Effective Date: February 12, 2019
V by VFD mobile banking application (V App) is a product of VFD Microfinance Bank Limited (VBank).
The “Services” refer to the use of any of the financial services or products on any of the Platforms. “User,” “customer,” or “subscriber,” refers to consumers of the Services. “Personal Information,” or “Personal Data,” means any information that identifies or can be used to identify a User, directly or indirectly, including, but not limited to name, email address, mobile number, photograph, bank details or IP address.
2.Consent for Collection, Use and Disclosure
d. You may withdraw your consent for collection, use and disclosure at any time by sending an email using the Company’s contact details on the ‘Contact Us’ page on the Site. Please note that, if you withdraw your consent for collection, use and disclosure, the Company may suspend its provision of Services to you.
f. If you provide the Personal Information of any third party to the Company, we assume that you have obtained the required consent from the relevant third party to share and transfer his/her Personal Information to us.
3.Collection of Personal Information.
c. Service Usage Data: We may receive information about how and when you use the Services, store it in log files or other types of files associated with your account, and link it to other information we collect about you. This information may include, for example, your IP address, time, date, browser used, and actions you have taken within the Site or Mobile Applications. This type of information helps us to improve our Services for both you and for all of our Users.
- Strictly necessary – us remember any of the features and services you use such as savings, fixed deposit, bill payment, tap and pay amongst others.
- Functionality – us to remember choices you make to improve your experience (such as your username, age classification etc.);
- Advertising or targeting – third party advertising companies to display advertisement more relevant to you and your interests. As part of their services, they will place a separate cookie on your computer to help them precisely target advertising to you. These third-party advertising companies do not collect personally identifiable information; and
- Analytical or Performance – us and/or third-party partners collect anonymous information including but not limited to performance and website improvement. This may include web analytics, error management and testing designs. You can find out more about cookies at this site:
- Mobile Application Data: When you use our Mobile Applications, we may collect certain information in addition to information described elsewhere in this Policy. For example, the type of device and operating system you use. We may ask you if you want to receive push notifications. If you have opted in to these notifications and no longer wish to receive them, you may turn them off through your device’s operating system. We may use mobile analytics software to better understand how people use our application. We may collect information about how often you use the application and other performance data.
4.Purposes for collecting Personal Information
We collect Personal Information for the following reasons:
a. For Promotional Purposes: This includes sending you emails relating to the merits of a product, service, brand or issue. You can stop receiving our promotional emails by following the unsubscribe instructions included in every email we send, or by adjusting your marketing preferences in your profile. This data is processed in accordance with consent under the NDPR and extant data protection laws.
b. For Billing Purposes: This includes sending you emails, invoices, receipts, notices of delinquency, and alerting you if we need a different credit card number. We use third parties for secure credit card transaction processing, and we send billing information to those third parties to process your orders and credit card payments. This data is processed in accordance with consent and third-party data processing contract requirements under the NDPR and extant data protection laws.
c. To Provide and Improve Our Services. This includes, for example, aggregating information from your use of the Services or visit to our Platforms and sharing this information with third parties to improve our Services. This might also include sharing your information with third parties in order to provide and support our Services. When we do have to share Personal Information with third parties, we take steps to protect your information by requiring these third parties to enter into a contract with us that requires them to use the Personal Information we transfer to them in a manner that is consistent with this policy. This data is processed in accordance with consent and third-party data processing contract requirements under the NDPR and extant data protection laws.
d. For Account and Support Communication: For example, we may inform you of subscription payment successes or failures, password reset attempts, and other support-related functions. This data is processed in accordance with consent requirements under the NDPR and extant data protection laws.
f. For Legal Purposes: For example, complying with court orders, valid discovery requests, valid subpoenas, to prosecute and/or defend a court, arbitration, or similar legal proceeding. To respond to lawful requests by public authorities, including to meet national security or law enforcement requirements. To provide information to representatives and advisors, including attorneys and accountants, to help us comply with legal, accounting, or security requirements. This data is processed in accordance with legal obligation under the NDPR and extant data protection laws.
5.Limiting the Collection of Personal Information
The Company may limit its collection of Personal Information only to the extent that the information is unnecessary for the identified purposes. The Company does not direct the Platforms to, nor does it knowingly collect any Personal Information from persons under the age of eighteen (18) years. Consequently, the Company shall not be liable for any use or processing of Personal Information of persons under the age of 18.
6. Disclosure of Personal Information
The Company will not disclose any of your Personal Information to anyone else, except:
a. to its employees, independent contractors, subsidiaries, affiliates, consultants, business associates, service providers, suppliers and agents, acting on its behalf for any of the identified purposes;
b. if it has reason to believe that disclosure is necessary to identify, contact or bring legal action against someone who may be causing injury to or interference (either intentionally or unintentionally) with the Company’s rights or property, other users of the Platforms, the Services, or anyone else that could be harmed by such activities;
c. in the event of business transfers which may occur when we sell or buy businesses or assets. In the event of a corporate sale, merger, reorganization, dissolution or similar event, personal data may be part of the transferred assets; and
d. to respond to judicial process and provide information to law enforcement agencies or in connection with an investigation on matters related to public safety, as permitted by law, or otherwise as required by law.
