Unifina Limited Privacy Policy

Effective Date: 31st October 2026 | Last Updated: 2nd November 2026

About This Privacy Policy

Unifina Limited ("Unifina", "we", "us" or "our") respects the privacy of individuals who access or use our financial technology platform, mobile application, website and associated services.

We are committed to processing personal data lawfully, fairly, transparently and securely, in accordance with applicable Nigerian data protection legislation.

This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, when we disclose it to third parties, how long we retain it and the rights available to individuals whose personal data we process.

This Policy is prepared with reference to the Nigeria Data Protection Act, 2023 ("NDPA"), the Nigeria Data Protection Act General Application and Implementation Directive, 2025 ("GAID"), and other applicable Nigerian laws and regulatory requirements.

Our financial services involve arrangements with third-party service providers, including 9 Payment Service Bank ("9PSB") for banking infrastructure and account-related services and QoreID for identity verification.

Certain personal data must be processed to enable us and our service providers to verify identities, establish and maintain accounts, facilitate financial transactions, prevent fraud and satisfy applicable legal obligations.

This Policy applies to individuals who:

Visit our website at www.unifina.com.ng.
Register for or use the Unifina mobile application.
Create, maintain or seek to upgrade an account through our platform.
Use our payment, transfer, budgeting, savings-related, group collection or bill payment features where available.
Contact our customer support or communicate with us about our services.
Participate in transactions or shared financial activities through the platform, including as a recipient or participant.

This Policy should be read alongside our applicable Terms of Service and other relevant product notices.

1. Who Is Responsible for Your Personal Data?

Unifina Limited is responsible for determining the purposes and means of processing personal data within the aspects of its platform and operations that it controls.

Company Name: Unifina Limited
Registered Address: No. 1 Ogbelle Layout, Jeddo, Warri, Delta State, Nigeria.
Website: https://unifina.com.ng
Privacy and Support Email: support@unifina.com.ng

For processing activities undertaken independently by partner financial institutions or identity verification providers, those organisations may have separate responsibilities under applicable data protection legislation.

The allocation of responsibilities between Unifina and its partners depends on the relevant processing activity and applicable contractual arrangements.

You may contact us using the information above for privacy-related enquiries, requests or complaints.

2. Lawful Basis for Processing Personal Data

Unifina processes personal data only where an applicable lawful basis exists.

Depending on the nature and purpose of processing, we may rely on one or more of the following lawful bases.

2.1 Performance of a Contract

We process personal data where necessary to provide our services, establish and maintain your account, fulfil transaction instructions or take steps at your request before entering into a contractual relationship.

This includes processing information necessary to:

Register and administer a Unifina account.
Verify account contact information.
Facilitate account creation and upgrades through our financial infrastructure partner.
Process transfers, payments and other supported transactions.
Provide daily budgeting, transaction history and financial management functionality.
Administer group collections, bill splitting and payment requests.
Respond to account-related service requests.

2.2 Compliance with Legal Obligations

We may process personal data where necessary to comply with legal and regulatory obligations applicable to Unifina or the financial services provided through our partners.

These obligations may concern:

Customer identification and verification.
Know Your Customer (KYC) requirements.
Anti-money laundering and counter-terrorism financing controls.
Applicable sanctions and politically exposed person screening.
Financial transaction recordkeeping.
Fraud reporting and regulatory compliance.
Responses to lawful requests from competent authorities.
Applicable tax, accounting and reporting requirements.

The information required for these purposes may vary depending on the services requested, account verification level and applicable regulatory requirements.

2.3 Legitimate Interests

Where permitted by law, we may process personal data where necessary for legitimate interests pursued by Unifina or relevant third parties, provided those interests are not overridden by your fundamental rights and freedoms.

Such interests may include:

Maintaining the reliability and security of our platform.
Detecting and investigating suspected fraud.
Preventing unauthorised account access.
Resolving technical errors and transaction disputes.
Improving the functionality and usability of our services.
Maintaining appropriate operational records.
Responding to enquiries and complaints.
Establishing, exercising or defending legal claims.

