Buselor Privacy & Data Protection Policy
Buselor is committed to protecting your privacy. This policy explains how we collect, use, disclose, and safeguard your personal information in compliance with the Nigeria Data Protection Act (NDPA) 2023.
Introduction
Buselor respects your privacy and is committed to protecting the personal information you share with us. This Privacy & Data Protection Policy ("Policy") describes how we collect, use, disclose, and safeguard your personal information when you use our platform, websites, and services. We comply with the Nigeria Data Protection Act (NDPA) 2023 and other applicable data protection regulations.
Information We Collect
We collect various types of information to provide and improve our Services:
How We Use Your Information
We use your personal information for the following purposes:
- Service Delivery: To provide, maintain, and improve our Services, including processing transactions and managing settlements.
- Fraud Prevention: To detect, prevent, and investigate fraud, security breaches, and other prohibited activities.
- Regulatory Compliance: To comply with legal and regulatory requirements, including KYC, AML, and CFT obligations as mandated by the CBN, EFCC, and NFIU.
- Communication: To communicate with you about your account, orders, service updates, and promotional offers (with your consent).
- Analytics: For internal analytics, business intelligence, and to improve our platform and user experience.
- Dispute Resolution: To investigate and resolve disputes between buyers and sellers.
info Legal Basis: We process your personal information based on your consent, contractual necessity, legal obligations, and our legitimate interests in providing a secure and functional marketplace.
Information Sharing and Disclosure
We may share your information in the following circumstances:
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
Data Security
We implement robust security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:
- Encryption: All sensitive data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption.
- Access Controls: Strict role-based access controls limit employee access to personal information.
- Monitoring: Continuous security monitoring, logging, and alerting systems detect and respond to potential threats.
- Vulnerability Management: Regular vulnerability assessments, penetration testing, and security audits.
- Incident Response: A dedicated incident response team to manage and mitigate any security breaches.
Our security protocols meet and exceed the standards required by the NDPA and the financial services industry.
Your Data Rights
Under the Nigeria Data Protection Act (NDPA) 2023, you have the following rights regarding your personal information:
info To exercise any of these rights, please contact our Data Protection Officer at [email protected].
Data Retention
We will retain your personal information for as long as necessary to fulfill the purposes outlined in this Policy, or as required by applicable law:
- Active Accounts: Information is retained while your account is active and for a reasonable period thereafter.
- Financial Records: Transaction and financial records must be retained for a minimum of 7 years in compliance with banking regulations.
- KYC Records: KYC records are retained for as long as required by regulatory obligations.
- Inactive Accounts: Data from inactive accounts may be archived or deleted after a specified period.
We will securely delete or anonymize your personal information when it is no longer needed for the purposes for which it was collected.
Contact Us
If you have any questions about this Policy, our data practices, or wish to exercise your data rights, please contact our Data Protection Officer:
Data Protection Officer
Email: [email protected]
Address: BUSSELORX LTD, Lagos, Federal Republic of Nigeria
We are committed to addressing your concerns and will respond to all legitimate requests within the timeframe required by the NDPA.