disclose the information to any third party;
h. In the event of business transfers which may occur when we sell or buy businesses or assets. In the event of a corporate sale, merger, reorganization, dissolution, or similar event, personal data may be part of the transferred assets;
i. To respond to judicial processes and provide information to law enforcement agencies or in connection with an investigation on matters related to public safety, as permitted by law, or otherwise as required by law;
j. To target advertisements, newsletters, and service updates;
k. To use data analytics to improve our Platforms, products or services, and user experiences; and
l. As may be required by applicable laws and regulations, including for compliance with Know Your Customers and risk assessment, Anti-Money Laundering, anti-corruption, and sanctions screening requirements.
When we share your Personal Data with third parties, we require those third parties to enter into a contract with appropriate data protection clauses or third-party data processing contracts with us that requires them to use the Personal Data we transfer to them in a manner that is consistent with this Privacy Policy and applicable laws.
Storage and Retention
We store your personal data in both local and remote facilities, such as data centers (on-premises and cloud), workstations of our employees, and physical document storage facilities. We will only retain personal data for as long as is reasonably necessary, insofar as we are providing Services to you, to support a business need, or as otherwise required by law. Where you close your account, your information will be archived or securely disposed of. We will only retain your data to the extent necessary to comply with regulatory obligations, if required in the event of a complaint or a possible claim. Where we retain your personal data, we do so in compliance with limitation periods under the applicable law.
6. MARKETING
We may process your Personal Information in order to contact you or send you marketing content and communication about our products, services, or surveys. You may exercise your right to object to such contact from us or opt out from the marketing content. Please note, however, that if you opt out of marketing content, we may still send you messages relating to transactions and our Services related to our ongoing business relationship.
We may ask you for permission to send notifications to you. Our Services will still work if you do not grant us consent to send you notifications.
7. ACCURACY OF PERSONAL INFORMATION
We will use commercially reasonable efforts to maintain the accuracy of your personal information. You may also update us of any changes to your personal information from time to time by contacting us. Data subjects are primarily responsible for ensuring that all personal data submitted are accurate, complete, and up-to-date. From time to time, we may request updated data; it is important that data subjects cooperate and provide the same.
We may verify personal information provided by you with the help of trusted third parties. We may also request you to provide copies of documents related to your personal information for the purpose of verifying your personal information.
It is important that the personal data Veedez holds about you is accurate and current. Please keep us informed of any changes to your personal data during the course of your relationship with us.
8. YOUR DATA PROTECTION RIGHTS AND CHOICES
Data Subject Rights
a) Data subjects have the following rights in relation to your Personal Information:
- Right to be informed
- Right to request access or copies to your personal information by signing into your Account or contacting us.
- Right to request deletion of your personal information. You have the right to ask us to delete your personal information. Please note that this is a limited right which applies where the data is no longer required, or the processing has no legal justification. The exceptions to this right are where the applicable law requires Veedez to retain a historical archive or where we retain a core set of your personal data to ensure we do not inadvertently contact you in future where you object to your data being used for marketing purposes.
- Right to correct or rectify any personal information that you provide which may be incorrect, out of date, or inaccurate. You also have the right to ask us to complete information you think is incomplete.
- Right to object to the processing of your personal information for marketing purposes. You have a right to ask us not to contact you for marketing purposes by adjusting your notification preference on the settings page or by opting out via the unsubscribe link in marketing emails we send you. Please note that where you object to us processing your personal information, we might be unable to provide the Services to you.
b) In addition to the rights described above, if we have collected and processed your personal data with your consent, you may withdraw that consent in the manner described when you provided consent – this will not affect the lawfulness of processing carried out prior to your withdrawal.
c) You also have a choice to deactivate your Account at any time, subject to the Service terms and conditions. You may contact us should you wish to deactivate your Account at any time via the Contact Us segment below or send us an email at dpo@shagopayments.com.
d) If you wish to exercise any of the rights set above, please contact us by emailing dpo@shagopayments.com. Where we are unsure of your identity, we might ask you for proof of your identity for security reasons before dealing with your request. Please note that in some cases we may not be able to comply with your request for reasons such as our own obligations to comply with other legal or regulatory requirements. We will always respond to any request you make and if we can’t comply with your request, we will inform you of the reasons why.
e) Veedez shall work to resolve any complaints in relation to any of the above rights within 72 hours of knowledge of the breach of the right. In any case, you are always entitled to lodge a complaint with the competent supervisory authority if you believe that Veedez’s processing of your Personal Data is in violation of any applicable law.
9. MINOR
We do not knowingly collect or process personal data from anyone under the age of 18, nor do we knowingly allow such individuals to use our Services. If you believe we might have any personal information from or about a child under this age. Please contact us using the details provided on the last page. If we learn that we have inadvertently gathered such information,we will delete it.
10. TRANSFERS ACROSS BORDERS
Sometimes we will process your personal information in other countries, either to carry out your instructions or for ordinary business purposes (such as off-shore data storage in cloud servers).We will ensure that the relevant countries have the same level of protection for personal data or the relevant third-party recipients sign contracts that provide a comprehensive data protection framework that ensures continuity of protection of your personal data. If necessary, we will ask the party to whom we transfer your personal information to agree to our privacy principles,associated policies and practices.
11. UPDATES TO OUR PRIVACY POLICY
This Policy will be reviewed, when necessary, but at least annually. If we make any changes,we’ll add a note to this page and if they’re significant changes, we’ll let you know by email.
12. CONTACT US
If you have questions or concerns about this Policy or how we process your personal data, you can contact our Data Protection Officer by:
- Sending a message via the app
- Emailing us at dpo@shagopayments.com
- Writing to us at No. 6, Olakunle Selesi Crescent, Ajao Estate, Lagos State, Nigeria
