Privacy Policy

This Privacy Policy explains how we collect, use, disclose, store, and protect your data when you use our Platform and Services.

By using our Services, you consent to the practices described in this Privacy Policy. For any questions or requests, please contact us at info@theparkpay.com.

Theparkpay and its affiliates (“we”, “us”, “our” collectively, “Theparkpay”) is committed to protecting the rights and privacy of individuals in accordance with the Data Protection Legislation. This Privacy Notice (“Notice”) is designed to give you information on our privacy practices, the measures we take to protect the security of the data and to help you understand your rights and choices when we collect or process your Personal/ Business Data.

This Privacy Notice is applicable to all Theparkpay Services accessed by you.

Theparkpay focuses on the following core principles:

a. To empower the individual/ Business: Theparkpay wants you to be in charge of your Data and to make your own voluntary choices about your Data;

b. To keep and secure Personal/ Business Data: Theparkpay does not take your trusting us with your information for granted. We take responsibility in ensuring that appropriate security measures are put in place and your Personal/Business Data are protected;

c. To be transparent and to educate Users: For you to know what Personal/Business Data are, how we collect them, for what purposes they are collected and how we secure them;

d. To abide by local laws: Theparkpay is a global company with local privacy expertise. Our privacy practices may vary among the countries in which we operate to reflect local practices and legal requirements. Specific privacy notices may apply to some of our products and Services. Please visit the webpage or digital assets of the specific product or service to learn more about our privacy and information practices in relation to that product or service.

e. To ensure that Personal/Business Data collected are up to date: We take steps to ensure that Personal/ Business Data collected are kept accurate.

f. To collect and store Personal/Business Data on a “need to collect” basis: Theparkpay collects Personal/ Business Data to perform its Services for you. Where we store or retain Personal/ Business Data, we do this in accordance with retention obligations and requirements imposed by applicable laws.

We may collect, use or process Personal/ Business Data such as:

a. Identity Data: Information such as, your full name, your government-issued identity number, and your date of birth. This data is to enable us to verify your identity in order to offer our Services to you. We also collect copy(ies) of your passport, driving licence or other any government-issued identity card, a photograph or image in photo or video form (if applicable) and any other registration information you may provide to prove you are eligible to use our Services and in compliance with regulatory requirements on Know Your Customer (KYC), Know-Your-Business (KYB) and Anti-Money Laundering Laws (AML) and regulations;

b. Contact Data: This includes your country of residence, contact address, email address, contact number, details of the device you use and billing details. We require this data to reach out to you for the purpose of providing our Services to you and verifying your login requests.

c. Financial Data: Information, such as your bank account number, card details, Bank Verification Number (BVN), international bank account number (IBAN), sort code, beneficiary details, the merchant’s name and location, the date and the total amount of transaction, and other information provided by financial institutions or merchants.

d. Transactional Data: This is information relating to a payment or transaction when you as a merchant (using one or more of our payment processing Services) or as a User, are using our products or Services;

e. Marketing and Communications Data: This includes both a record of your decision to subscribe to or withdraw from receiving marketing materials from us. This also includes the content of your communication with us through mobile calls, call recordings, online chats or other means of communication. Records of your discussions with us, if we contact you and if you contact us.

We may also collect, store, use and transfer non-Personal/ Business Data or anonymized data such as statistical or demographic data.

As a principle, we do not collect any Sensitive Personal/ Business Data. However, if we do collect any Sensitive Personal/ Business Data, we will ensure compliance with the Data Protection Legislation.

This Privacy Notice applies to Theparkpay Services only. We do not exercise control over the sites displayed or linked from within our various Services. These other sites may place their own cookies, plug-ins or other files on your computer, collect data or solicit personal information from you. Theparkpay does not control these third-party websites and we are not responsible for their privacy statements. Please consult such third parties’ privacy statements and set appropriate controls from your settings when using any third-party services.

The Personal/ Business Data we have about you is directly made available to us when you:

a. sign up or register to use a Theparkpay Account;

b. use any of our Services or receive transfers through any of our Services;

c. contact our customer support team or correspond with us;

d. fill in our online forms or respond to surveys;

e. apply for employment opportunities we advertise;

f. register for and attend our webinars, events or online discussions;

g. contact us for other reasons.

