Updated on: 31st January 2024

PRIVACY POLICY

This Privacy Policy governs the manner in which Pecantrust Microfinance Bank Limited ("Pecan Bank," "we," "our," and "us”) collects, uses, stores and discloses information collected from our users("you). This policy describes what information we collect about you, how we collect and use the information you share with us, and with whom we share that information, you don’t have to share any information with us, but to use our services, well need some information from you. This policy contains information about when we share your personal information with third parties (such as our credit bureaus and service providers).

This Privacy Policy governs the manner in which Pecantrust Microfinance Bank Limited ("Pecan Bank," "we," "our," and "us”) collects, uses, stores and discloses information collected from our users("you). This policy describes what information we collect about you, how we collect and use the information you share with us, and with whom we share that information, you don’t have to share any information with us, but to use our services, well need some information from you. This policy contains information about when we share your personal information with third parties (such as our credit bureaus and service providers).

e may update this Privacy Policy from time to time to reflect current privacy practices. When we make changes to this policy, we will notify you by revising the “effective date” at the top this policy, and in some cases, we may provide you with additional notice (such as adding a statement to the homepages of our mobile application or website).

CONSENT

By accessing or using our services or otherwise providing your personal data, you accept this Privacy Policy and consent to the processing and transfer of your personal data when you sign up, and use our website, mobile application including but not limited to related sites, applications, promotional activities and offline interactions or visits to our office(s). The Personal Data we collect is governed by the Nigerian Data Protection Regulation (NDPR)

WHAT INFORMATION WE COLLECT

You may be asked to provide your information including personal data anytime you contact us or otherwise to provide better services including but not limited to adverts and content, performance evaluations, improve communication, perform due diligence (legal and business) and develop new services for all our users.

Categories of Personal Data

e collect the personal data you provide to us depending on the products and services. These applies to opening a Pecan Bank account or when you communicate with us about your Pecan bank account. The type of personal data we may collect includes:

PERSONAL DATA WE COLLECT

We (or our service providers acting on our behalf) may collect information about your use of our services. This information may include Personal Information as well as statistical information that does not identify you(“Analytics”). Some Analytics may be correlated with Personal Information. When Analytics are, directly or indirectly, associated or combined with Personal Information, such Analytics will be considered Personal Information for Purposes of this Privacy Policy.
Device Information:
This includes device specific information (such as hardware model, operating system version, unique device identifiers, and mobile network information, including your phone number). We may associate your device identifiers or mobile phone number with your pecan bank account.

Log Information:
We may record or log information from your devices, their software and your activity accessing or using our services. This information may include:

Location Information:
information regarding your current location disclosed by GPS technology and other sensor data from your device, offline address, IP address, information about things near your device such as Wi-Fi access points, cell towers, browser plug-in types ad versions, system activity, crash reports, date, time and referrer Uniform Resource Locators (URL) clickstream including date and time of your request with your prior consent. Any information collected via your use of google maps will be transmitted directly to google and not collected by us. Please refer to Google’s privacy policy for details about their collection, use and sharing of this information.

USE OF COOKIES AND OTHER

We use cookies to personalize and improve our services for you and to collect aggregate information about the usage of our services. A cookie is a text file or other local storage identifier provided by your browser or associated applications. We use cookies for record-keeping purposes to enhance quality of your use of our services. We may also collect information using web beacons (also known as “tracking pixels”). These are electronic images that may be used in our services or emails and help deliver cookies, count visits, understand usage and campaign effectiveness and determine whether an email has been opened and acted upon.

HOW WE USE YOUR PERSONAL INFORMATION

We may use your information including personal data as follows:

We will use the information provided by you to provide you or permit selected third parties to provide you, with information about goods or services we feel may interest you. If you are an existing customer, we will only contact you via electronic means (e-mail or SMS) with information about goods and services similar to those, which were the subject of a previous sale or negotiations of a sale to you. If you are a new customer, and where we permit selected third parties to use your data, we (or they) will contact you by electronic means only if you have consented to this. If you do not want us to use your data in this way, or to pass your details on to third parties for marketing purposes, you may unsubscribe from promotional emails via a link provided in each email.

HOW WE SHARE INFORMATION

You agree that we have the right to share your information and any other information you share with us:


LEGAL BASIS FOR THE PROCESSING OF PERSONAL INFORMATION

We may process your Personal Data in the regular management of our business and where we have a legal basis to do so. We consider the legal basis for using your Personal Data as set out in the Nigeria Data Protection Regulation (NDPR). These include:


PRIVACY BY DESIGN

When designing and implementing a new business or technological process involving the collection, use or disclosure of personal data, we will carefully consider the need for structured privacy planning for this process. For example, the Bank will assess the necessity of gathering solely the pertinent information essential for the initial business process.