Where required, we assess the necessity and proportionality of such processing.

2.4 Consent

We rely on consent where consent is required or is the appropriate lawful basis for a particular processing activity.

Where we request consent, we will provide relevant information about the intended processing and any available choices.

Consent must be freely given, specific, informed and unambiguous.

You may withdraw consent at any time by contacting us or using an available consent-management control.

Withdrawal of consent does not affect the lawfulness of processing undertaken before withdrawal.

Where information is processed under another lawful basis, withdrawal of consent does not necessarily require that processing to cease.

We do not treat your mere use of our website, provision of personal data or acknowledgement of this Privacy Policy as blanket consent for every processing activity described in this Policy.

3. What Personal Data Do We Collect?

The categories of personal data collected depend on your interactions with Unifina, the services you request and the verification requirements applicable to your account.

3.1 Personal Identification Information

During registration and account administration, we collect information such as:

First name.
Middle name, where applicable.
Last name.
Date of birth.
Other personal details required by the relevant registration or verification process.

We use this information to establish customer records, identify account holders, facilitate verification and support account administration.

3.2 Residential Address Information

During onboarding and where required for account verification, we collect residential address details.

These may include:

Country.
State.
Local government area or city.
Residential street.
House or building number.
Other address details provided through the applicable onboarding form.

We use address information to maintain accurate customer records, support identity verification, meet applicable customer due diligence requirements and facilitate account creation or upgrades.

We may share relevant address information with 9PSB or an authorised verification provider where necessary for these purposes.

3.3 Contact Information

We collect:

Email address.
Mobile telephone number.
Information supplied when you contact customer support.

Your email address and mobile telephone number may be verified using one-time passwords or other supported verification procedures.

We use contact information to:

Verify your registration details.
Communicate account-related information.
Send security notifications.
Deliver transaction confirmations and service updates.
Respond to support requests.
Communicate material changes affecting your use of our services.

Where promotional communications require consent, they will be handled separately from essential operational and security communications.

3.4 Identity Verification Information

Unifina collects information required for customer identification and verification.

Depending on the applicable onboarding or account upgrade requirements, this includes:

National Identification Number (NIN).
Bank Verification Number (BVN).
Information returned from authorised identity verification processes.
Customer verification status.
Verification reference numbers.
Relevant verification outcomes.
Information necessary to resolve identity verification discrepancies.

Unifina uses QoreID to facilitate identity verification processes, including NIN and BVN verification.

Information submitted for verification is transmitted to QoreID as necessary for the relevant verification request.

We may receive verification results or related information from QoreID and use those results to determine whether the relevant identity verification requirements have been satisfied.

Relevant customer identification information is also transmitted to 9PSB for account creation, account upgrades and associated customer due diligence processes.

3.5 Facial Images and Liveness Verification

As part of the identity verification process, Unifina collects facial photographs or images captured during a liveness verification session.

These images are used to support identity verification, confirm that the verification process involves a live person and help prevent impersonation or fraudulent account creation.

Liveness verification information is transmitted to QoreID for the relevant verification process.

Relevant images, verification results and associated information may also be provided to 9PSB where required for account creation, customer verification or account upgrades.

Unifina stores the facial and liveness images collected through its onboarding process in encrypted form on its backend systems.

Facial images and liveness verification information may constitute sensitive personal data, including biometric data, where processed through technical means for the purpose of uniquely identifying an individual.

Such information is subject to applicable requirements concerning sensitive personal data.

Unifina does not use fingerprint authentication as a method of logging into its application.

The collection of facial images for identity verification is distinct from fingerprint-based account authentication.

We limit the use of liveness verification information to relevant identification, verification, security, fraud prevention and legally required purposes.

3.6 Customer Signature

Where required during customer verification or account upgrades, we collect an electronic signature provided through the application.

The signature may be used to satisfy relevant account documentation or verification requirements.

Where necessary, the signature is transmitted to 9PSB for the applicable account-related process.

Unifina stores collected signatures in encrypted form within its backend systems.

We do not use customer signatures for unrelated purposes.

