Buselor is committed to protecting your privacy. This policy explains how we collect, use, disclose,
and safeguard your personal information in compliance with the Nigeria Data Protection Act (NDPA) 2023.
Introduction
Buselor respects your privacy and is committed to protecting the personal information you share with us.
This Privacy & Data Protection Policy ("Policy") describes how we collect, use, disclose, and safeguard
your personal information when you use our platform, websites, and services. We comply with the Nigeria
Data Protection Act (NDPA) 2023 and other applicable data protection regulations.
Information We Collect
We collect various types of information to provide and improve our Services:
Registration
Information
Name, email address, phone
number, delivery address, and business details (for merchants).
Transaction
Information
Payment history, KYC
documents, Settlement IDs, order details, and delivery records.
Device
Information
IP address, browser type,
device identifiers, operating system, and mobile device information.
Behavioral
Information
Browsing history, search
queries, shopping preferences, and interaction patterns on our platform.
lock
Sensitive Personal Information
Biometric data (for advanced
KYC), Bank Verification Number (BVN), National Identification Number (NIN), and government-issued
IDs. This information is collected solely for regulatory compliance and fraud prevention
purposes.
How We Use Your Information
We use your personal information for the following purposes:
- Service Delivery: To provide, maintain,
and improve our Services, including processing transactions and managing settlements.
- Fraud Prevention: To detect, prevent,
and investigate fraud, security breaches, and other prohibited activities.
- Regulatory Compliance: To comply with
legal and regulatory requirements, including KYC, AML, and CFT obligations as mandated by the CBN,
EFCC, and NFIU.
- Communication: To communicate with you
about your account, orders, service updates, and promotional offers (with your consent).
- Analytics: For internal analytics,
business intelligence, and to improve our platform and user experience.
- Dispute Resolution: To investigate and
resolve disputes between buyers and sellers.
info
Legal Basis: We process your
personal information based on your consent, contractual necessity, legal obligations, and our
legitimate interests in providing a secure and functional marketplace.
Information Sharing and Disclosure
We may share your information in the following circumstances:
Service
Providers
With VFD Microfinance Bank
(our banking partner), Kwik, Fez, and other logistics partners, solely for the purpose of
delivering our Services.
Legal
Obligations
With law enforcement,
regulators (CBN, NFIU), or other government bodies when required by law or to protect our legal
rights.
Business
Transfers
In the event of a merger,
acquisition, reorganization, or asset sale, your information may be transferred to the new
entity.
With
Your Consent
We may share your information
with third parties when you have given us explicit consent to do so.
We do not sell, rent, or trade your personal
information to third parties for marketing purposes.
Data Security
We implement robust security measures to protect your personal information against unauthorized access,
alteration, disclosure, or destruction:
- Encryption: All sensitive data is
encrypted in transit using TLS 1.3 and at rest using AES-256 encryption.
- Access Controls: Strict role-based
access controls limit employee access to personal information.
- Monitoring: Continuous security
monitoring, logging, and alerting systems detect and respond to potential threats.
- Vulnerability Management: Regular
vulnerability assessments, penetration testing, and security audits.
- Incident Response: A dedicated incident
response team to manage and mitigate any security breaches.
Our security protocols meet and exceed the standards required by the NDPA and the financial services
industry.
Your Data Rights
Under the Nigeria Data Protection Act (NDPA) 2023, you have the following rights regarding your personal
information:
visibility
Right to Access
You have the right to request
a copy of your personal data that we hold.
edit
Right to Rectification
You have the right to correct
inaccuracies in your personal data.
delete
Right to Erasure
You have the right to request
the deletion of your personal data, subject to legal retention requirements.
download
Right to Data Portability
You have the right to request
a copy of your data in a machine-readable, structured format.
cancel
Right to Withdraw Consent
You have the right to
withdraw your consent to data processing at any time.
info
To exercise any of these rights, please contact our Data Protection Officer at dpo@buselor.com.
Data Retention
We will retain your personal information for as long as necessary to fulfill the purposes outlined in
this Policy, or as required by applicable law:
- Active Accounts: Information is
retained while your account is active and for a reasonable period thereafter.
- Financial Records: Transaction and
financial records must be retained for a minimum of 7 years in compliance with banking
regulations.
- KYC Records: KYC records are retained
for as long as required by regulatory obligations.
- Inactive Accounts: Data from inactive
accounts may be archived or deleted after a specified period.
We will securely delete or anonymize your personal information when it is no longer needed for the
purposes for which it was collected.
If you have any questions about this Policy, our data practices, or wish to exercise your data rights,
please contact our Data Protection Officer:
Data Protection Officer
Email: dpo@buselor.com
Address: BUSSELORX LTD, Lagos, Federal
Republic of Nigeria
We are committed to addressing your concerns and will respond to all legitimate requests within the
timeframe required by the NDPA.