GIDAUNIYAR ALHERI MICROFINANCE BANK LIMITED: PRIVACY POLICY

At Gidauniyar Alheri Microfinance Bank Ltd, we value your privacy and are committed to protecting your personal information.

This privacy policy outlines how we collect, use, disclose, and safeguard your information when you use our mobile App and other digital platforms. Please read this policy carefully to understand our practices regarding your information and how we handle it. By accessing or using our services, or by accepting our Terms and Conditions (the “Terms”) or any other terms that, incorporate this Privacy Policy by reference, you agree on behalf of yourself and any organization that you represent (together, “you”) that you have read and understood this Privacy Policy and that you consent to the collection, use, and sharing of information as discussed below. If you do not agree with this Privacy Policy, please do not access or use our Services or Platforms.

This Policy is incorporated into and made a part of our Terms and Conditions..

GOVERNING LAW

This Policy is made according to the provisions of NDPR and any other relevant Nigerian laws, regulations, or international conventions applicable to Nigeria.

USERS’ PRIVACY RIGHT

This Policy describes the user’s privacy rights regarding Gidauniyar Alheri Microfinance Bank Limited's collection, use, storage, sharing, and protection of a user’s personal information on our Platforms and in respect of our Services.

If a user creates a username, identification code, password, or any other piece of information as part of our Platform’s access security measures, such information will be treated as confidential, and will not be disclosed to any third party. Gidauniyar Alheri Microfinance Bank Limited reserves the right to disable any user identification code or password, whether chosen by a user or allocated by our Platform at any time if, in Gidauniyar Alheri Microfinance Bank Limited’s opinion, a user has failed to comply with any of the Terms (including this Privacy Policy). If a user is aware or suspects that anyone other than him/herself is aware of a user’s security details, kindly notify Gidauniyar Alheri Microfinance Bank Limited as soon as possible via the address below.

Gidauniyar Alheri Microfinance Bank Limited

50 Aminu Kano Way, Goron Dutse Kano State.

By continuing to use our mobile application (the “Mobile App”), you acknowledge and agree that you have carefully read and understood the terms of use and privacy policy. Your rights concerning your personal data are as follows:

• 1. The right to have access to Your Personal Data;
• 2. the right to be informed about the processing of Your Personal Data;

3. the right to rectify any inaccurate Personal Data or any information about You;

4. the right to review, modify, or erase Your Personal Data and any other information we have about You;

5. the right to restrict the processing of Your Personal Data;

6. the right to block Personal Data processing in violation of any law;

7. the right to be informed about any rectification or erasure of Personal Data or restriction of any processing carried out;

• 8. the right to the portability of Your Personal Data; and

9. the right to lodge a complaint to a supervisory authority within Nigeria.

USERS’ PERSONAL INFORMATION

Gidauniyar Alheri Microfinance Bank Limited collects and uses any information you supply when you interact with our mobile app and platforms, you share personal details like your name, Bank Verification Number, Valid Identification, address, and picture. By using the mobile app to transact, you also share details of your transactions with us. Additionally, we may request explicit permission to see other information like your address book, location, photos, and data from your camera.

Details you give when you sign up on the Mobile App, like your BVN, name, date of birth, gender, phone number, residential address, and email address.

Images would also be collected for KYC and other features like adding your profile picture.

Information you give us through the in-app chat so we can help you

We shall also access your contact list information to enable you to perform certain functions like sending airtime and data to a person on your contact list

We may collect internet protocol (IP) address, browser type, device ID, internet service provider (ISP), information about your computer and software, links materials You request, your approximate location, referring/exit pages, date/time stamp, and other metadata. Platforms may embed Javascript code into page loads, which instructs Users’ web browsers to make web requests back to our servers to collect information about the user page views and other activities

We collect certain information from the user’s browser using small data files called “cookies”. The Platform may use session cookies to help recognize a user who visits multiple pages during the same session so that the user does not have to enter a password to access each page. Session cookies terminate once the user closes the browser

We also use persistent cookies to collect, store, and track information. The Platform uses persistent cookies to store the user’s login ID (but not the user’s password) to make it easier for the user to log in when the user returns to the website. We encode our cookies so that only we can interpret the information stored in them. You can remove or block persistent cookies using the settings in your browser, but this may limit your ability to use our Platform.

• We may employ a software technology called clear gifs or web beacons that help us better manage content on the Platform as well as on the Platform emails, by informing us what content is effective. Clear gifs are tiny graphics with a unique identifier, similar function to cookies, and are used to track the online movements of Web users. In contrast to cookies, which are stored on a user’s computer hard drive, clear gifs are embedded invisibly on Web pages and are about the size of the period at the end of this sentence

GOVERNING PRINCIPLES

Gidauniyar Alheri Microfinance Bank Limited will always comply with the principles outlined below to collect, store, and use a User’s personal information.

