Privacy & Policy
To protect you from service-related crime, enhance the services we offer and to ensure your eligibility and facilitate fast disbursal of your loan. The following information needs to be collected automatically when you use the ChopaCredit Services, please agree to the permissions to access your ACCESS_NETWORK_STATE, ACCESS_WIFI_STATE, CAMERA, INTERNET, READ_PHONE_STATE.
PRIVACY NOTICE
Effective Date: 2025/08/01
PLEASE READ THIS PRIVACY NOTICE CAREFULLY. BY ACCESSING, REGISTERING, OR OTHERWISE ENGAGING WITH ANY FUNCTIONALITY OR FEATURE OF THE SERVICES OFFERED BY BLUPRIMVERTEX LIMITED ("BPTL"), YOU ACKNOWLEDGE THAT YOU HAVE THOROUGHLY REVIEWED AND FULLY COMPREHENDED THE TERMS AND CONDITIONS SET FORTH HEREIN, INCLUDING ANY AMENDMENTS THERETO, AND YOU CONSENT TO THE COLLECTION, PROCESSING, RETENTION, SHARING, AND TRANSFER OF YOUR PERSONAL DATA AS DESCRIBED HEREIN.
1. Introduction and Scope This Privacy Notice is issued in compliance with the Nigeria Data Protection Act (NDPA) and is applicable to any data subject whose personal data is collected, stored, or processed through the use of services provided via the ChopaCredit mobile application (the "App"), which is operated by BLUPRIMVERTEX Limited, a private limited liability company lawfully incorporated under the laws of the Federal Republic of Nigeria.
"Personal Data" shall be interpreted in accordance with its statutory definition under the NDPA and encompasses all information relating to an identified or identifiable individual, including but not limited to data that can be used, directly or indirectly, to establish or infer the identity of a natural person.
This Notice provides a comprehensive framework that explains:
- Our legal identity and how you can contact us
- The legal rights granted to data subjects
- Our legal grounds for data processing
- The categories of personal data collected
- The purposes and methodologies of processing
- The entities with whom personal data may be disclosed
- The mechanisms for data protection and retention
- Revisions to this policy
- Governing jurisdiction and applicable law
2. Identity of the Data Controller & Contact Details The entity responsible for determining the purposes and means of processing your personal data is BLUPRIMVERTEX Limited (hereinafter referred to as "BPTL", "we", "our", or "us"). The ChopaCredit App is the digital platform through which the lending and related services are accessed.
Any inquiries, grievances, or complaints concerning this Privacy Notice or our data processing practices may be directed to:+234 7035494862
3.1 Rights Afforded Under the NDPA
In accordance with applicable data protection legislation, data subjects are entitled to exercise the following rights:
- Right of Access – You may request confirmation as to whether your personal data is being processed, and where that is the case, obtain access to such data and ancillary information.
- Right to Rectification – You are entitled to request the correction of any personal data that is inaccurate or incomplete.
- Right to Erasure – Also referred to as the "right to be forgotten," this enables you to request the deletion of personal data where continued processing is no longer lawful or necessary.
- Right to Object – You may object to the processing of your data where such processing is based on legitimate interests or is being undertaken for direct marketing purposes.
- Right to Restrict Processing – This right allows you to request the suspension of processing activities in certain circumstances, such as while accuracy or legal basis is being assessed.
- Right to Data Portability – You may request that your personal data be made available in a machine-readable format and transmitted to a third party, where feasible and legally permissible.
- Right to Withdraw Consent – Where processing is based on consent, you may revoke your consent at any time, without prejudice to the legality of any processing carried out prior to such withdrawal.
3.2 How to Exercise Your Rights
You may initiate the exercise of any of the aforementioned rights by contacting us using the details provided in Section 2. Please note that, while access and other rights are generally provided free of charge, we reserve the right to impose a reasonable fee where a request is manifestly unfounded, excessive, or repetitive in nature.
For verification purposes and to uphold data security standards, we may request specific information to confirm your identity before fulfilling your request. We will endeavor to respond to all valid data subject requests within 30 calendar days. In instances of complexity or high volume, an extension may be applied, and you will be notified accordingly.
4. Legal Basis for Processing Each instance of personal data processing by BPTL is grounded in a legally recognized basis under the NDPA, including but not limited to:
- The necessity of processing for the performance of a contractual obligation entered into with the data subject
- Compliance with a legal mandate or regulatory requirement
- The pursuit of BPTL’s legitimate interests, provided such interests do not override your fundamental rights and freedoms
- Your explicit and informed consent, where applicable
Please note that failure to provide personal data that is deemed necessary for the performance of a contract or for legal compliance may result in the unavailability or termination of certain services.
5. Categories of Data Collected We collect and process various types of personal data, grouped into the following non-exhaustive categories:
- Identity Data: Names, gender, date of birth, national ID numbers or government-issued identification
- Contact Data: Mobile numbers
- Financial Data: Bank account numbers, card details, BVN
- Device & Technical Data: Device identifiers (e.g., IMEI), SIM card metadata, operating system, IP address, and browser configuration
- Content Data: User-generated content within the App such as messages or responses
- Communication Preferences: Opt-in and opt-out settings regarding marketing or alerts
6. Purpose of Data Processing Your personal data may be used for the following purposes:
- To enable registration, authentication, and continued access to the App and its services
- To process loan applications and evaluate creditworthiness
- To comply with applicable anti-money laundering, fraud detection, and Know-Your-Customer (KYC) obligations
- To send service updates, promotional messages, and policy notifications (subject to your preferences)
In connection with the provision of services, your data may be shared with authorized third parties, such as financial institutions, payment processors, analytics providers, and governmental authorities, strictly on a need-to-know basis and under appropriate data protection agreements.
7. Data Security & International Transfer 7.1 Security Protocols
We implement and maintain advanced security frameworks—including physical, technical, and administrative controls—to ensure the confidentiality, integrity, and availability of your data. Our security infrastructure includes firewalls, end-to-end encryption, role-based access control, and ISO/IEC 27001-compliant procedures.
7.2 Cross-Border Data Transfer
In cases where your data must be transmitted outside Nigeria, we ensure that such transfers are made to jurisdictions recognized as providing adequate levels of data protection ("white-list countries") or are otherwise safeguarded through standard contractual clauses and informed user consent.
7.3 Data Retention Period
We will retain your personal data for as long as is necessary to fulfill the purpose for which it was collected, including to satisfy any legal, regulatory, accounting, or reporting requirements. In certain cases, data may be retained beyond the termination of your account to fulfill obligations relating to dispute, legal compliance, or fraud prevention.
8. Data Breach Notification In the unfortunate event of a personal data breach likely to result in significant harm to your rights and freedoms, BPTL is obliged to notify the Nigeria Data Protection Commission (NDPC) within 72 hours of becoming aware of such incident. We shall also notify affected individuals in a timely and transparent manner outlining the nature, potential consequences, and remedial measures undertaken.
9. Amendments to This Notice This Privacy Notice may be reviewed and amended periodically at BPTL’s discretion. Any material revisions will be communicated through the App or other appropriate channels. Continued access or use of the App following such updates constitutes acceptance of the modified terms.
This Privacy Notice shall be interpreted and enforced in accordance with the laws of the Federal Republic of Nigeria, and any disputes arising hereunder shall be subject to the exclusive jurisdiction of Nigerian courts or tribunals of competent authority.