1. Who We Are
Corestone Technology Nigeria Limited ("Corestone", "we", "us", or "our") is a Nigerian financial technology company registered and operating in Lagos, Nigeria. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our website and financial services, in accordance with the Nigeria Data Protection Act (NDPA) 2023.
2. Data We Collect
We may collect the following categories of personal data:
- Identity data: full name, date of birth, government-issued identification (such as NIN, BVN, or passport).
- Contact data: phone number, email address, and residential address.
- Financial data: bank account details, income information, and employment status.
- Transaction data: financing applications, repayment history, and related records.
- Technical data: IP address, device information, and cookies when you visit our website.
3. How We Use Your Data
We use your personal data only for the following purposes:
- To assess and process your financing applications.
- To disburse funds and manage financing servicing and repayments.
- To verify your identity and prevent fraud.
- To comply with legal, regulatory, and licensing obligations (including under the NDPA and applicable Nigerian financial-services regulations).
- To communicate with you about your account and our services.
4. Sharing Your Data
We do not sell your personal data. We may share your data only with:
- Licensed Nigerian banks and payment processors for disbursement and repayment.
- Credit bureaus, where permitted by law, for credit assessment.
- Regulators and law enforcement, where required by law.
- Service providers who support our operations under strict confidentiality.
5. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes described in this policy, to comply with our legal and regulatory obligations, and to resolve disputes. When personal data is no longer required, we securely delete or anonymise it.
6. Your Rights
Under the NDPA, you have the right to:
- Request access to the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Object to or restrict certain processing of your data.
- Request deletion of your data, subject to legal and contractual limits.
- Lodge a complaint with the Nigeria Data Protection Commission (NDPC).
7. Data Security
We implement appropriate technical and organisational measures, including bank-level encryption, to protect your personal data against unauthorised access, loss, or disclosure.
8. Contact Us
If you have any questions about this Privacy Policy or your personal data, please contact us:
- Corestone Technology Nigeria Limited
- GBOLAHAN OWOLABI CRESCENT, OMOLE PHASE 1 GRA, OJODU, IKEJA, LAGOS STATE
- Email: [email protected]
- Phone: +234 0901 375 4331