We may also collect Personal/ Business Data about you from third party sources, such as credit bureaus, merchants, fraud prevention agencies, identity verification providers, analytics providers and other publicly available sources such as online directories and websites for due diligence checks.

The legal basis we rely on for processing your Personal/ Business Data are:

Your consent: Where you agree to us collecting and using your Personal/ Business Data.

We have a contractual obligation: Without your Personal/ Business Data, we cannot provide our Services to you.

We have a legal obligation: We have a legal obligation and responsibility to act in compliance with applicable laws, legislations and regulations to prevent fraud by verifying your identity, terrorism financing, proliferation financing and money laundering. To ensure we are fully compliant with all applicable financial legislations such as Anti-Money Laundering and Counter Terrorist Financing Laws, we must collect and store your Personal/ Business Data.

We have a legitimate interest: In certain instances and as permitted by law, we may rely on legitimate interests in our business to process your Personal/ Business Data. These may include sharing your data with our affiliates, or protecting against fraud by checking your identity before providing you with a service.

We may use your Personal/ Business Data that we collect to:

a. create and manage any Accounts you may have with us, verify your identity, provide our Services, and respond to your inquiries;

b. process your payment and other transactions (including authorization, clearing, chargebacks and other related dispute resolution activities) and provide other payment related services to you;

c. protect against and prevent fraud, un-authorized transactions, claims and other liabilities;

d. communicate with you about products, newsletters, advertisements, offers, programs and promotions of Theparkpay, financial institutions, merchants and other partners. You have the right to opt-out of this at any time;

e. send communication on service updates (downtime, service support, regulatory notices, etc);

f. communicate with you to resolve an inquiry, complaint or concerns with your Account. We also use your contact data to send you one-time passwords (OTP) for account authentication via short messaging service (SMS), email, whatsapp or other electronic mediums.

g. evaluate and improve our business, including developing new products and Services;

h. establish, exercise and defend legal rights, as necessary;

i. comply with applicable laws and regulations, including for compliance with Know-Your-Customer, Know-Your-Business, Anti-Money Laundering, anti-corruption, fraud monitoring, sanctions screening and risk assessment requirements, or as requested by any judicial process, law enforcement or governmental agencies having or claiming jurisdiction over Theparkpay;

j. use data analytics to improve our website, products or Services, user experience and to optimise our Services.

If you register for and/or attend any Theparkpay sponsored events, we collect your registration and contact details to complete your registration. We may also collect your images, in video or still form, audio-visual recordings or other forms of digital information gathered at such events by the media team and use them for promotion, publication or marketing of the event as Parkfirst may determine.

By virtue of the Data Protection Legislation, below are the rights you have as a User in relation to your Personal/ Business Data:

a. Right to be informed on how we process your data. This Privacy Notice explains our privacy practices.

b. Right to request for access to all or copies of your Personal/ Business Data by signing into your Account or contacting us. We will not give you Personal/ Business Data we hold on other individuals.

c. Right to request that Theparkpay delete or erase your Personal/ Business Data. Please note that this is a limited right which applies where the continued processing of your Personal/ Business Data has no legal justification. The exceptions to this right is where the applicable law requires Parkfirst, as a regulated financial services institution, to retain a historical archive of your Personal/ Business Data to fulfil regulatory requirements or where we retain a core set of your Personal/ Business Data to ensure we do not inadvertently contact you in future, where you object to your data being used for marketing purposes.

d. Right to correct or rectify any Personal/ Business Data that you provide which may be incorrect, out of date or inaccurate. You also have the right to ask us to update information you think is incomplete or outdated.

e. Right to opt-out of direct marketing. You have a right to ask us not to contact you for marketing purposes by adjusting your notification preferences on the settings page of our Sites or by opting out via the unsubscribe link in marketing emails we send you.

f. Right to object to processing: You have the right to object to or restrict the processing of your Personal/ Business Data in certain circumstances. Please note that where you object to or restrict us from processing your Personal/ Business Data, we might be unable to provide our Services to you.

g. Right to withdraw your consent where you had previously given the same.

h. Right to not be subject to a decision based solely on automated processing.

i. Right to request that we move or transfer your Personal/ Business Data across different Services we provide, or have it moved or transferred from us to another company in a structured, commonly used and machine-readable format. The exception to this right is where your request is not technically feasible or possible.

