Privacy Policy 

1. Controller

Pickpadi Global Ltd is the data controller for personal data collected through this website and our dashboard. For data our customers send through the APIs about their own end users, we act as a processor on their behalf.

2. Data we collect

• Business details: legal name, registration numbers, directors and beneficial owners.
• Identity data: name, date of birth, BVN/NIN, ID documents and selfies for verification.
• Contact data: email, phone number and address.
• Financial data: account numbers, transactions, balances and card metadata.
• Technical data: IP address, device, browser, logs and cookies.
• Communications: enquiries, support tickets and call notes.

3. How we use it

• To provide, operate and secure the services.
• To verify identity and meet KYC, KYB, AML and sanctions obligations.
• To detect and prevent fraud and abuse.
• To communicate with you and provide support.
• To improve our products using aggregated or de-identified data.
• To send marketing where you have consented — you can opt out at any time.

4. Legal bases

We rely on performance of a contract, compliance with legal obligations, legitimate interests (such as security and fraud prevention) and, where required, your consent.

5. Sharing

We do not sell personal data. We share it only with partner banks and payment institutions, card networks, identity and verification providers, cloud and infrastructure vendors under contract, professional advisers, and regulators or law enforcement where legally required.

6. International transfers

Where data is transferred outside Nigeria, we use appropriate safeguards such as contractual clauses and transfer only to recipients that offer adequate protection.

7. Retention

We keep records for as long as needed to provide the service and to meet legal requirements — financial and KYC records are generally retained for at least five years after the relationship ends — then delete or anonymise them.

8. Security

We use encryption in transit and at rest, role-based access control, audit logging, secure key management and regular reviews to protect personal data.

9. Your rights

• Access a copy of your data
• Correct inaccurate data
• Request deletion where lawful
• Object to or restrict processing
• Data portability
• Withdraw consent
• Complain to the Nigeria Data Protection Commission

10. Contact

Submit privacy requests through the contact form on this page. We respond within 30 days.