3.7 Politically Exposed Person Declaration

During onboarding or customer due diligence, Unifina may request information about whether you are a politically exposed person (PEP).

This information is collected to support applicable financial crime prevention and customer due diligence requirements.

We may share relevant declarations and verification information with 9PSB and authorised verification providers where required for these purposes.

A PEP declaration is used for regulatory and risk assessment purposes and does not, by itself, establish wrongdoing.

3.8 Account and Financial Information

When you use Unifina's financial services, we may collect and process:

Account holder information.
Wallet or account identifiers.
Account numbers and relevant banking details.
Beneficiary names and account details.
Transaction amounts.
Transaction dates and times.
Transaction reference numbers.
Transaction status.
Payment descriptions or narrations.
Account balances and transaction history made available through the platform.
Information necessary to reconcile, investigate or resolve transactions.

We use this information to process your instructions, maintain transaction records, display account activity, support customer service and satisfy applicable financial recordkeeping requirements.

3.9 Budgeting and Financial Management Information

Where you use our budgeting and financial management functionality, we process information relating to:

Daily budget amounts.
Spending activity.
Budget balances.
Budget preferences.
Relevant transaction history.
Financial summaries and spending analyses.
Information you enter to organise or monitor your finances.

We use this information to provide the budgeting tools and financial insights available through the application.

3.10 Group Collections, Bill Splitting and Payment Requests

Where these services are available and used, we may process information such as:

Collection or group identifiers.
Group participation details.
Contribution amounts.
Payment requests.
Amounts owed or contributed.
Payment status.
Information necessary to administer shared payment activities.

Some information may be visible to other participants or group administrators where necessary for the particular feature.

We aim to limit such visibility to information reasonably necessary for the operation of the relevant feature.

3.11 Airtime, Data and Bill Payment Information

Where you use supported airtime, data or bill payment services, we may process:

Recipient telephone numbers.
Network or service provider details.
Selected products or payment plans.
Transaction amounts.
Customer or service reference numbers.
Relevant transaction confirmations.

Information necessary to fulfil the requested transaction may be shared with the relevant service provider or payment processing partner.

3.12 Account Security Information

We process information necessary to protect accounts and authenticate users.

This may include:

Account authentication identifiers.
Verification attempts.
One-time password verification records.
Security events.
Login activity.
Account access history.
Transaction authorisation records.
Security preferences and relevant account access controls.

Where a transaction PIN is used, it is intended to authenticate or authorise supported account activities.

PINs and other authentication secrets should be handled using appropriate security controls and must not be unnecessarily exposed to unauthorised persons.

3.13 Device and Technical Information

When you access the Unifina application or website, technical information may be processed to operate, protect and troubleshoot our services.

Depending on the technology actually used, this may include:

Device type and model.
Operating system and version.
Application version.
IP address.
Device or application identifiers.
Access timestamps.
Error and diagnostic information.
Relevant security and session information.

We use this information for platform functionality, security monitoring, troubleshooting, fraud prevention and service improvement.

We do not represent that Unifina collects every device identifier available on a mobile device.

3.14 Customer Support Information

When you contact us, we may collect:

Your name and contact details.
Account or transaction references.
The contents of your enquiry or complaint.
Supporting information voluntarily supplied by you.
Correspondence and resolution records.

We use this information to investigate enquiries, resolve complaints, maintain service records and comply with applicable obligations.

4. How We Collect Personal Data

We obtain personal data through the following sources.

4.1 Directly From You

This includes information you provide when:

Registering through the Unifina application.
Completing personal information or residential address forms.
Verifying your email address or telephone number.
Creating account security credentials.
Submitting NIN, BVN or other required identity information.
Completing a liveness verification.
Providing an electronic signature.
Completing a PEP declaration.
Initiating financial transactions.
Using financial management features.
Contacting customer support.

4.2 Through Our Service Providers

We may receive information from service providers involved in identity verification, account infrastructure and financial transactions.

These include QoreID and 9PSB.

The information received may include verification outcomes, account status, transaction information or other data necessary to provide the relevant service.