You can exercise your rights at no cost. However, we are permitted by law to refuse your request or charge a reasonable fee where your request is excessive, manifestly unfounded or would impose unreasonable costs on Theparkpay. If we decide to charge a fee, we will inform you before processing your request.

If you wish to exercise any of your rights set out above, please contact us at info@theparkpay.com. Where we are unsure of your identity, we might ask you for proof of your identity for security reasons, before dealing with your request. Where a third party exercises any of these rights on your behalf, we would need sufficient proof that you have authorized them to act on your behalf.

We may disclose or share your Personal/ Business Data with third parties as may be reasonably necessary for the purposes set out in this Notice.

We share Personal/ Business Data with external third parties in the following limited circumstances:

We provide such information to our subsidiaries or affiliated entities for the purpose of processing Personal/ Business Data on our behalf. We require that these parties agree to process such information based on our instructions, implement appropriate confidentiality and security measures and comply with the Data Protection Legislation.

We share your data with our third party providers or service providers, financial partners or suppliers for the purpose of effectively providing our Services to you. These services include identity verification and fraud prevention, customer service and support, analytics, payment facilitation by our banking and financial service partners including the card networks, communication service providers and information technology services

We may share your Personal/ Business Data to comply with a subpoena, court order, summons, police or other law enforcement agencies, regulatory requests (which may be outside your country of residence) or as required by law.

We may share your Personal/ Business Data where disclosure is reasonably necessary to:

a. satisfy any applicable law, regulation, legal process or enforceable governmental request;

b. Detect or prevent fraud including investigation of potential violations to our Terms of Service;

c. detect, prevent, or otherwise address security or technical issues, or

d. protect against imminent harm to the rights, property or safety of Theparkpay, its Users or the public as required or permitted by law.

We have your consent. In some instances, we may provide a service through a third party, which would require us to share your Personal/ Business Data to third parties authorised by you to receive such Information. The use of your Personal/ Business Data by an authorised third party is subject to the third party's Privacy Notice and Theparkpay shall bear no liability for any breach which may arise from such authorization by you.

If Theparkpay becomes involved in a merger, acquisition, or any form of sale of some or all of its assets, we may share your Personal/ Business Data with parties involved in the transaction and any entity that acquires our business will continue to process your Personal/ Business Data in line with this Privacy Notice, or a revised version that we will communicate to you.

The security of your Personal/ Business Data is important to Theparkpay. We are committed to protecting the information we collect. We maintain administrative, technical and physical controls designed to protect the Personal/ Business Data you provide, or we collect against loss or theft, as well as against any unauthorized access, risk of loss, disclosure, copying, misuse or modification.

Other security measures include but are not limited to, secure servers, firewalls, data encryption and granting access only to specific employees in order to fulfil their job responsibilities.

When you use any of your Accounts, we implore you to always use strong passwords (a combination of letters, numbers, upper and lower cases and special characters), enable two-factor authentication on your Accounts, ensure you do not share your password with anyone, and that your login credentials are kept confidential at all times.

We are committed to conducting our business in accordance with these principles in order to ensure that the confidentiality of your Personal/ Business Data is protected and maintained. We would take all reasonable steps to ensure that your Personal/ Business Data is secured and well protected.

We will only retain Personal/ Business Data on our servers for as long as is reasonably necessary as long as we are providing Services to you. If you close your Account, your data is stored on our servers to the extent necessary to comply with regulatory and Anti-Money Laundering obligations, being a 5-year minimum storage period, and further for the purpose of fraud monitoring, detection and prevention. Where we retain your Personal/ Business Data, we do so in compliance with limitation periods or retention obligations imposed by applicable law.

