Privacy Policy

1. Information We Collect

We collect information you provide directly to us, such as when you create an account, make a purchase, or contact us for support. This may include:

• Personal Information: Name, email address, phone number, date of birth
• Identity Verification: BVN, NIN, government-issued ID for KYC compliance
• Financial Information: Bank account details, payment method information (processed securely by our payment partners)
• Transaction Data: Purchase history, wallet balance, transaction amounts and timestamps
• Technical Data: IP address, device information, browser type, operating system
• Usage Data: How you interact with our platform, pages visited, time spent
• Communication Data: Records of customer support interactions, feedback, and complaints

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service Provision: Process transactions, provide VTU services, maintain your account
• Identity Verification: Comply with KYC requirements and regulatory obligations
• Payment Processing: Process payments, prevent fraud, manage your wallet
• Customer Support: Respond to inquiries, resolve issues, provide technical support
• Communication: Send transaction confirmations, service updates, security alerts
• Marketing: Send promotional offers, newsletters (with your consent)
• Analytics: Improve our services, develop new features, understand user behavior
• Legal Compliance: Meet regulatory requirements, prevent money laundering, combat fraud
• Security: Protect against fraud, unauthorized access, and other security threats

3. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• Service Providers: Payment processors (Paystack), VTU providers (VTpass), cloud hosting services
• Regulatory Compliance: When required by Nigerian law, CBN regulations, or court orders
• Fraud Prevention: With banks, financial institutions, and security services to prevent fraud
• Business Transfers: In case of merger, acquisition, or sale of business assets
• Legal Requirements: To protect our rights, property, or safety, or that of our users
• Consent: When you explicitly consent to sharing your information

4. Data Security and Protection

We implement comprehensive security measures to protect your personal information:

• Encryption: All data is encrypted in transit and at rest using industry-standard protocols
• Access Controls: Strict access controls and authentication mechanisms
• Regular Audits: Regular security assessments and penetration testing
• Employee Training: All staff are trained on data protection and privacy practices
• Secure Infrastructure: Our systems are hosted on secure, certified cloud infrastructure
• Incident Response: Comprehensive incident response procedures for data breaches

5. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of your personal information we hold
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal requirements)
• Portability: Request transfer of your data to another service provider
• Objection: Object to processing of your data for marketing purposes
• Restriction: Request restriction of processing in certain circumstances
• Withdrawal: Withdraw consent for data processing where applicable

Note: Some rights may be limited by legal obligations, particularly regarding financial records and KYC data.

6. Contact Information

If you have any questions about this privacy policy or our data practices, please contact us:

• Email: privacy@vtubox.com
• Phone: +234 XXX XXX XXXX
• Address: 11B, Maplewood Estate, Lagos, Nigeria
• Response Time: Within 48 hours

Data Protection Officer: dpo@vtubox.com