Privacy Policy

This data privacy, protection and cookie policy (“Privacy Policy”) describes your privacy rights regarding how BlaaizPay and its Affiliates (“BlaaizPay”, “we”, “us”) collect, process, use, store, and share your personal data, when you use our website, applications, and services.

BlaaizPay’s digital payment platform offers seamless payment processing services and mobile payment solutions for businesses of all sizes (our “Services”). Our Services are designed for businesses and organizations (“Merchants”), but we also interact with individuals through our Merchants or website visits. We are committed to responsible personal data processing for all parties involved. When processing personal data for Merchants, we act as a data processor on behalf of the relevant Merchants. We do not control or bear responsibility for the privacy practices of our Merchants. If you are a customer of a BlaaizPay Merchant, please refer to that Merchant's Privacy Policy and direct any privacy inquiries to the relevant Merchant directly.

“Personal Data” in this Privacy Policy refers to any information associated with an identified or identifiable data subject, which can include data that you provide to us, and we collect about you during your interaction with our Services (such as device information, IP address, etc.)

• Registration information: To gain full access to our website and services, you must register for a BlaaizPay account. When you register for an account, we collect and validate business data and personal data, which you voluntarily provide to us in order to complete the KYC (Know Your Customer) process (e.g. email address, bank details, name, telephone number). With your consent, we may also collect additional personal data such as survey responses.
• Payment information: If you make a financial transaction, we collect credit card numbers, financial account information, and other payment details.
• Communications: If you contact us directly, for example with an inquiry or a support request, we may receive additional personal data about you, including your email address and the content of your communications.
• When you submit an inquiry to us via any means, register to attend a BlaaizPay event, interact with us on social media, partake in competitions and promotional activities and volunteer information to us; we may collect personal information from you.

1.2 Personal Data We Collect Automatically

• Device Information: We receive information about the device and software you use to access our Services, including internet protocol (IP) address, web browser type, operating system version, and device identifiers.
• Usage Information: To help us understand how you use our Services, including the Demo portion of our website, and to help us improve them, we automatically receive information about your interactions with our Services. This information includes records of your transactions and information about your other activities related to our services, such as the date and time of your sessions, the pages you view, links to/from any page, and time spent in a session. Some of the data we gather using cookies and similar technologies as discussed below.
• Location Information: When you use our Services, we may collect or infer your general location information. For example, your IP address may indicate your general geographic region.

1.3 Personal Data That We Receive from Others or Infer

• Partners: We may retrieve additional personal data about you from third parties and other identification/verification services such as your financial institution and payment processor. We may combine that data with other information we have about you.
• Publicly available sources: Public sources of information such as open government databases.
• Inferences: We may infer additional personal data based on the personal data described above. For example, for Visitors, we may infer your interests based on the web pages you view.
• When you are asked to provide personal data, you may decline. And you may use web browser or operating system controls to prevent certain types of automatic data collection. But if you choose not to provide or allow information that is necessary for certain services or features, those services or features may not be available or fully functional.

2.1 Provide, Improve, and personalise our Services

• We use personal data to provide, improve, and personalise our Services to Merchants. This includes:
• Account registration: We use the personal data you provide during the registration process to create and maintain your BlaaizPay account and to verify your identity as part of our KYC process.
• Payment processing: We use personal data, including payment information, to process payments, complete transactions, and provide receipts and invoices.
• Customer support: We may use personal data, including communications you have with us, to respond to your inquiries, provide customer support, and address any issues you may have with our Services.
• Service improvement: We use personal data to understand how Merchants and their customers use our Services, to monitor and analyse usage patterns, and to improve the functionality and performance of our Services.
• Personalisation: We may use personal data to personalise your experience with our Services, such as remembering your preferences, displaying relevant content, and providing tailored offers and promotions.
• Fraud prevention and security: We use personal data to detect and prevent fraud, unauthorised access, and other security incidents, and to protect the integrity and security of our Services.