We may process your Personal/ Business Data in order to contact you or send you marketing content and communication about our products, Services or surveys, where we have obtained your consent. You may exercise your right to object to such contact from us or opt out from the marketing communication. Please note however that if you opt-out of marketing content, we may still send you messages relating to transactions and our Services, related to our ongoing business relationship.

We may ask you for permission to send notifications to you. Our Services will still work if you do not grant us consent to send you notifications.

Like many other websites, we use cookies to distinguish you from other Users, to measure your engagement with our website and to customise and improve our Services. Depending on how you manage your cookies settings and preferences, we may place cookies on your device when you visit our website. We will only place advertising and analytics cookies if you consent or accept these cookies. Some browsers may automatically accept cookies, while some can be modified to decline cookies or alert you when a website wants to place a cookie on your computer. If you do choose to disable non-essential cookies, it may limit your ability to get a full experience of our website. For detailed information on the cookies and how we use them see our Cookie Notice.

Theparkpay’s services and applications are not directed at persons under the age of eighteen (18) and we do not collect any Personal/ Business Data knowingly or directly from individuals who fall within this category.

Where you have any belief that Theparkpay has mistakenly or unknowingly collected information from a minor, please contact us to enable us to investigate and restrict such data collection.

Our business is global with affiliates and service providers located around the world. As such, we may need to transfer your Personal/ Business Data to help us provide you with our Services. Your Personal/ Business Data may be transferred to countries which may not have the same data protection laws as your country, but whenever we have to transfer or transmit your Personal/ Business Data internationally, we will take reasonable steps to ensure your Personal/ Business Data is handled securely in compliance with the Data Protection Legislation. We may use any of the data transfer mechanisms like checking that the data protection laws of the recipient country are adequate, ensuring the existence of appropriate safeguards like standard contracting clauses, or other data transfer mechanisms stipulated by the Data Protection Legislation.

From time to time, we may change, amend or review this Privacy Notice to reflect new Services or changes and place any updates on this page. All changes made will be posted on this page and where changes will materially affect you, we will notify you of this change by placing a notice online, on your Theparkpay dashboard or by email.

Theparkpay has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Protection Legislation. To exercise your rights or if you have any inquiries, comments or concerns with our privacy practices, please contact us at info@theparkpay.com. We will investigate and work on resolutions for your concerns within thirty (30) days and/or in accordance with the Data Protection Legislation.

Where we require more time to resolve your inquiry, we would communicate with you. We may request additional details from you regarding your inquiries and keep records of your requests and resolution.

If you feel that we have not addressed your questions or concerns adequately, you may contact the Nigeria Data Protection Commission here.

a. Account: means a profile created by a User on any Theparkpay platform or Theparkpay product.

b. Cookies: A cookie is a small data file that is transferred to your computer or mobile device. It enables us to remember your account log-in information, IP addresses, web traffic, number of times you visit, browser type and version, device details, date and time of visits.

c. Data Protection Legislation: means the Nigeria Data Protection Act 2023, Nigeria Data Protection Regulation 2019 and/or any other applicable legislation on the protection of Personal/ Business Data in Nigeria.

d. Personal/ Business Data: Any information that can be used to identify a living or natural person including email address, date of birth, mobile number, residential address, payment card, financial information such as bank account number, etc.), government-issued Identity credentials (e.g, national ID number, international passport, driver’s licence number, etc), or taxpayer identification number. It may also include information that is linked to you, for example, your internet protocol (IP) address, log-in information, information about your device or device’s web browser.

e. Services: means any products, applications, features, related websites, tools, software, offerings or any service offered by Theparkpay to you or accessed by you.

f. Sites: means any platform including but not limited to mobile applications, websites and social media platforms.

g. User: means an entity (“merchant”) or individual, who uses the Services or accesses the Sites, and has agreed to use the end services of Theparkpay.

h. Sensitive Personal/ Business Data: means details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, genetic, biometric data or any other category defined from time to time by the applicable Data Protection Legislation.

By using THEPARKPAY Technologies, you acknowledge that you have read, understood, and agree to this Privacy Policy.