arrow_back Legal Center
Legal Document

Buselor Data Protection Policy

Document Type
Data Protection Policy
Effective Date
August 2026
Compliance
NDPA 2023

Buselor is committed to protecting the privacy and security of your personal data. This Data Protection Policy explains how we collect, use, store, and protect your personal information in compliance with the Nigeria Data Protection Act (NDPA) 2023 and other applicable laws.

Introduction

At Buselor, we take data protection seriously. This Data Protection Policy ("Policy") explains how we collect, use, store, share, and protect your personal information when you use our platform, websites, and services. We are committed to complying with the Nigeria Data Protection Act (NDPA) 2023 and other applicable data protection laws. This Policy applies to all users of the Buselor platform, including buyers, sellers, and visitors.

Data We Collect

We may collect the following types of personal data:

Category Data Types
Identity Information Full name, date of birth, gender, BVN, NIN, passport photograph, government-issued ID.
Contact Information Email address, phone number, delivery address, business address.
Financial Information Bank account details, transaction history, wallet balances, Settlement IDs.
Technical Information IP address, browser type, device identifiers, browsing history on our platform.
Biometric Information Fingerprints or facial recognition data (if you choose to use these features for KYC/security).

lock Sensitive Data: Biometric and government-issued ID data are collected solely for regulatory compliance and fraud prevention purposes. This data is encrypted and stored with the highest level of security.

Purpose of Data Processing

We process your data solely for legitimate business purposes, including:

settings To Provide Services To verify your identity, process payments and settlements, manage deliveries, and handle disputes.
gavel Regulatory Compliance To comply with CBN, EFCC, and NFIU requirements (KYC, AML, CFT, transaction monitoring).
security Security and Fraud Prevention To protect our platform and users from fraud, theft, and cyberattacks.
support Customer Support To respond to your inquiries and resolve issues.
analytics Improvement and Analytics To analyze usage and improve our services, products, and user experience.
marketing Marketing (with Consent) To send you promotional offers and updates, but only with your explicit consent, which you can withdraw at any time.

Data Sharing and Disclosure

We share your personal data only in the following circumstances:

handshake Service Providers With trusted third parties who assist us in providing our services. This includes:
  • VFD Microfinance Bank Limited: For processing financial transactions.
  • Kwik and Fez (Logistics): For coordinating deliveries.
account_balance Regulatory Authorities With the CBN, EFCC, NFIU, or other government bodies when legally required.
merge Business Transfers In the event of a merger, acquisition, or sale of assets, your data may be transferred to a successor entity.

info We do not sell your data. We do not rent, trade, or sell your personal information to third parties for marketing purposes.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. This includes:

  • Financial Records: Transaction records are retained for a minimum of 7 years to comply with CBN record-keeping regulations.
  • KYC Data: KYC data is retained for the duration of your relationship with us and for a period after termination to comply with regulatory mandates.
  • Account Closure: If you close your account, we will securely delete or anonymize your data unless we are required to retain it for legal reasons.

Data Security Measures

We implement robust technical and organizational security measures to protect your data from unauthorized access, alteration, disclosure, or destruction.

lock
Encryption Encryption of data in transit (using TLS/SSL) and at rest (using AES-256).
key
Access Controls Role-based access controls ensuring only authorized personnel have access to personal data.
api
API Security Strict IP whitelisting and API key management.
bug_report
Vulnerability Assessments Regular penetration testing and vulnerability scanning of our systems.
emergency
Incident Response A documented incident response plan to handle any data breaches quickly and effectively.

Data Breach Notification

notifications Breach Notification Protocol

In the event of a data breach that poses a risk to your rights and freedoms, we will:

  • Notify the Nigeria Data Protection Commission (NDPC) within 72 hours of becoming aware of the breach.
  • Notify affected users without undue delay and provide information on the nature of the breach and recommended steps to mitigate harm.

Your Data Rights

Your rights regarding your personal data are outlined in detail in our Privacy & Data Protection Policy and Your Data Rights Policy. You have the right to:

  • Access: Request a copy of your personal data.
  • Rectification: Correct inaccuracies in your data.
  • Erasure: Request the deletion of your data.
  • Data Portability: Request a copy of your data in a machine-readable format.
  • Withdraw Consent: Withdraw your consent to data processing at any time.

info To exercise any of these rights, please contact our Data Protection Officer at [email protected].

Contact Us

If you have any questions about this Policy or our data protection practices, please contact our Data Protection Officer:

Data Protection Officer

Email: [email protected]

Support Hours: Monday - Friday, 8:00 AM - 6:00 PM (WAT)

Address: BUSSELORX LTD, Lagos, Federal Republic of Nigeria

arrow_back Back to Legal Center Next: Your Data Rights arrow_forward