Buselor is committed to protecting the privacy and security of your personal data. This Data Protection
Policy explains how we collect, use, store, and protect your personal information in compliance with the
Nigeria Data Protection Act (NDPA) 2023 and other applicable laws.
Introduction
At Buselor, we take data protection seriously. This Data Protection Policy ("Policy") explains how we
collect, use, store, share, and protect your personal information when you use our platform, websites,
and services. We are committed to complying with the Nigeria
Data Protection Act (NDPA) 2023 and other applicable data protection laws. This Policy
applies to all users of the Buselor platform, including buyers, sellers, and visitors.
Data We Collect
We may collect the following types of personal data:
| Category |
Data Types |
| Identity Information |
Full name, date of birth, gender, BVN, NIN, passport photograph, government-issued ID.
|
| Contact Information |
Email address, phone number, delivery address, business address. |
| Financial Information |
Bank account details, transaction history, wallet balances, Settlement IDs. |
| Technical Information |
IP address, browser type, device identifiers, browsing history on our platform. |
| Biometric Information |
Fingerprints or facial
recognition data (if you choose to use these features for KYC/security). |
lock
Sensitive Data: Biometric and
government-issued ID data are collected solely for regulatory compliance and fraud prevention
purposes. This data is encrypted and stored with the highest level of security.
Purpose of Data Processing
We process your data solely for legitimate business purposes, including:
settings
To Provide Services
To verify your identity,
process payments and settlements, manage deliveries, and handle disputes.
gavel
Regulatory Compliance
To comply with CBN, EFCC, and
NFIU requirements (KYC, AML, CFT, transaction monitoring).
security
Security and Fraud Prevention
To protect our platform and
users from fraud, theft, and cyberattacks.
support
Customer Support
To respond to your inquiries
and resolve issues.
analytics
Improvement and Analytics
To analyze usage and improve
our services, products, and user experience.
marketing
Marketing (with Consent)
To send you promotional offers
and updates, but only with your explicit
consent, which you can withdraw at any time.
Data Sharing and Disclosure
We share your personal data only in the following circumstances:
handshake
Service Providers
With trusted third parties who
assist us in providing our services. This includes:
- VFD Microfinance Bank Limited:
For processing financial transactions.
- Kwik and Fez (Logistics): For
coordinating deliveries.
account_balance
Regulatory Authorities
With the CBN, EFCC, NFIU, or
other government bodies when legally
required.
merge
Business Transfers
In the event of a merger,
acquisition, or sale of assets, your data may be transferred to a successor entity.
info
We do not sell your data. We do
not rent, trade, or sell your personal information to third parties for marketing purposes.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was
collected, or as required by law. This includes:
- Financial Records: Transaction records
are retained for a minimum of 7 years to
comply with CBN record-keeping regulations.
- KYC Data: KYC data is retained for the
duration of your relationship with us and for a period after termination to comply with regulatory
mandates.
- Account Closure: If you close your
account, we will securely delete or anonymize your data unless we are required to retain it for
legal reasons.
Data Security Measures
We implement robust technical and organizational security measures to protect your data from
unauthorized access, alteration, disclosure, or destruction.
lock
Encryption
Encryption of data in
transit (using TLS/SSL) and at rest (using AES-256).
key
Access
Controls
Role-based access
controls ensuring only authorized personnel have access to personal data.
api
API
Security
Strict IP whitelisting
and API key management.
bug_report
Vulnerability
Assessments
Regular penetration
testing and vulnerability scanning of our systems.
emergency
Incident
Response
A documented incident
response plan to handle any data breaches quickly and effectively.
Data Breach Notification
notifications
Breach Notification Protocol
In the event of a data breach that
poses a risk to your rights and freedoms, we will:
- Notify the Nigeria Data Protection
Commission (NDPC) within 72
hours of becoming aware of the breach.
- Notify affected users without undue
delay and provide information on the nature of the breach and recommended steps to
mitigate harm.
Your Data Rights
Your rights regarding your personal data are outlined in detail in our Privacy &
Data Protection Policy and Your Data Rights Policy. You have the right to:
- Access: Request a copy of your personal
data.
- Rectification: Correct inaccuracies in
your data.
- Erasure: Request the deletion of your
data.
- Data Portability: Request a copy of your
data in a machine-readable format.
- Withdraw Consent: Withdraw your consent
to data processing at any time.
info
To exercise any of these rights, please contact our Data Protection Officer at dpo@buselor.com.
If you have any questions about this Policy or our data protection practices, please contact our Data
Protection Officer:
Data Protection Officer
Email: dpo@buselor.com
Support Hours: Monday - Friday, 8:00
AM - 6:00 PM (WAT)
Address: BUSSELORX LTD, Lagos, Federal
Republic of Nigeria