Privacy Policy

This Privacy Policy explains how Paylode Services Limited (“Paylode”, “we”, “us”, “our”) — a Payment Solution Service Provider licensed by the Central Bank of Nigeria (CBN licence No. CBN/PAY/2024/001847) — collects, uses, shares, stores and protects your personal data. We are committed to processing your data lawfully, fairly and transparently in accordance with the Nigeria Data Protection Act 2023 and the Nigeria Data Protection Regulation (NDPR) and other applicable laws.

1. Who this policy applies to

This policy applies to merchants, aggregators, their customers/payers, website visitors, and any individual whose personal data we process in the course of providing our payment gateway, virtual account, payout, invoicing and wallet services.

2. Information we collect

Information you provide

• Identity & contact data: name, email address, phone number, business name, address, and role.
• KYC/verification data: government-issued identifiers (e.g. BVN, NIN, TIN), registration documents (e.g. CAC/RC details), and related documents required to meet our regulatory “Know Your Customer” obligations.
• Financial & transaction data: settlement bank account details, transaction references, amounts, beneficiary details and payment status.
• Support data: information you share when you contact us.

Information collected automatically

• Technical & usage data: IP address, device and browser information, and log data such as pages accessed and actions taken.
• Cookies: we use strictly necessary cookies to keep you signed in and secure our platform (see Section 10).

We do not store full payment card numbers (PANs); card payments are processed through a PCI-DSS-compliant processor.

3. How we use your information

• To provide, operate and improve our payment and related services.
• To verify identity and meet KYC, Anti-Money-Laundering (AML) and other regulatory obligations.
• To process transactions, settlements and payouts, and to keep accurate records.
• To detect, prevent and investigate fraud, security incidents and prohibited activity.
• To provide customer support and send service, security and transactional communications.
• To comply with legal, regulatory and law-enforcement requirements.

4. Legal basis for processing

We process personal data on one or more of the following bases under the NDPR: (a) your consent; (b) performance of a contract with you; (c) compliance with a legal or regulatory obligation; and (d) our legitimate interests in operating a secure, fraud-resistant payment service, provided these do not override your rights.

5. How we share your information

We do not sell your personal data. We share it only as necessary with:

• Banks, payment rails and processors used to complete collections and payouts (e.g. our sponsor/partner banks and licensed processors).
• Regulators and authorities where required, including the Central Bank of Nigeria (CBN), NIBSS, the NFIU and other lawful requests.
• Service providers (sub-processors) that support our operations — such as cloud hosting and security/CDN providers — under contractual confidentiality and data-protection obligations.
• Professional advisers (e.g. auditors, legal counsel) and parties to a corporate transaction, where lawful.

6. International transfers

Some of our infrastructure providers may process or store data outside Nigeria. Where personal data is transferred internationally, we take reasonable steps to ensure an adequate level of protection consistent with the NDPR.

7. Data retention

We retain personal data for as long as necessary to provide our services and to satisfy our legal, regulatory, tax and record-keeping obligations (including CBN/AML retention requirements). When data is no longer required, it is securely deleted or anonymised.

8. How we protect your information

We apply appropriate technical and organisational measures, including encryption of data in transit (TLS) and encryption of sensitive data at rest, role-based access controls, unique user accounts, signed/verified integrations, audit logging, network firewalls and monitoring. No method of transmission or storage is completely secure, but we work continuously to protect your data.

9. Your rights

Subject to applicable law, you have the right to: access your personal data; request correction of inaccurate data; request deletion; restrict or object to certain processing; request portability; and withdraw consent at any time (without affecting prior lawful processing). To exercise these rights, contact us at [email protected]. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).

10. Cookies

We use strictly necessary cookies to authenticate sessions and protect against fraud and abuse. You can control cookies through your browser settings; disabling essential cookies may affect the functioning of our services.

11. Children

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from children.

12. Changes to this policy

We may update this policy from time to time. Material changes will be posted on this page with a revised “Last updated” date. Your continued use of our services after changes take effect constitutes acceptance of the updated policy.

13. Contact us

For any questions about this policy or how we handle your data, contact:

• Paylode Services Limited — Data Protection / Compliance
• Email: [email protected]
• Support: [email protected]