Privacy policy
1. General Information
This is a data privacy, protection and cookie policy (referred to as "Privacy Notice"). This Privacy Notice describes how Wallex and its Affiliates ("Wallex", "we", "us") collect, process, use, store, and share personal data when you interact with our website, applications, and services.
This notice aims to inform you about the personal data we collect, how we use it, and your rights. By continuing to use the Application, you acknowledge that you have reviewed this Privacy Notice, agree to its terms, and consent to the use of your Personal Data.
If you have any questions about this Privacy Notice, please contact us at [email protected].
Wallex commits to handling personal data in strict compliance with applicable data privacy and protection laws.
2. How we collect personal data
We collect personal data when you register to use any of Wallex's services.
3. The Information We Collect
a. Personal Information
Wallex collects various types of personal information, including:
- Name
- Telephone numbers
- Email address
- Physical address
- Financial information
- Other information relevant for "know your customer (KYC)" or due diligence.
This due diligence may occur during or after onboarding.
The information may be retained for a period guided by Wallex's data retention policy, data protection laws, and industry regulations.
In addition to KYC and due diligence, Personal Information is used for the following purposes:
- Provide you with the required services, including opening an account, carrying out necessary monitoring, ongoing compliance and reporting to regulators.
- Respond to your questions or requests.
- Address inappropriate use of our app.
- Prevent, detect and manage risk against fraud and illegal activities using internal and third party screening tools.
- Verify your identity and the information you provide in line with Wallex's statutory obligations using internal and third party tools.
- Resolve disputes that may arise, including investigations by law enforcement or regulatory bodies.
- Any other legal obligation which we may have with respect to the provision of our services.
We may retrieve additional Personal Information about you from third parties, such as our partners which you deal with, and other identification/verification services.
b. Transaction Data
During a transaction, we collect certain data from you depending on which of our services you are using. This information is collected and processed on an absolute necessity basis as required by law and industry standards to which we are mandated to comply.
c. Other Information
Analytics
we analyse our relationship and transactional information to derive unique data. For example, we may generate propensities, attributes and/or scores for marketing, security or fraud purposes.
Information derived from your use of our website and other technical products
this includes information regarding your interactions with our websites, applications or advertisements, including IP address, device identifiers, settings, characteristics, advertising ID, browsing history, web server logs, server log records, activity log records, keystroke timing and other information collected using cookies and similar technologies. We may also use such data to improve features, website content and analyse data to develop products and services.
Audio and Visual Information
this includes audio, electronic, visual or similar information relating to your interactions with us.
Government-Issued Identification Numbers
we may request a government issued ID to carry our verification of your identity. We may use third party services for this verification.
4. Purposes and Lawful Basis for Processing Personal Information
We may rely on one of more of the following lawful basis to process your personal data:
Purpose of Collecting and Processing
- KYC Verification and Onboarding
- Transaction Processing and Monitoring
- Issues Resolution
- Sales and marketing
- Generating de-personalized information for product development and improvement
- Fraud Monitoring, Chargebacks and Dispute Resolution
Categories of Data Collected
- Personal Data; Government-Issued Identification Numbers; Information derived from your use of our website and other technical products
- Transaction Data; Government-Issued Identification Number; Geolocation Information;
- Personal Data; Transaction Data
- Analytics Data
Lawful Basis
- Your Consent
- Lawful purpose - we are required by our regulators to collect this information
- Legitimate interests (ours and those of others) such as to protect you, us, or others from threats (such as security threats or fraud); to enable or administer our business, such as for quality control, compliance, consolidated reporting and customer service; to manage corporate transactions, such as mergers or acquisitions; and to understand and improve our business or customer relationships generally
- To fulfil the terms of the contract which you sign with us at the point of onboarding
5. Purpose Limitation
Wallex collects Personal Information only for identified purposes and for which consent has been obtained.
Such Personal Information cannot be reused for another purpose that is incompatible with the original purpose, except consent is obtained for such purpose.
6. Data Minimization
Wallex limits Personal Information collection and usage to data that is relevant, adequate, and absolutely necessary for carrying out the purpose for which the data is processed.
Wallex will evaluate whether and to what extent the processing of Personal Information is necessary and where the purpose allows, anonymized data will be used.
8. Age Restriction
Our website and Services are not directed to children under 18. We do not knowingly collect information from, or conduct business with, children under 18. If as a parent or guardian, you become aware that your child or ward has provided us with any information without your consent, please contact us through the details provided in this Privacy Notice.
9. How We Protect your information
Wallex shall establish adequate controls in order to protect the integrity and confidentiality of Personal Information, both in digital and physical formats and to prevent Personal Information from being accidentally or deliberately compromised.
Wallex is committed to managing your Personal Information in line with global industry best practices. We protect your Personal Information using physical, technical, and administrative security measures to reduce the risks of loss, misuse, unauthorized access, disclosure and alteration, we also use industry recommended security protocols to safeguard your Personal Information. Other security safeguards include but are not limited to data encryption, firewalls, and physical access controls to our building and files and only granting access to Personal Information to only employees who require it to fulfill their job responsibilities. Any Personal Information processing undertaken by an employee who has not been authorized to carry such out as part of their legitimate duties is unauthorized.
Employees may have access to Personal Information only as is appropriate for the type and scope of the task in question and are forbidden to use Personal Information for their own private or commercial purposes or to disclose them to unauthorised persons, or to make them available in any other way.
10. Transfer of Personal Information
a. Third Party Processor within Nigeria
Wallex may engage the services of third parties in order to process your Personal Information collected by us. The processing by such third parties shall be governed by a written contract with Wallex to ensure adequate protection and security measures are put in place by the third party for the protection of Personal Information in accordance with applicable laws and regulatory standards.
b. Transfer of Personal Information to Foreign Country
We use third party services which may be located outside of the country in which the Wallex entity which collected or is processing your data is located. We ensure that when we share your personal data with such third party service providers, we ensure to put in place appropriate safeguard mechanisms, in accordance with best practices and applicable data protection law, to ensure the protection of your personal data.
11. Choices and Rights
Individuals who have Personal Information held by Wallex may exercise any of the rights listed below:
- Right to request and access their Personal Information collected and stored. Where data is held electronically in a structured form, such as in a database, you have a right to receive that data in a common electronic format;
- Right to information on their personal information collected and stored;
- Right to objection or request for restriction;
- Right to object to automated decision making;
- Right to request rectification and modification of Personal Information which Wallex keeps;
- Right to request for deletion of your data;
- Right to request the movement of data from Wallex to a third party; this is the right to the portability of data; and
- Right to object to, and to request that Wallex restricts the processing of their information.
Such requests will be reviewed by Wallex's Data Protection Officer and carried out except as restricted by law or Wallex's statutory obligations. You may decline to provide your personal Information when it is requested by Wallex, however, certain services or all the services may be unavailable to you. You may review your account settings and update your Personal Information directly or by contacting us.
12. Contact
If you have any questions relating to this Privacy Notice or would like to find out more about exercising your data protection rights, please reach out to us via email at "[email protected]".
13. Updates, Modifications & Amendments
We may need to update, modify or amend our Privacy Notice as our technology evolves and as required by law. We reserve the right to make changes to this Privacy Notice from time to time and notify Users of material changes. The Privacy Notice will apply from the effective date provided on our website at the time of publishing the updates.
We advise that you check this page often, referring to the date of the last modification on the page. If a User objects to any of the changes to this Privacy Notice, the User must cease using this website or any of our Services. Where such User continues to use this website and/or any of our Services, it shall continue to be bound by the terms of this Privacy Notice.