Document Effective: September 2025

Last Updated : July 2025

Introduction

This privacy policy outlines how we collect, use, disclose, handle and protect your personal information which you have willfully shared with us when using our website and make use of our services in accordance with the Nigeria Data Protection Data Act (NDPA) 2023 and other relevant regulations. In collecting this information, we act as a data controller and, by law, we are required to provide you with information about us, about why and how we use your data, and about the rights you have over your data.

Who are we?

We are Qorepay Technology Limited a financial services company whose registered office is located at Plot 5, Chief Yesufu Abiodun Way, Oniru, VI Lagos. You can contact us by post at the above address, by email [email protected] or by telephone (+234) 09168599860.

Data we collect

We collect personal information about you when you interact with our product TAB. These includes:

• Personal Identification Data - Full name, date of birth, gender, BVN, government-issued ID
• Contact Data - Email address, phone number, Business address, next of kin.
• KYC and Compliance Data - ID documents, utility bills.
• Communication Data - Feedback, enquiries, complaints, emails/chat.
• Usage Data - Device type, IP address, pages visited.
• Financial Data: Bank account details, transaction records, card details.

Information sharing with third-party service solely for verification after which it is deleted as required under the applicable laws and regulations; third-party service providers are obligated to protect shared information in accordance with the data protection laws and not use the shared data for any use outside its agreement with us.

We will not share your information with any person outside our organization except as described in this privacy notice.

How we use your data

We process your personal data for the following purposes, relying on the applicable data protection laws and regulations, which provides that personal data should:

• be processed, fairly, lawfully and in a transparent manner.
• be adequate, relevant, and limited to what is necessary to fulfill the process of processing.
• be processed in accordance with the subject data's rights.
• not be kept for longer than necessary for the purpose of processing.
• be accurate and where necessary up to date, and if the data is inaccurate, steps should be taken to clarify or erase such data.
• be obtained for specified and lawful purposes and shall not be processed in a manner incompatible with such purposes.

When you submit an enquiry via our website, we ask you for your:

• Name
• Phone number
• Email address.

We use this information to respond to your query, including providing you with any requested information about our products and services. We may also email you several times after your enquiry in order to follow up on your interest and ensure that we have answered your enquiries to your satisfaction. We will do this based on our legitimate interest in providing accurate information prior to a sale.

Users' enquiries are stored in our database and also sent as an email notification to registered customer support emails.

We do not use the information you provide to make any automated decisions that might affect you.

We keep enquiry emails for two years, after which they are securely archived and kept for seven years, when we delete them. CRM records are kept for five years after the last contact with you.

Where required, we seek your consent before processing certain types of personal data such as cookies. You can withdraw your consent at any time by contacting us using the details provided in Section 1.1.

In the table below we demonstrate how and we use your personal data as well as providing the legal basis on which we rely upon under the data protection legislation. Your personal information is used in:

When you purchase a product from our website

When you purchase products from us online, we ask you for your:

• Name
• Address
• Phone number
• Email address
• Debit card details
• IP (Internet Protocol) address

We will use your information to verify your debit card details for your purchase, process your order and to send you your products. We will also send you a receipt via email and we may use your telephone number to contact you regarding your purchase.

We require this information in order to process your payment, deliver your products or services and fulfill our contract with you.

Your information is stored on our website and on our cloud server. Your debit card details are passed to a third-party payment processor which is based in Nigeria and with whom we have a contractual agreement which provides effective safeguards for your information. We do not retain your debit card information.

We do not use the information you provide to make any automated decisions that might affect you.

We can reuse the authorization token gotten after a successful card charging to re-charge a card for a service that requires periodic recurring payments.

We keep your order information for an indefinite period, as the licenses we sell for our products are renewed.

Consent-based sign-ups

The personal data collected include:

• Name
• Email address
• Phone number

The purpose of this transaction is to onboard users to our platform and services

The lawful basis used is consensual agreement.

Personal data collected could be shared with third-party service providers.

The personal data is stored in our cloud hosted database.

No automated decisions are made on the data.

The retention policy for personal user data is indefinite.

Your rights as a data subject

By law, you have the right to:

• Request access to the personal data we hold about you.
• Opt out of automated decision-making and profiling (where applicable)
• Request we suspend processing your personal data if you believe we are doing so unlawfully.
• Object to the use of your data where processing is based on legitimate interest.
• Request deletion of your data (where legally permissible).
• Request a copy of your data in a machine-readable format.
• Withdraw your consent at any time (where processing is based on consent).
• Request data correction of inaccurate or incomplete data.

How to file a complaint

If you are dissatisfied with how we handle your data, we encourage you to contact us directly. However, you may also contact the Nigeria Data Protection Commission via their website at https://ndpc.gov.ng or write to them at:

Nigeria Data Protection Commission,
No, 12 Dr Clement Isong street,
Abuja, Nigeria.

Cookies

Cookies are small files placed on your device when you visit a website, used to make websites work more efficiently, as well as to provide information to the owners of the site.

We use cookies to:

• Personalize your experience on our platform
• Monitor and analyze website traffic
• Improve website performance and security
• Recognize your browser and remember your preferences
• Facilitate user authentication and secure logins

Some cookies may be placed by third-party services that appear on our pages (e.g. payment processors, analytics tools), these are called third-party cookies. These services may collect data directly from your browser.

You can manage your cookie preferences through:

• Cookies consent banner: On your first visit on our website, we provide a banner to accept or reject non-essential cookies.
• Browser settings: Most web browsers allow control over cookies via settings

Also note that disabling cookies may affect your experience on our website.

Updates to this policy

We periodically review and update this privacy policy to reflect changes in our operations or legal obligations. We will notify you of significant changes where applicable and update the version and date of this policy accordingly.