2.2 Communication and Marketings

We may use personal data to communicate with Merchants about our Services, promotions, events, and other marketing purposes. We may send you promotional emails or other communications based on your preferences and applicable law. You can opt out of receiving marketing communications from us by following the unsubscribe instructions in the communications or by contacting us directly.

2.3 Legal Obligations and Business Interests

We may use personal data to comply with legal obligations, such as tax reporting, fraud prevention, and anti-money laundering requirements. We may also use personal data for our legitimate business interests, such as enforcing our Terms, protecting our rights and interests, conducting research, and improving our Services.

2.4 Engagement

As you interact with our site and use our Services, we use the information we collect about and through your devices to provide opportunities for further interactions, such as discussions about Services or interactions with chatbots, to address your questions.

3.1 With BlaaizPay Affiliates and Service Providers

We may share personal data with our affiliates and service providers who help us provide and improve our Services. These entities are authorised to process personal data on our behalf and are obligated to protect the confidentiality and security of personal data.

3.2 With BlaaizPay Merchants

As a payment processing platform, we may share personal data with BlaaizPay Merchants for the purpose of completing transactions and providing customer support. BlaaizPay Merchants are responsible for their own privacy practices and compliance with applicable laws. Merchants should have their own privacy policy in place that outlines how they collect, use, store, and protect personal data.

3.3 With Business Partners and Third Parties

We may share personal data with business partners and third parties for various purposes, such as marketing, advertising, analytics, research, and other business-related activities. These parties are authorised to use personal data only as necessary to perform their functions and are required to protect the confidentiality and security of personal data.

3.4 Legal Requirements and Safety

We may disclose personal data in response to legal requirements, such as a subpoena, court order, or other governmental or legal requests. We may also disclose personal data to protect the safety and security of our users, employees, or the public, or to enforce our rights and agreements.

3.5 Business Transfers

If BlaaizPay is involved in a merger, acquisition, or sale of all or a portion of its assets, personal data may be transferred as part of that transaction. We will notify Merchants of any such transfer and provide choices regarding personal data. Third-party analytics and advertising companies also collect personal data through our website and apps including, marketing and communications data, demographic data, content and files, geolocation data, usage data, and inferences associated with identifiers and device information (such as cookie IDs, device IDs, and IP address) as e.described in the Cookies section of this statement. These third-party vendors may combine this data across multiple sites to improve analytics for their own purpose and others. For example, we use Google Analytics on our website to help us understand how users interact with our website; you can learn how Google collects and uses the information at www.google.com/policies/privacy/partners. Please note that some of our services include integrations, references, or links to services provided by third parties whose privacy practices differ from ours. If you provide personal data to any of those third parties or allow us to share personal data with them, that data is governed by their privacy statements.

3.6 Compliance and Harm Prevention

We share business and personal data when we believe it is necessary to comply with applicable law; to abide by rules imposed by Financial Partners in connection with the use of their payment method; enforce our contractual rights; secure and protect the Services, rights, privacy, safety, and property of BlaaizPay and its affiliates, you, and others, including against malicious or fraudulent activity; and to respond to valid legal requests from courts, law enforcement agencies, regulatory agencies, and other public and government authorities.

BlaaizPay, its affiliates and partners use cookies and similar technologies on our website for various purposes, including collecting information and operating the site. We use cookies to:

• Remember visitors to our website for improved user experience
• Make your user experience easier by customising our services, content, and advertising.
• Help ensure that your account security is not compromised, mitigate risk, and prevent fraud.

When you visit our website, small text files called cookies are stored on your device by your browser. These cookies contain a unique identifier that enables us to recognise you and personalise your experience with tailored content. While most browsers automatically accept cookies, you can adjust your settings to delete or reject them. Please note that opting out of cookies may affect your website experience.

BlaaizPay takes the protection of your personal data seriously and has implemented adequate technical and organizational controls to ensure its integrity and confidentiality, both in digital and physical formats, and to prevent accidental or deliberate compromise of personal data. We use a variety of security measures to protect your personal data, including physical, technical, and administrative safeguards, in line with industry best practices. These measures include data encryption, firewalls, physical access controls to our premises and files, and granting access to personal data only to employees who require it to fulfill their job responsibilities.

