FINTACLOUD PRIVACY POLICY
This Policy explains how the FINTACLOUD platform operator, processes personal data.
1Who We Are
FINTACLOUD operates marketplace technology and transaction-management services. Privacy enquiries: privacy@fintacloud.com.
2Scope
This Policy covers the website, accounts, marketplace, merchant workspaces, order records and support tools.
3Legal Framework
We process data under the Nigeria Data Protection Act 2023 and other applicable requirements.
4Account Data
We may collect name, email, telephone number, account type, credentials, preferences and identifiers.
5Business Data
We may collect business names, registration details, addresses, representatives, beneficial-owner information and profile details.
6Identity Verification Data
Where required, we or an authorized provider may process date of birth, government identifiers, NIN, BVN, vNIN, identity images or verification results.
7Data Minimization
We seek to collect only necessary data and, where supported, retain verification results, references, masked values or tokens instead of unnecessary raw identifiers.
8Payment Data
Payment providers process checkout credentials. We may receive references, amounts, status, timestamps and limited payment-method details. We do not intentionally store card security codes.
9Marketplace and Order Data
We may process listings, buyer and seller identifiers, order details, delivery terms, payment and fulfillment status, messages and support outcomes.
10Delivery Data
We may process delivery addresses, recipient details, courier information, tracking, status and proof of delivery.
11Support and Evidence Data
We may process messages, photographs, videos, receipts and evidence submitted for support. Avoid unrelated sensitive information.
12Device and Technical Data
We may collect IP address, device and browser information, sessions, login events, security events, error logs and performance data.
13Cookies
We use essential cookies for authentication, security, preferences and operation. Optional cookies require any consent applicable by law.
14Service Delivery
We use data to operate accounts, listings, order records, provider-confirmed payment status, fulfillment and support.
15Security Purposes
We use data to authenticate users, prevent takeover, investigate abuse, verify provider events and protect infrastructure.
16Compliance Purposes
We use data to meet legal duties, prevent fraud and satisfy applicable provider requirements.
17Improvement
We may use aggregated, de-identified or appropriately protected information to improve reliability and usability.
18Lawful Bases
Processing may rely on contract, legal obligation, legitimate interests or consent, depending on the activity.
19Payment Providers
We share necessary information with the selected provider for checkout, verification, allocation, reconciliation, refunds, reversals, chargebacks, fraud prevention and compliance.
20Identity Providers
Data may be shared with authorized identity or business-verification providers where required.
21Logistics Providers
Necessary recipient and order information may be shared with a selected delivery service.
22Technology Providers
Hosting, storage, communications, analytics and security vendors may process data under appropriate obligations.
23Legal Disclosures
We may disclose information to advisers, regulators, courts or law enforcement where lawfully required.
24No Sale of Personal Data
We do not sell identity, payment, order or support data to advertisers or data brokers.
25International Transfers
For processing outside Nigeria, we seek safeguards required by applicable law.
26Retention
We retain data only as reasonably necessary for service, accounting, security, fraud prevention, provider requirements, disputes and law.
27Security Measures
Controls may include encryption in transit, access controls, authentication, password hashing, event verification, logging, rate limiting and backups. No service can guarantee absolute security.
28Incident Response
We assess and contain suspected incidents and notify affected people or regulators where required.
29Your Rights
Subject to law, you may request access, correction, deletion, restriction, objection, portability or withdrawal of consent and may complain to the NDPC.
30Exercising Rights
Contact privacy@fintacloud.com. We may verify identity and retain data where legally required.
31Children
The Platform is not directed to children unable to lawfully enter the relevant transaction.
32Third Party Links
External services and merchants have their own privacy practices.
33Automated Indicators
We may use automated indicators for fraud or security risk, subject to applicable rights.
34Policy Changes
Updates will be published with a revised date.
35Contact and Complaints
Privacy: privacy@fintacloud.com. Support: support@fintacloud.com. You may complain to the Nigeria Data Protection Commission.