We may retain Personal Information about the User, as long as it is necessary for business and/or legal purposes. Also, we may retain aggregated anonymized information indefinitely (for clarity, this refers to where your personal data is anonymized so that it can no longer be affiliated with you). In addition, we may retain your information for an additional period as is permitted or required to, among other things, comply with our legal obligations, resolve disputes, and enforce agreements. If your account becomes inactive (that is, if you request to be removed from the Company’s database), the Company will keep your Personal Information in its archives for the duration required by law. Your information will be used only as necessary for tax reasons or to prove the Company’s compliance with any applicable law.
For the purpose of providing the Services, the Company (through the Platforms) processes information about our Users on servers located in a number of countries. The Company may also subcontract processing or sharing of information to third parties located in other countries, other than your home country. Also, such information may be transferred to another company if the need arises. Therefore, information may be transferred across international borders outside the country where you use our Services, including to countries that do not have laws providing specific protection for personal data or those that have different legal rules on data protection. We will only transfer Personal Information outside the country upon compliance with the provisions of any applicable law in relation to transfer of Personal Information outside Nigeria. BVN data shall be stored within Nigeria and shall not be routed across borders without the consent of the Central Bank of Nigeria (CBN).
By using or accessing our Services or Platforms , you hereby explicitly and contractually consent to the transfer of your Personal Information by the Company as contemplated herein.
9.Accuracy of Personal Information
We will use commercially reasonable efforts to keep your Personal Information as provided by you accurate for the identified purposes. Users are responsible for informing us about any changes to their Personal Information from time to time.
Users will be informed that in order to implement the measurements of verification of information provided by the User, we may request you to provide copies of documents related to your Personal Information including but not limited to an official ID Card, bank verification number, etc.
Users represent that all Personal Information provided to us is accurate for the identified purpose. In the event that we have not received information from you regarding any change of status on your Personal Information, please note that you inherently accept the responsibility for the information you provided and/or the failure to timely and accurately update your details.
We transmit and store the information we collect using standard security techniques. However, given the nature of the internet and the fact that network security measures are not fool proof, we cannot guarantee the security of such information. We protect your Personal Information by:
a. restricting access to the Personal Information;
b. maintaining technology products to prevent unauthorized computer access; and
c. securely destroying your Personal Information when it is no longer needed for any legal or business purpose.
d. using state of the art Secure Socket Layer (SSL) encryption technology when processing your financial details.
Your password is the key to your account. Please use unique numbers, letters and special characters, and do not share your password to anyone. If you do, you will be responsible for all actions taken in the name of your account and the consequences. If you lose control of your password, you may lose substantial control over your Personal Information and other information submitted to us. You could also be subject to legally binding actions taken on your behalf. Therefore, if your password has been compromised for any reason or if you have grounds to believe that your password has been compromised, you should immediately contact us and change your password. As a safety measure, you are required to log off from your account and close the browser after using a shared computer. Should a security breach occur, the Company will notify all affected customers as soon as is reasonably possible, and later may file a report with the appropriate authorities on the actions we took if the need arises.
11.Other Websites and Links
13.Your Data Privacy Rights
a. Right to Rectification: Users can modify or change their name, email password, and mobile login PIN via their profile. For all other requests, such as updating email address or mobile number, please contact us at [email protected].
b. Right of Access, Right to Erasure, Right to Restrict Processing: Users can request access or erasure of their Personal Information, as well as request restriction on further processing of their Personal Information by contacting us at [email protected]. Please allow up to 30 (thirty) days for requests to be processed. The Company reserves the right to charge a reasonable fee to process excessive or repeat requests.
d. Right to lodge a complaint with a supervisory authority: Should you feel your data privacy rights are not being adequately protected by the Company, you have the right to lodge a formal complaint with the appropriate supervisory authority.
e. Right to request Transfer: You may request the transfer of your Personal Information to you or a third party for any purpose outside the provision of the Services. Please note that this right applies only to information which you initially provided consent for us to use or where we used the information to provide our Services to you.
14. Available Remedies in The Case Of Breach
In the case of a breach of any of the obligations with respect to your Personal Information being breached or compromised, please exercise your right to contact us through any of the channels highlighted below immediately. A data breach procedure is established and maintained in order to deal with incidents concerning personal data or privacy practices leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored or otherwise processed. On notification of such breach, we will investigate to determine if an actual breach has occurred, the actions required to manage such breach, communicate with the subject of the breach and take appropriate action under its dispute resolution framework to remedy such breach.
15. Contact Us
If you have questions regarding your data privacy rights or would like to submit a related data privacy right request, please email us at [email protected]. Please allow up to 30 days for requests to be processed. The Company reserves the right to charge a reasonable fee to process excessive or repeat requests.
Tel: [●+234 908 752 2472]
VFD Microfinance Bank Limited
Address: 214 Broad Street, Lagos Island, Lagos, Nigeria