Data shall be collected and processed with a specific, legitimate, and lawful purpose which shall be consented to by the User before collection and processing

Data may be further processed for archiving, scientific research, historical research and statistical purposes for public interest without obtaining the consent of the User;

Data collection and processing shall be adequate, accurate, and with consideration for the dignity of the human person;

Data shall only be stored for the period which is reasonably needed and as required by the relevant and applicable laws; and

Data shall be secured against all foreseeable hazards and breaches such as theft, cyberattack, viral attack, dissemination, and manipulations of any kind.

The lawful basis we rely on for processing your Personal Information are:

Your consent; Where you agree to us collecting your Personal Information by using our Services

We have a contractual obligation: Without your Personal Information, we cannot provide our Services to you.

Gidauniyar Alheri Microfinance Bank Limited also has a legal obligation to ensure full compliance with all Anti-Money Laundering and Counter-Terrorist Financing Laws. Gidauniyar Alheri Microfinance Bank Limited protects against fraud by checking your identity with your Personal Information

SHARING AND PROTECTION OF USERS’ PERSONAL INFORMATION TO THIRD PARTIES

Gidauniyar Alheri Microfinance Bank Limited provides such information to our subsidiaries, affiliated companies or other trusted third-party service providers or persons to process personal information on our behalf, including validating user credentials, securing data storage, marketing, customer service, fraud detection, and other applicable services. Gidauniyar Alheri Microfinance Bank Limited requires that these parties agree to process such information based on our instructions and in compliance with this Privacy Policy and any other appropriate confidentiality and security measures we consider essential and relevant subject to applicable law. Gidauniyar Alheri Microfinance Bank Limited requires that these third-party providers use PII and PID only in connection with the services they perform for Gidauniyar Alheri Microfinance Bank Limited.

Gidauniyar Alheri Microfinance Bank Limited may share user information with law enforcement agencies, government officials, or other third parties in the event of a court order or similar legal procedure, regulatory disclosure or when Gidauniyar Alheri Microfinance Bank Limited believes in good faith that the disclosure of user information is necessary or advisable to report suspected illegal activity or to protect Gidauniyar Alheri Microfinance Bank Limited’s property or legal rights. Except as expressly disclosed in this Privacy policy, Gidauniyar Alheri Microfinance Bank Limited will not sell or disclose user information to third parties. Gidauniyar Alheri Microfinance Bank Limited may disclose aggregated or other types of non-personally identifiable information to third parties for various purposes

SECURITY OF USERS’ PERSONAL INFORMATION

Gidauniyar Alheri Microfinance Bank Limited has implemented physical, technical, and procedural safeguards to protect user information from unauthorized access, disclosure, alteration, or destruction. Gidauniyar Alheri Microfinance Bank Limited uses computer safeguards such as firewalls and data encryption and authorizes access to personally identifiable information only for those employees, contractors, and agents who require it to fulfill their job responsibilities.

Gidauniyar Alheri Microfinance Bank Limited utilizes a higher duty of care to protect User information, such as credit card or bank account numbers, if disclosure of a particular type of User information could cause direct financial loss, Gidauniyar Alheri Microfinance Bank Limited further encrypts such information and transmits it under Secure Socket Layer (SSL).

Gidauniyar Alheri Microfinance Bank Limited shall only retain personal information reasonably required to keep providing Services to you. Where we no longer provide services to you, your information will be stored on our servers to the extent necessary to comply with regulatory obligations and for fraud monitoring, detection, and prevention. Where we retain your Personal Information, we do so in compliance with limitation periods under the applicable law

LOCATION

All Personal Information you provide to us is stored on our secure servers as well as secure physical locations and cloud infrastructure (where applicable) to provide seamless services to you, including but not limited to ensuring business continuity, the data that we collect from you may be transferred to or stored in cloud locations at globally accepted vendors’ data center. Whenever your information is transferred to other locations, we will take all necessary steps to ensure that your data is handled securely and in accordance with this privacy policy.

DATA CONFIDENTIALITY RIGHTS

REPORTING A PERSONAL DATA BREACH

Gidauniyar Alheri Microfinance Bank Limited is required to comply with the Nigeria Data Protection Regulation 2019 (“NDPR”) and other relevant laws and regulations regarding reporting requirements concerning data breaches and report any personal data breach where there is a risk to the rights and freedoms of a user. Where a personal data breach results in a high risk to a User, such a User also has to be notified unless subsequent steps have been taken to ensure that the risk is unlikely to materialize, security measures were applied to render the personal data unintelligible (e.g. encryption) or it would amount to a disproportionate effort to inform the User directly. In the latter circumstances, a public communication must be made, or an equally effective alternative measure must be adopted to inform such a user so that he/she can take any necessary remedial action.

AMENDMENT TO THIS POLICY

We may amend this Privacy Policy at any time by posting a revised version on this page. The revised version will be effective at the time we post it unless we provide additional notice or an opportunity to “opt-in” or “opt-out” because changes are material or retroactive. If you keep using our Services, you consent to all amendments to this Privacy Policy.