4.3 Automatically Through Our Platform

Certain technical information may be generated when you interact with our application or website.

This information is used only for relevant operational, security, analytical or service-related purposes supported by the systems in use.

5. How We Use Your Personal Data

Unifina uses personal data for specific, lawful purposes connected to the operation of its services.

These purposes include:

Account Registration and Administration

To create customer profiles, verify contact details, administer accounts and provide access to supported services.

Identity Verification and Customer Due Diligence

To verify identity information through QoreID and support the customer verification requirements of 9PSB.

Account Creation and Upgrades

To transmit relevant customer information to 9PSB for account establishment, account verification and upgrades.

Financial Transactions

To facilitate transfers, payments, collections, payment requests, bill payments and other supported financial activities.

Budgeting and Financial Management

To provide spending information, budgeting functionality and financial summaries.

Fraud Prevention and Security

To detect suspicious activities, investigate potential fraud, prevent unauthorised access and protect the platform and its users.

Regulatory Compliance

To fulfil applicable customer due diligence, financial crime prevention, reporting and recordkeeping obligations.

Customer Support

To investigate complaints, respond to enquiries and resolve service-related issues.

Service Maintenance and Improvement

To diagnose technical problems, maintain operational reliability and improve available services.

Legal Proceedings and Disputes

To establish, exercise or defend legal rights where necessary and permitted by law.

We do not use personal data for purposes that are incompatible with the purposes for which it was collected unless another lawful basis permits the processing.

6. Identity Verification and Account Onboarding

Unifina's onboarding process involves the collection and verification of personal information necessary to establish an account.

The registration process is designed to include the following stages:

Personal Information: Collection of the user's required identification and registration details.
Residential Address: Collection of residential address information.
Email Verification: Verification of the user's email address.
Telephone Verification: Verification of the user's mobile telephone number.
Transaction PIN Creation: Establishment of an account security credential.
Identity and PEP Information: Submission of required NIN information and politically exposed person declaration.
Liveness Verification: Collection and verification of facial images.
Account Creation: Transmission of relevant verified customer information to 9PSB to support account establishment.

Additional information, including BVN or electronic signature, may be requested where necessary for an applicable account verification level or upgrade.

The precise order and availability of onboarding steps may change to reflect operational or regulatory requirements.

Information submitted through onboarding is used for registration, identity verification, account creation, security and related lawful purposes.

Where an identity verification is unsuccessful or incomplete, account creation or access to certain services may be delayed, restricted or unavailable.

7. Sharing and Disclosure of Personal Data

We disclose personal data only where necessary for an identified lawful purpose, where permitted or required by applicable law, or where another appropriate lawful basis exists.

7.1 9 Payment Service Bank (9PSB)

Unifina works with 9PSB as a financial infrastructure and account services partner.

We transmit relevant customer information to 9PSB for purposes that include:

Customer account creation.
Customer identification and verification.
Account upgrades.
Account administration.
Relevant financial transaction processing.
Compliance with applicable banking and financial services requirements.

The information shared may include personal identification details, contact information, residential address, NIN, BVN, verification information, electronic signatures, facial images and other relevant customer due diligence information.

The information transmitted depends on the requirements of the particular account-related process.

9PSB may process information in accordance with its applicable legal obligations, contractual arrangements and privacy notices.

7.2 QoreID

Unifina uses QoreID to perform identity verification services.

Information submitted to QoreID may include:

Personal identification information.
NIN.
BVN.
Facial or liveness verification images.
Other information necessary for the specific verification request.

QoreID processes the information for the relevant identity verification activity and may return verification results to Unifina.

Its handling of information is also subject to applicable legal obligations and relevant contractual arrangements.

7.3 Payment and Bill Service Providers

Unifina works with 9PSB to fulfil a requested payment, airtime, data or bill payment transaction, we may share relevant transaction information with 9PSB to carry out such service.

Only information reasonably necessary for the applicable transaction would be shared.

7.4 Other Participants in Shared Financial Activities

Where you participate in a group collection, bill split or payment request, certain information may be displayed to other relevant participants or administrators.