We also comply with the Payment Card Industry Data Security Standard (PCI DSS Requirements) and implement access control measures, security protocols, and standards, such as encryption and firewall technologies, to ensure the safe and secure handling of your card information on our servers. We regularly update our security infrastructure to comply with reasonable industry standards. BlaaizPay has a data breach procedure in place to handle incidents related to personal data, including accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. If you become aware of any breach of personal data or compromise of your access credentials, please contact our Data Protection Officer (DPO) so that we can take necessary steps to ensure the security of your personal data or account. We will also report any breaches that may compromise your rights and freedoms to the Relevant Authority within 72 hours of discovery.

Employees are only granted access to personal data as necessary for their specific tasks and responsibilities. They are required to maintain confidentiality and only use personal data for legitimate work-related purposes, without using it for personal or commercial gain, disclosing it to unauthorised individuals, or sharing it in any way.

We are committed to maintaining the confidentiality and security of your Personal Information and continuously review and enhance our security measures to protect against potential threats. However, it is important to note that no method of data transmission or storage can be guaranteed to be 100% secure, and we cannot guarantee the absolute security of your Personal Information. Therefore, we encourage you to take appropriate measures to protect your Personal Information, such as choosing a strong and unique password, keeping your access credentials confidential, and being cautious about sharing your Personal Information online. If you have any questions or concerns about the security of your Personal Information or our data protection practices, please contact our DPO. We will address your inquiries and concerns to the best of our ability.

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, including to provide our Services, comply with legal obligations, resolve disputes, and enforce our agreements. The retention period may vary depending on the type of personal data and the purposes for which it is processed. When personal data is no longer needed, we securely delete or de-identify it.

Our website and Services are not directed to children under 18, and we request that they do not provide personal data to seek Services directly from BlaaizPay. We do not knowingly collect information from, or conduct business with, children under 18. If as a parent or guardian, you become aware that your child or ward has provided us with any information without your consent, please contact us through the details provided in this Privacy Policy. In certain countries, we may impose higher age limits as required by applicable law.

BlaaizPay processes personal data based on the following lawful grounds. For some jurisdictions, there may be additional legal bases, and we rely on those legal grounds for processing personal data section below:

• Consent: Processing of personal data is lawful if the data subject has given consent for one or more specific purposes.
• Contractual necessity: Processing of personal data is necessary for the performance of a contract to which the data subject is a party, or to take steps at the request of the data subject prior to entering into a contract.
• Legal obligation: Processing of Personal Information is necessary for compliance with a legal obligation to which BlaaizPay is subject.
• Vital and legitimate interests: Processing of personal data is necessary to protect the vital interests of the data subject or another person or entity. Where allowed under applicable law, we rely on our legitimate business interests to process your personal data. Examples may include:
• Detection, monitoring, and prevention of fraud and unauthorised payment transactions;
• Mitigation of financial loss, claims, liabilities or other harm to BlaaizPay, Merchants or Merchant’s customers;
• Determination of eligibility for and offering new BlaaizPay services;
• Response to inquiries, delivery of Service notices, and provision of customer support;
• Promotion, analysis, modification, and improvement of our Services, systems, and tools, as well as the development of new products and services, including enhancing the reliability of the Services;
• Management, operation, and improvement of the performance of our websites and Services, through understanding their effectiveness and optimizing our digital assets;
• Analysis and advertisement of our Services, and related improvements;
• Aggregate analysis and development of business intelligence that enable us to operate, protect, make informed decisions about, and report on the performance of our business;
• Sharing of personal data with third party service providers that offer services on our behalf and business partners that help us in operating and improving our business;
• Enabling network and information security throughout BlaaizPay and our Services; and
• Sharing of personal data among our affiliates.
• Public interest/official mandate: Processing of personal data is necessary for the performance of a task carried out in the public interest or in exercise of an official public mandate vested in BlaaizPay. We may also process personal data related to criminal convictions and offenses when such processing is authorised by applicable law, such as when we conduct sanctions screening to comply with AML and KYC obligations.

