Creditswitch Limited (“Creditswitch”, “we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy applies to the personal information we collect when you use our websites, products, and services, or when you interact with us through other channels such as phone, email, or events.

---

This Privacy Policy explains how we collect, receive, use, store, share, transfer, and protect your personal data. It also describes your rights and choices regarding your personal data under the Nigeria Data Protection Act, 2023 (NDPA). If you do not agree with this Privacy Policy, you should not use our websites, products, or services.

When you engage with Creditswitch, we may collect information such as your name, email address, phone number, account details, financial information, and usage data. We may also use cookies and similar technologies to improve your experience.

Creditswitch processes your personal data only where permitted by law, based on one or more of the following grounds:

• You have given consent for one or more specific purposes.
• The processing is necessary for the performance of a contract or to take steps at your request before entering into a contract.
• The processing is necessary to comply with a legal obligation.
• The processing is necessary to protect your vital interests or those of another person.
• The processing is necessary for the legitimate interests of Creditswitch or a third party, provided these do not override your rights and freedoms.

We may use your personal data to:

• Provide and manage our products and services.
• Communicate with you about your account, enquiries, or service updates.
• Authenticate your identity and secure our systems.
• Detect and prevent fraud, abuse, or security incidents.
• Comply with legal and regulatory requirements.

We may contact you to provide the services you have signed up for, send important updates about your account, respond to enquiries, or where you have opted in to receive further information.

We will not contact you for marketing purposes unless you have specifically agreed to this. We do not sell or share your personal data with third parties for their own marketing purposes.

We may share your data with trusted third-party service providers who process it on our behalf, or with regulators and law enforcement when required by law. These parties must handle your data in accordance with this Privacy Policy and the NDPA.

If your personal data is transferred outside Nigeria, Creditswitch will ensure that such transfers comply with the NDPA and are subject to adequate safeguards to protect your rights.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Once no longer needed, it will be securely deleted or anonymised.

Under the NDPA, you have the right to:

• Request access to, correction of, or deletion of your personal data.
• Object to or request restriction of our processing of your personal data.
• Request the portability of your personal data.
• Withdraw consent at any time where processing is based on consent.

To exercise these rights, please contact us at dpo@creditswitch.com.

We use appropriate technical and organisational measures to protect your personal data from loss, misuse, unauthorised access, or disclosure.

We may update this Privacy Policy from time to time. We encourage you to review it periodically for any changes.