This may include your displayed name, contribution or payment amount and payment status, depending on the functionality used.

We do not intend these features to provide unrestricted access to your identity verification documents, PINs or unrelated account information.

7.5 Restrictions on Disclosure

Unifina does not disclose personal data indiscriminately.

We do not sell customers' personal data to data brokers or advertisers.

We seek to limit third-party disclosures to the information necessary for the applicable lawful purpose.

8. How We Protect Your Personal Data

Unifina recognises the importance of protecting customer information, particularly financial information and identity verification records.

We use technical and organisational measures intended to protect personal data against unauthorised access, accidental loss, unlawful disclosure, alteration or destruction.

8.1 Encryption

Unifina stores customer information collected through its onboarding and verification processes in encrypted form within its backend systems.

This includes stored identity information, residential address details, facial and liveness images and electronic signatures.

Encryption is one of the measures used to reduce the risk of unauthorised disclosure.

8.2 Access Restrictions

Access to personal data should be restricted to authorised persons and systems with a legitimate operational requirement.

Access permissions should be managed in accordance with the sensitivity of the information and the responsibilities of the persons or systems involved.

8.3 Authentication and Account Protection

We use account authentication and verification mechanisms to protect access to supported services.

Customers are responsible for keeping their account credentials and transaction PINs confidential.

You should not disclose your PIN or one-time verification codes to unauthorised persons.

9. Personal Data Retention

Unifina Limited retains personal data only for as long as necessary to provide its services, fulfil the purposes for which the information was collected and comply with applicable legal and regulatory obligations.

We observe the principles of data minimisation and storage limitation under the Nigeria Data Protection Act, 2023, and the Nigeria Data Protection Act General Application and Implementation Directive, 2025.

Our retention practices distinguish between information necessary to maintain an active customer account, records that must be preserved under applicable financial regulations and personal data that is no longer required.

Under Section 8 of the Money Laundering (Prevention and Prohibition) Act, 2022, relevant financial institutions are generally required to preserve transaction records for at least five (5) years following completion of the transaction and customer identification and account-related records for at least five (5) years following termination of the business relationship.

Unifina adopts these applicable statutory periods as the basis for retaining legally required financial and customer identification records, subject to the requirements applicable to its services and financial infrastructure arrangements.

9.1 Customer Identification and KYC Records

Customer identification and verification records, including NIN, BVN, residential address information, verification results and other relevant customer due diligence information, are collected and processed for identity verification, account creation, account upgrades and compliance with applicable financial services requirements.

Where these records are subject to the recordkeeping obligations under the Money Laundering (Prevention and Prohibition) Act, 2022, they will generally be retained for at least five (5) years following termination of the customer relationship.

During this period, retained records will be protected against unauthorised access and processed only for purposes permitted by applicable law.

Upon expiry of the applicable retention period, the records will be securely deleted.

9.2 Transaction Records

Financial transaction records, including transaction amounts, dates, references, beneficiary details and relevant account activity, are retained to satisfy applicable financial recordkeeping and regulatory obligations.

Under the Money Laundering (Prevention and Prohibition) Act, 2022, relevant transaction records must generally be preserved for five (5) years following completion of the transaction.

This period is calculated from the date of the relevant transaction and does not necessarily begin on the date of account closure.

Transaction records will be securely deleted when the applicable retention period has expired and no other lawful obligation requires their continued preservation.

9.3 Facial Images, Liveness Records and Signatures

Facial images, liveness verification information and electronic signatures collected during onboarding or account upgrades are processed for identity verification, account creation, account upgrades and applicable regulatory compliance.

Unifina may retain such information, for the applicable statutory period, generally five (5) years following termination of the customer relationship.

9.4 Account and Contact Information

Personal identification details, residential addresses, email addresses, telephone numbers and other account administration information are retained while necessary to maintain and operate an active Unifina account.

When a customer closes their account, Unifina will discontinue processing information that is no longer necessary for the provision of services or another lawful purpose.

Information that is not subject to a legal retention requirement will be securely deleted without undue delay.

