Privacy Policy

Privacy Notice for Individuals: Vale Finance

Vale Finance ("We", "Us", "Our", "Platform") provides financial technology services to individuals and corporate entities within and outside Nigeria. This Privacy Notice outlines how we collect, use, disclose, and protect your Personal Data in compliance with Nigeria's Data Protection Laws.

Definitions

• Data Protection Laws: Refers to the Nigeria Data Protection Act (NDPA), Nigerian Data Protection Regulation (NDPR), the NDPR Implementation Framework (NDPR-IF), and any relevant data protection regulations in force in Nigeria.
• NDPA: Nigeria Data Protection Act.
• NDPA: Nigerian Data Protection Regulation.
• NDPR-IF: NDPR Implementation Framework.
• NDPC Nigeria Data Protection Commission.
• Data Controller: An individual or legal entity who determines the purpose and means of processing personal data.
• DPO: Data Protection Officer.
• Personal Data: Any information relating to an identified or identifiable individual, such as names, identification numbers, location data, or online identifiers.
• Personal Data Breach: A breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data.
• Processing: Any operation performed on personal data, such as collection, storage, use, disclosure, deletion, etc.
• Users: Individuals or corporate bodies who use Vale Finance services.

Personal Data We Collect

We collect and process various types of personal data necessary for providing you with access to our services. Categories of data include, but are not limited to:

• Contact Information: Full name, email address, phone number, residential address.
• Identification Data: BVN, National ID, international passport, driver’s license.
• Financial Information: Nigerian Data Protection Regulation.
• Communication Data: Interactions with our support team, recorded calls (where applicable), emails.
• Usage Data Login timestamps, service usage behavior, navigation paths.
• Device and Log Data: Device type, operating system, IP address, browser type, access time.
• Other Voluntary Information: Any additional information you may provide during onboarding, surveys, or service use.

We only collect data necessary to provide and improve our services and will always seek your consent when legally required.

Lawful Basis and Purpose of Data Processing

Your Rights as a Data Subject

Under the Data Protection Laws, you have the following rights:

• Right of Access: Request a copy of your personal data held by us.
• Right to Rectification: Request corrections to inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data under specific circumstances.
• Right to Restrict Processing: Limit processing in certain scenarios.
• Right to Data Portability Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Withdraw your consent at any time.
• Right to Review Automated Decisions: Request human review of decisions made solely by automated means that significantly affect you.

To exercise any of these rights, please email: hello@vale.ng

We will respond to your request within one month and at no cost, unless otherwise permitted by law.

Data Security Measures

Vale Finance employs industry-standard measures to protect your personal data:

• Encryption: Secures your data in transit and at rest.
• Access Controls: Only authorized personnel can access sensitive data.
• Regular Security Audits: Identifying vulnerabilities and ensuring remediation.
• Data Backups: Daily backups to prevent data loss.
• Incident Response Plan Immediate investigation and response to breaches.
• User Authentication: Multi-factor authentication for user accounts.

Our Data Protection Officer ensures ongoing compliance and monitors the implementation of security controls

Data Transfer Outside Nigeria

We may transfer your data to countries outside Nigeria for processing or storage. Where we do so

• We ensure the country provides adequate data protection levels, or
• We implement appropriate safeguards such as standard contractual clauses, or
• We rely on your explicit consent where required.

Transfers may occur to countries such as the United Kingdom, Ireland, Germany, and the United States, where our data processing vendors and cloud services are based. Personal Data Retention

We retain your personal data only for as long as necessary for the purpose for which it was collected or as required by applicable laws and regulations. Retention periods depend on:

• Legal requirements
• Contractual obligations
• Legitimate business needs

After the retention period expires, your data is securely deleted or anonymized.

Contact Us

If you have any questions or complaints regarding this notice or the handling of your data, contact us at: hello@vale.ng