• Personal Identification Data: Name, email address, phone number, physical address, National Identification Number (NIN), Bank Verification Number (BVN), and financial information (e.g., bank account details) where applicable.
• Sensitive Personal Data: Financial records, employment details, and other data classified as sensitive under Section 30 of the NDPA 2023. Such data will only be processed with your explicit consent or on another lawful basis permitted by the NDPA.
• Technical Data: IP address, browser type, device information, and usage data collected automatically.
• Cookie Data: Data collected via cookies and similar tracking technologies, subject to your consent preferences.

• To provide and improve our services: This is necessary to perform our contract with you, or to take steps prior to entering into a contract.
• To communicate with you: We may send you information about products, services, and events. You may opt out at any time.
• To comply with legal and regulatory obligations: We may process your data to meet obligations under Nigerian laws, including mandates from the Nigeria Data Protection Commission (NDPC), Central Bank of Nigeria (CBN), and others.
• For fraud prevention and security: To ensure the integrity of our services and prevent fraudulent activities.
• For marketing purposes: With your consent, to inform you of relevant services or updates.

• Consent: Where required, we will obtain your explicit consent for data collection and processing.
• Contractual Necessity: For the performance of services that you have requested.
• Legitimate Interests: To improve our services and ensure security.
• Legal Obligation: To comply with Nigerian regulations.

• CREDICORP: Including subsidiaries and affiliates.
• Regulatory Authorities: Such as NDPC, CBN, and other governmental bodies with jurisdiction over CREDICORP.
• Service Providers: Third-party vendors who assist in hosting, data analysis, customer support, and payment processing. These third parties are contractually obligated to protect your data.
• Credit Reference Agencies: For creditworthiness assessments.
• Debt Collection Agencies: In the event of a default.
• Business Partners: In cases of joint ventures or collaborations, under appropriate data protection agreements.

• Right of Access: Request a copy of your personal data and information about how it is processed (Section 35, NDPA).
• Right to Rectification: Request correction of inaccurate or incomplete personal data (Section 36, NDPA).
• Right to Erasure (‘Right to be Forgotten’): Request deletion of your data where it is no longer necessary for the purpose for which it was collected (Section 37, NDPA).
• Right to Restrict Processing: Request that we limit processing of your data in certain circumstances.
• Right to Data Portability: Receive your personal data in a structured, commonly used, machine-readable format, and transmit it to another data controller where technically feasible (Section 38, NDPA).
• Right to Object: Object to processing based on legitimate interest or for direct marketing purposes (Section 39, NDPA).
• Right Not to be Subject to Automated Decision-Making: Where a decision has significant legal or similar effects, request human review and the right to challenge the outcome (Section 34, NDPA).
• Right to Withdraw Consent: Withdraw consent at any time without detriment, where consent is the lawful basis.
• Right to Lodge a Complaint: File a complaint with the NDPC at www.ndpc.gov.ng if you believe your data rights have been violated

To exercise your rights, please contact our Data Protection Officer at privacy@credicorp.ng.

• Notify the Nigeria Data Protection Commission (NDPC) within 72 hours of becoming aware of any breach that presents a significant risk to your rights and freedoms.
• Notify affected users promptly, providing details of the breach and actions taken.

By using this website, you acknowledge and consent to these data breach notification practices.

• Inform you of updates or changes to our services and policies.
• Share information about products, services, and events that we believe may be of interest to you.

If you prefer not to be contacted for marketing purposes, you can opt out at any time by contacting us at support@credicorp.ng or by following the unsubscribe instructions included in our communication.

For any inquiries related to our Data Protection and Privacy Policy, or if you wish to exercise your data subject rights (e.g., access, rectification, deletion of your data), please contact our Data Protection Officer (DPO) atprivacy@credicorp.ng.