Depending on your location and subject to applicable law, you may have the following rights regarding our collection, use, and disclosure of your personal data:

• Right to request and access your personal data collected and stored by BlaaizPay.
• Right to be informed about your personal data.
• Right to object to automated decision-making and processing.
• Right to request rectification and modification of your personal data kept by BlaaizPay.
• Right to request deletion of your personal data.
• Right to request the movement of personal data from BlaaizPay to a third party, also known as the right to data portability.
• Right to withdraw your consent.
• Right to object to the processing of your personal data if we are processing your data based on our legitimate interests; unless there are compelling legitimate grounds or the processing is necessary for legal reasons, we will cease processing your personal data upon receiving your objection
• Right to withdraw your consent.
• Right to object to the processing of your personal data if we are processing your data based on our legitimate interests; unless there are compelling legitimate grounds or the processing is necessary for legal reasons, we will cease processing your personal data upon receiving your objection
• Right to object to direct marketing and request that BlaaizPay restricts the processing of your personal data.
• Right to submit a complaint to the Nigeria Data Protection Commission (NDPC).

Your request will be reviewed and addressed by BlaaizPay's Data Protection Officer within a 30-day period. You may review and update your Personal Information directly through your account settings or by contacting us.

You have choices regarding the personal data you provide to us and how it is used. You can choose not to provide certain personal data, although certain or all features of our Services may be unavailable as a result of your choice. You can also modify or delete your personal data through your BlaaizPay account settings or by contacting us directly. You can choose to opt out of receiving marketing communications from us by following the unsubscribe instructions in the communications or by contacting us directly.

As an international business outfit, we may need to transfer your personal data to third-party services in countries outside your own. When doing so, we implement measures to comply with relevant data protection laws and ensure your data's security. We put in place appropriate safeguards, following best practices and applicable data protection laws, to protect your personal data when shared with third-party service providers. We also ensure that any third-party processors are subject to robust data protection laws in their country, equivalent to or closely equivalent to those in your country of origin, to safeguard your personal data. When we share your personal data with a third-party processor within your country, we ensure that BlaaizPay has a written contract in place with that processor, requiring them to implement adequate protection and security measures, in accordance with applicable laws and regulatory standards, to safeguard your personal data.

Please note that this Privacy Policy does not extend to third party sites linked to our website. We are not responsible for the privacy practices of any third parties or the content of linked websites. We recommend that you always read the privacy and security statements on these third-party websites.

We may need to update, modify or amend this Privacy Notice as our technology evolves and as required by law. If we materially change the ways in which we use or share personal data previously collected from you through our Services, we will provide notice or obtain consent regarding such changes as may be required by law. The “Last updated” legend at the top of this Policy indicates when this Policy was last revised. Any changes are when we post the revised Policy on our website.

We advise that you check this page often, referring to the date of the last modification on the page. If you object to any of the changes to this Privacy Policy, you must cease using this website or any of our Services. Where you continue to use this website and/or any of our Services, you shall continue to be bound by the terms of this Privacy Policy.

Any violation of this Privacy Policy should be brought to the attention of our Data Protection Officer for appropriate sanctioning and treatment. You certify that the information provided to register as a Merchant is correct to the best of your knowledge. Furthermore, when providing the personal data of any other person, you confirm that you are only providing accurate and up-to-date data in accordance with their instructions, and are able to provide evidence of their consent to the data processing described in this Policy as and when required by BlaaizPay. Please note that any attempt to mislead may result in prosecution and the deliberate provision of inaccurate data results in a privacy violation.

If you have any questions relating to this Privacy Policy, or complaints or would like to find out more about exercising your data privacy rights, please reach out to our DPO via email at compliance@blaaizpay.co. For further queries, our Data Protection Officer may be reached at the following address:

11a Oko Awo, Victoria Island, Lagos.