Privacy Policy

Introduction

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our services, whether through the Paymita mobile application (the “App”) or the website (“Website”). We comply with the Nigeria Data Protection Regulation (NDPR), the Nigeria Data Protection Act (NDPA), and other relevant data protection laws and regulations.

By using our App or Website, you hereby represent that you have read and consented to the practices outlined in this policy. If you do not agree with any part of this policy, you must immediately discontinue the use of our Service, and you will not be granted access to the App or Website, nor its full functionality.

Who We Are

At Paymita (“we,” “us,” “our”), we prioritise the privacy of our users. We are a bill payment and virtual dollar card services provider (the “Services”) owned by Gluchat Softwares Ltd. We are partnered with licensed financial services providers to securely process your data to provide you a seamless experience. You can contact us at [email protected] if you have questions about this policy.

Who This Policy Applies To

This policy covers all users of the Paymita mobile app, available on Google Play, Apple App Store, or any other platform where our App is made available by us; and our Website, which can be accessed from any internet-connected device.

How We Use Your Data

We use your personal data for various lawful purposes, including but not limited to:

• Service delivery: providing the Services to you.

• Communication: Notifying you of updates or important changes to your account or our services.

• Security: Safeguarding our platform and preventing unauthorized access.

• Compliance: Adhering to regulatory and legal obligations, such as NDPR, NDPA, tax laws, other relevant regulations and laws that may be enacted from time to time, etc.

• Legitimate Interest: Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.

• Marketing: Only with your consent, we send promotional materials regarding new features, services, or products.

Consent Withdrawal

ou may withdraw your consent at any time by contacting us at [email protected]. This will not affect the legality of any processing done before withdrawal.

Changes to the Privacy Policy

We regularly review our privacy policy and will post updates on this page. Significant changes may be communicated to you via email or notifications within the App. Continuing to use our services following these changes indicates your acceptance of the updated policy.

Third-Party Links

Our platforms may contain links to third-party websites, which have their own privacy policies. We encourage you to review them before providing any personal information. We do not take responsibility for their content or privacy practices.

Data We Collect

We may collect the following categories of personal data:

• Identity Data: First name, username, fingerprint and identification documents.

• Contact Data: Email, phone number, and residential address.

• Financial Data: Bank account details.

• Transaction Data: Records of transactions performed via our services.

• Technical Data: IP address, login details, device information, browser type, etc.

• Usage Data: Information about how you use our App and Website.

• Marketing Data: Preferences for receiving marketing communications.

• Location Data: Geographical location based on device settings.

We also use Aggregated Data for statistical purposes. This data does not reveal your identity.

We have set out below, in a table format, a description of all the ways we plan to use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.

Purpose/activity	Type of data	Lawful basis for processing
• To register you as a new user of our App • Enabling log-in • Carrying out KYC on you	• Identity • Contact • Financial • Technical Data	• Your consent • Necessary to comply with relevant Anti-money laundering and cybercrime regulations
• To facilitate utility payments, manage transactions, and issue virtual dollar cards	• Identity • Contact • Financial • Transaction • Location	• Your consent • Performance of a contract with you • Necessary for our legitimate interests (to recover debts due to us)
• To manage our relationship with you including notifying you of changes to the App or any Services and to enable you participate in promotions rewards, or surveys.	• Identity • Contact • Financial • Marketing and Communications • Location	• Your consent • Performance of a contract with you • Necessary for our legitimate interests (to keep records updated and to analyse how customers use our services • Necessary to comply with legal obligations (to inform you of any changes to our terms and conditions)
• To administer and secure the platform, including troubleshooting, data analysis, and system testing	• Identity • Transaction • Contact • Device	• Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security)
• To deliver content and advertisements to you • To make recommendations to you about goods or services which may interest you • To measure and analysethe effectiveness of the advertising we serve you • To monitor trends so we can improve the App	• Identity • Contact • Content • Marketing and Communications • Location	• Consent • Necessary for our legitimate interests (to develop our products/Services and grow our business)

Fingerprints

We have an optional fingerprint login option on our App. If you choose to enable this feature, we may collect and process the identity data in your fingerprint to allow you use the option.

Cookies and Tracking Technologies

We use cookies and similar technologies to improve user experience, track preferences, and enhance our platforms. You can control cookie settings in your browser or app settings. For detailed information, see our[Cookie Policy] [LINK].

Data Sharing

We may share your data with trusted third parties, such as:

• Service Providers: Companies that help us process transactions or provide customer support, organisations that host Our Website or databases and providers of online surveys.

• Partners: For co-branded services or promotional activities.

• Professional Advisers: including lawyers, bankers, auditors and insurers

• Courts and Regulators: In response to legal obligations, court orders, or requests from regulators in fulfilment of data privacy, financial or security audits and/or to investigate or respond to a complaint or security threat.

International Data Transfers

When transferring data outside Nigeria, we ensure that your personal information is protected in accordance with the Nigerian Data Protection Act 2023 and other applicable regulations.

Children’s Privacy

Our Services, App, and Websites are strictly for businesses, incorporated entities, and persons above 18 years old and do not address any person under 18. We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from anyone under the age of 18 without verification of parental consent, we take steps to remove that information from our servers.

Data Security

We implement industry-standard security measures to protect your personal data. Access to your account is protected by a password, which you must keep confidential. In case of any suspected breach, we will notify you and the relevant authorities.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected or to comply with legal obligations. The duration may vary depending on the type of data and applicable regulations.

Your Legal Rights

You have the following rights regarding your personal data:

• Access: Request a copy of the data we hold.

• Correction: Request rectification of incomplete or inaccurate data.

• Erasure: Request deletion of data when there is no valid reason for us to keep it.

• Objection: Object to data processing for marketing or legitimate interest purposes.

• Restriction: Request to suspend data processing in certain circumstances.

• Portability: Request to transfer your data to a third party.

• Withdraw Consent: Withdraw consent at any time, though this may affect the services we can provide.

• Report to the NDPC: you have the right to make any complaint concerning the processing of data to the Nigeria Data Protection Commission.

Contact Us

For questions, complaints, or to exercise any of your rights, please contact us at: [email protected]