Information forming part of legally required customer identification or financial records may be retained for the applicable statutory period, generally five (5) years following termination of the customer relationship.

9.5 Account Closure and Permanent Deletion

When a customer requests account closure, Unifina will process the request in accordance with applicable account closure procedures.

Once account closure is completed, the customer's access to the closed account will be discontinued.

Personal data that is no longer necessary for an identified lawful purpose will be securely deleted without undue delay.

However, account closure does not automatically require immediate deletion of customer identification or financial transaction records that must be preserved under applicable law.

Such records will be retained only for the legally required period and will not be used for unrelated purposes.

Following expiry of the applicable retention period, Unifina will securely delete the relevant personal data.

Deletion will be carried out using appropriate technical and organisational measures designed to prevent unauthorised recovery or reconstruction of the information.

This includes personal data held in production systems and applicable backup environments, subject to secure deletion procedures and the relevant backup retention cycles.

10. Your Rights Under Nigerian Data Protection Law

Subject to applicable legal conditions and limitations, you have rights in relation to your personal data.

10.1 Right to Be Informed

You have the right to receive relevant information about how and why your personal data is processed.

This Privacy Policy is one of the ways we provide that information.

10.2 Right of Access

You may request confirmation of whether we process personal data relating to you and request access to that information, subject to applicable legal limitations.

10.3 Right to Rectification

You may request correction of inaccurate personal data or completion of incomplete information.

Where information has been verified against official records or is maintained by a financial infrastructure partner, additional verification procedures may be required before a correction can be completed.

10.4 Right to Erasure

You have the right to request the deletion of personal data held by Unifina Limited in accordance with the Nigeria Data Protection Act, 2023, and other applicable laws.

Upon receiving a valid deletion request, Unifina will assess the categories of personal data concerned and determine whether the information remains necessary for an active service or is subject to a lawful retention obligation.

Where personal data is no longer necessary for the purposes for which it was collected or processed, and no other lawful basis requires its continued retention, Unifina will securely delete the information without undue delay.

Account Closure and Deletion Requests

Where you request closure of your Unifina account, we will process the account closure in accordance with applicable financial services, security and regulatory requirements.

Following account closure, we will discontinue processing personal data for purposes that are no longer necessary.

Personal data that is not subject to a statutory retention requirement or another lawful basis for continued processing will be securely deleted without undue delay.

Retention of Legally Required Records

Certain customer identification, KYC, account and financial transaction records may be required to be retained following account closure.

Under the Money Laundering (Prevention and Prohibition) Act, 2022, relevant customer identification and account records are generally required to be retained for at least five (5) years following termination of the customer relationship, while relevant transaction records are generally retained for at least five (5) years following completion of the transaction.

Where these obligations apply, Unifina will retain the necessary records for the applicable statutory period.

During that period, retained information will be protected and processed only for purposes permitted by law.

Deletion Following the Retention Period

Once the applicable legal retention period expires, Unifina will securely delete the relevant personal data unless a specific legal or regulatory obligation requires its continued preservation.

Where continued retention is legally required, the information will be retained only for the duration and purposes of that requirement.

When the applicable obligation ends, the information will be securely deleted without requiring the customer to submit another deletion request.

Communication of Deletion Requests

Where we are unable to fulfil a deletion request immediately because of an applicable legal requirement, we will explain the relevant reason and, where appropriate, the applicable retention period.

Where a request can be fulfilled, we will take the necessary steps to delete the information in accordance with applicable law and our secure deletion procedures.

10.5 Right to Restriction of Processing

You may request restriction of certain processing activities where the applicable legal conditions are met.

10.6 Right to Object

You may object to certain processing activities, including processing based on legitimate interests, where the law provides that right.

We will assess such objections in accordance with applicable legal requirements.

10.7 Right to Data Portability

Where applicable, you may request personal data in a structured, commonly used and machine-readable format, or request its transmission to another controller where the legal requirements are satisfied.

10.8 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time.

Withdrawal does not invalidate processing lawfully undertaken before withdrawal.

10.9 Right to Lodge a Complaint

You may submit a complaint to Unifina concerning the processing of your personal data.

