1. Our commitment
Pecan complies with the Nigerian Data Protection Regulation (NDPR) 2019, the Nigeria Data Protection Act (NDPA) 2023 where applicable, and any successor instruments issued by NITDA / the Nigeria Data Protection Commission.
2. Lawful basis for processing
We process your personal data under one or more of the lawful bases in NDPR §2.2: consent (analytics, marketing communications), contract (operating your account, processing loans), legal obligation (KYC/AML, CBN reporting), and legitimate interest (fraud prevention).
3. Your rights
- Access: request a copy of the data we hold on you
- Rectification: correct inaccurate data
- Erasure: request deletion (subject to legal retention)
- Portability: receive your data in a machine-readable format
- Restriction: limit how we process your data
- Objection: object to processing based on legitimate interest
- Withdraw consent: at any time, where processing is based on consent
To exercise any right, email dpo@mypecanbank.com.
4. Data Protection Officer
Our DPO is responsible for overseeing NDPR compliance and answering data-subject requests. Contact: dpo@mypecanbank.com.
5. Cross-border transfers
Where we transfer your data outside Nigeria (e.g. for cloud hosting), we ensure the recipient country has adequate data-protection laws or we put in place standard contractual clauses approved by NITDA.
6. Breach notification
In the event of a personal-data breach likely to result in risk to your rights and freedoms, we will notify you and NITDA / the NDPC within 72 hours, in line with NDPR §3.1(2).
7. Audit & certification
Pecan conducts annual data-audit reports as required by NDPR §4.1(7). The most recent compliance certificate and audit summary are available from the DPO on request.
8. Complaints
If you believe we have mishandled your data, contact our DPO first. You may also lodge a complaint directly with NITDA at nitda.gov.ng.