Effective Date: September 4, 2026
Company: UFriends Information Technology
Website: https://ufriends.com.ng
At UFriends Information Technology, we are committed to protecting the privacy and security of our customers, agents, and partners. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in compliance with the Nigeria Data Protection Regulation (NDPR), the Nigeria Data Protection Act 2023, and all applicable laws.
1. Information We Collect
We may collect:
- Identity Data: Name, date of birth, gender, NIN, BVN.
- Corporate Data: CAC certificate, business name, RC/BN number.
- Facial Data: Photos for onboarding and verification.
- Contact Data: Phone number, email, address.
- Usage Data: Transaction logs, dashboard activities.
- Consent Records: User agreements and approvals.
2. Purpose of Data Collection
Your data is collected and processed for:
- Customer onboarding and identity verification
- BVN/NIN enrollment and modification
- POS and agent banking enrollment
- Corporate verification and CAC registration
- Fraud prevention and compliance reporting
- Service improvement and support
3. Lawful Basis for Processing
We process your personal data only:
- With your explicit consent
- To comply with legal and regulatory obligations
- To protect our business interests and prevent fraud
- To deliver services you request
4. Restrictions and Prohibited Use
- Verifying an individual without their consent is strictly prohibited.
- Attempting to verify politically exposed persons (PEPs) without lawful grounds will be reported.
- UFriends services must only be used for lawful, authorized purposes.
5. Data Security
We implement strong safeguards (encryption, access controls, monitoring) to prevent unauthorized access, alteration, or disclosure of personal data.
6. Data Retention
We retain your personal information only as long as necessary for the stated purposes or as required by law.
7. Disclosure of Information
We do not sell or rent your personal data. Information may be disclosed:
- To regulators or law enforcement as required
- To trusted partners under confidentiality agreements
- In case of legal disputes or fraud investigation
8. International Transfers
If data is transferred outside Nigeria, we ensure safeguards aligned with GDPR and global best practices.
9. Data Breach Protocol
In the unlikely event of a breach, affected users will be notified within 72 hours with corrective actions.
10. Children's Privacy
Our services are not directed to individuals under 18. We do not knowingly collect data from children.
11. Your Rights
Under NDPR & NDP Act, you have the right to:
- Access your personal data
- Correct or update inaccurate data
- Withdraw consent at any time
- Request deletion of data
- Report misuse to the Nigeria Data Protection Bureau (NDPB)
12. End-Product Disclaimer
Verification slips or digital records generated from UFriends are not original government-issued documents and must not be used as such.
13. Updates to this Policy
We may update this Privacy Policy from time to time. Any changes will be communicated on our website.