You also have the right to lodge a complaint with the Nigeria Data Protection Commission in accordance with applicable law.

11. How to Exercise Your Privacy Rights

To exercise an applicable data protection right, contact:

Unifina Limited — Privacy Enquiries
Email: support@unifina.com.ng
Address: No. 1 Ogbelle Layout, Jeddo, Warri, Delta State, Nigeria.
Website: https://unifina.com.ng

Please provide sufficient information to enable us to identify your request and determine the appropriate response.

For security purposes, we may need to verify your identity before disclosing, correcting or deleting personal data.

We will not require information that is unnecessary or disproportionate for verifying the request.

We will respond within the period required by applicable law and will inform you where additional time or information is lawfully necessary.

12. Data Protection Complaints and Remedies

If you believe your personal data has been processed unlawfully, inaccurately, unfairly or without appropriate protection, you may contact Unifina using the privacy contact details provided in this Policy.

We will assess complaints in accordance with their nature, relevant evidence and applicable legal requirements.

Where a complaint identifies an error or unlawful processing activity, we will take appropriate corrective measures.

Corrective measures may include rectification, restriction, deletion, security remediation or other steps required by law.

If you are dissatisfied with our handling of a privacy complaint, you may contact the Nigeria Data Protection Commission.

Nigeria Data Protection Commission (NDPC)
Official Website: https://ndpc.gov.ng

13. Personal Data Breaches

A personal data breach may involve accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to personal data.

Where Unifina becomes aware of a personal data breach, we will assess the nature of the incident, the categories of information affected, the potential consequences and the measures required to address the incident.

Where notification to the Nigeria Data Protection Commission is required under the NDPA, we will make the notification within the applicable statutory timeframe.

Where notification to affected individuals is required, we will provide such notification in accordance with applicable legal requirements.

We may also take appropriate steps to contain the incident, reduce potential harm and prevent recurrence.

The timing and content of notifications will be determined by the applicable legal requirements and the circumstances of the breach.

14. Accuracy of Personal Data

We take reasonable steps to maintain accurate personal data relevant to the purposes for which it is processed.

You are encouraged to provide accurate information during registration and to notify us where information requires correction.

Certain information, including verified identity details, may require additional checks before it can be amended.

We may request supporting information where reasonably necessary to confirm a requested correction.

15. Information Relating to Other Individuals

Some Unifina services allow users to initiate transactions, payment requests, bill splitting or group collection activities involving other individuals.

Where you provide information about another person, you should only do so where you have an appropriate basis to provide that information.

We process such information only to the extent necessary for the relevant transaction or service and any associated lawful requirements.

We do not authorise users to collect, disclose or misuse other individuals' personal data through our platform.

16. Marketing and Service Communications

Unifina may communicate with users about account activity, transaction confirmations, verification requirements, security notices, customer support and material service changes.

These operational communications are distinguished from optional promotional marketing.

Where consent is required for promotional marketing, we will obtain the necessary consent and provide a means to withdraw it.

Withdrawing consent for optional marketing does not prevent us from sending communications necessary for account security, transaction processing or other lawful operational purposes.

17. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in applicable law, regulatory requirements, our services, technology or personal data processing activities.

Where changes materially affect how personal data is processed, we will take appropriate steps to notify affected users as required by applicable law.

Notification may be provided through our website, mobile application, email or another appropriate communication channel.

Where a change requires new consent, we will seek that consent before relying on it for the relevant processing activity.

The current version of this Privacy Policy will be made available through our official website.

18. Contact Information

For questions, concerns, privacy requests or complaints relating to this Privacy Policy or the processing of personal data by Unifina, contact:

UNIFINA LIMITED

Registered Address:
No. 1 Ogbelle Layout, Jeddo, Warri, Delta State, Nigeria.

Email: support@unifina.com.ng

Website: https://unifina.com.ng

For matters requiring regulatory escalation, individuals may contact the Nigeria Data Protection Commission through its official channels.

Nigeria Data Protection Commission: https://ndpc.gov.ng

Unifina Limited
We're all about management.