SECURITY OF DATA

We have implemented thorough measures to safeguard your personal information from accidental loss, unauthorized access, or misuse by third parties. These measures include the implementation of appropriate technical and organizational procedures, as well as security protocols. Our processes are designed specifically to protect your data from unauthorized access, unlawful processing, accidental loss, damage, or destruction. This includes restricting access to your personal data to only those employees, agents, and third parties who have a legitimate business need to access it.

As part of our standard procedures, Pecan Bank adheres to global Information Security Management Systems (ISMS) protocols and integrates both digital and physical security measures to mitigate or eliminate the risk of data privacy breaches. Nevertheless, we strongly advise against sharing confidential information, including passwords, with anyone.

Furthermore, it is important to note that despite our efforts to maintain a secure online environment, we cannot ensure 100% safety on the internet. As a precaution, we kindly urge you to protect your Pecan Bank account login username and password, refrain from sharing it with others and access our services within a secure setting. In the event that instructions are received using your Pecan Bank account login information, we will interpret this as authorization for those instructions. By using our services, you agree to promptly notify us of any unauthorized use of your account or security breaches.

DISCLOSURE OF PERSONAL DATA

We may disclose any information we collect about current and former customers to affiliates as follows:

We refrain from sharing your personal information with any third parties for marketing purposes.

WHERE WE STORE YOUR DATA

We transfer and store your personal information in our offices and authorized computer systems within Nigeria. By submitting your data, you consent to this transfer, storage, and/or processing. We have implemented appropriate measures to ensure the secure treatment of your data in accordance with this Privacy Policy.

All the personal information you provide is stored on our secure servers. For added security, all transactions are encrypted using Secure Sockets Layer (SSL) technology.

YOUR RIGHTS

The Nigeria Data Protection Regulation (NDPR) gives you certain rights in respect of the information we hold about you. Below is a highlight of some of those rights. This is not a complete, exhaustive processed statement of your rights in respect of your Personal Data:


CHILDREN'S PRIVACY

Our services are not intended for children under the age of 18 without the approval of a guardian. All personal information for such customers is provided by the guardian. It is essential for a parent or guardian to thoroughly review this policy to understand how we collect, use, and disclose all personal information provided.

Except as it pertains to the services or products of the bank, we do not knowingly collect personal information from children under the age of 18, except under the conditions stated above. If we become aware that we have collected Personal Data from anyone without verification of parental consent, we take appropriate steps to remove that information from our servers. Please contact us as provided in the “Contact Us” section below for further assistance.

RETENTION OF INFORMATION

Your Personal data will only be retained to achieve the purposes for as long as it is active or is required to provide you with our services or comply with our legal and statutory obligations.

BREACH OF DATA PRIVACY

While Pecan Bank takes reasonable precautions to minimize the occurrence and impact of personal data breaches, it's important to acknowledge that the risk cannot be completely eliminated. Therefore, if there is reasonable suspicion or awareness of a personal data breach or compromise of personal data integrity or confidentiality, Pecan Bank will promptly, within 72 hours of such knowledge, report the details of the breach to NITDA.

In cases where it is determined that such a breach poses a risk to your rights and freedom, Pecan Bank will, within 7 days of such knowledge, take steps to inform you of the breach incident. This communication will include details of the breach, the potential risks to your rights and freedom resulting from the breach, and any recommended course of action to remedy the situation.

DELETION OF PERSONAL DATA

We store data until it is no longer necessary to provide our services and Pecan bank products, or until your account is deleted, whichever occurs first. This differs per case, depending on the nature of the data, why it is collected and processed and relevant legal or operational retention needs. When you delete your account, we delete all financial transactional history, communications and you will not be able to retrieve this information later. Note that this policy does not apply to account deactivation.

TRAINING

Pecan Bank ensures comprehensive training on data privacy and protection for all employees involved in collecting, accessing, and processing personal data. This training is aimed at equipping them with the necessary skills, knowledge, and competence to effectively handle the compliance framework outlined in this privacy policy and the Nigeria Data Protection Regulation (NDPR). Additionally, Pecan Bank develops an annual capacity-building plan to enhance its employees' understanding of data privacy and protection, aligning with the requirements of the Nigeria Data Protection Act.

CHANGES TO OUR PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect current privacy practices. When we make changes to this policy, we will revise the “effective date” of this policy and notify you by posting a notice on our website. You are advised to review this privacy policy periodically for any changes.

CONTACT US

If you have questions, complaints or suggestions relating to the processing of your personal information by Pecantrust Microfinance Bank or require clarification regarding this privacy policy, you can us using any of the contact below:

Email: info@mypecanbank.com or our visit our office at
No. 32, Grace Anjous Drive, Lekki Phase 1, Lagos State.