Rexia (“we”, “us”, or “our”) is committed to protecting the privacy and operational confidentiality of our corporate clients, their representatives, and platform users. This Privacy Policy outlines how we collect, use, disclose, store, and safeguard personal and business data in compliance with applicable data protection regulations, including the Nigeria Data Protection Act (NDPA) and NDPR regulations.
1. Data We Collect
We collect data necessary to provide institutional financial infrastructure, including:
- Identity DataFull names, dates of birth, BVN, and government IDs of directors/signatories.
- Business DataRegistration details, corporate tax ID, proof of address, ownership structure.
- Transactional DataBank account details, transaction histories, counterparty payout details.
- Technical DataIP addresses, device identifiers, browser types, and system activity logs.
2. Lawful Basis & Usage
We process data under strict lawful bases: Contractual Necessity, Legal & Regulatory Compliance (CBN & NDPC guidelines), and Legitimate Interest. Data is utilized strictly to verify identity, execute cross-border payouts, detect fraud, optimize liquidity systems, and maintain statutory audit trails.
3. Data Sharing & Third-Party Transfers
We do not sell client data. Information is shared strictly with banking partners, international payment processors, regulatory/law enforcement agencies (where required by law), and vetted cloud infrastructure providers. Cross-border transfers adhere to strict statutory adequacy controls.
4. Enterprise Data Security & Retention
We deploy multi-layered technical security, including AES-256 encryption at rest, TLS 1.3 encryption in transit, Two-Factor Authentication (2FA), and strict internal role-based access controls. Data is retained strictly as mandated by financial regulatory statutes (typically 5–7 years) before secure deletion.
5. Client Rights & Compliance
Clients and representatives retain full legal rights to access, correct, or request restriction of data processing, subject to statutory financial compliance overrides. For inquiries or data subject rights requests, contact our Data Protection Officer at dpo@rexia.com.