Data Protection Policy

DATA PROTECTION POLICY

INTRODUCTION

To provide you with our products and services, we need to collect, record, use, share and store personal and financial information about you (“Information”). Your Information may include Personal Data and Sensitive Personal Data as defined in the Nigeria Data Protection Regulation 2019 (“NDPR”) (as may be amended, replaced or re-enacted from time to time) and any other law or regulation governing Data Protection.

RESPONSIBILITY FOR YOUR INFORMATION

Our use of your information is governed by the applicable laws and regulation, and we, Upperlink Limited (‘Upperlink” or “We” or “Us”) are the Data Controller in respect of such information.

YOUR INFORMATION

This includes information which is:

  1. obtained from you or from third parties, such as employers, joint account holders, fraud prevention agencies, intermediaries who refer you to us and who have collected your information from you as part of that referral process, intermediaries who facilitate communication of information relating to your account between us and you, or other organizations or other parties associated with you, when you open for an account or any other product or service, or which you or they give to us at any other time; or
  2. obtained from the way you use and manage your account(s), from the transactions you make such as the date, amount and currency. You will be considered to have given your consent to us for the processing of your Personal Data and Sensitive Personal Data when you sign this form or indicate your acceptance of its terms.

HOW YOUR INFORMATION IS PROCESSED

We will process your Information including your Personal Data and Sensitive Personal Data on the terms detailed below;

  1. We will use your information: to manage your account(s), give you reports, provide our products and services, for assessment and analysis purposes (including behavioral scoring and market and product analysis), for administration purposes, to prevent and detect fraud, money laundering and other criminal or prohibited activity, to carry out regulatory checks, meet our obligations to any relevant legal or regulatory authority and to develop and improve our services to you and other customers and protect our interests.
  2. Where you provide personal information relating to others (e.g. dependents, employees, third parties) for the purpose of opening or administering your account and/or any other services, you confirm that you have their consent, or you are otherwise entitled to provide this information to us and for us to use it in accordance with the terms set out herein.
  3. To provide our services, and for ourselves and our third-party partners to carry out assessment and analysis of the services provided to you, we may share your information with other companies in Upperlink Limited, service providers and with our third-party partners who have referred your business to us. To provide our services, we may also share information with third party intermediaries who facilitate communications and delivery of products and services between us in relation to your account and the provision of the products and services which we offer. We will only share the minimum amount of your information necessary for us to achieve these purposes.
  4. We may also share your information with any statutory, governmental or regulatory body, as required by law, regulations or for other legitimate purposes. We will share your Personal Data and Sensitive Personal Data with fraud prevention agencies. We and other organizations may access and use this information to make assessments and to prevent and detect fraud, money laundering and other crimes.
  5. You agree that should a member of Upperlink Limited be required by law, regulation or by agreement with law enforcement authorities to provide information about you (including information regarding your account) to any law enforcement authority whether in Nigeria or elsewhere, we may do so and irrespective of whether the law enforcement authority in question requires the information for its own purposes or for the purposes of passing that information on to the law enforcement authorities in another country where you may be subject to such enforcement. Should we need any further information or documents from you to comply with our obligations or to answer any information requests received from a law enforcement authority, you agree to provide us with any such information and documentation no later than 30 days from us sending a request to you
  6. Information held about you may already be linked to records relating to your partner or members of your household where a financial association has been created. Another person’s record will be “associated” with yours when: (a) you ; (b) you advise us of a financial association with another person; or (c) if a credit reference agency has existing linked or associated records.
  7. Information held about you may already be linked to records relating to your other accounts with us where an association has been created. Another person’s record will be “associated” with yours when: (a) you manage several accounts; (b) you advise us of an association with another account.
  8. We will retain information about you after the closure of your account, if our business relationship has terminated, if you withdraw your consent, or if your application is declined or abandoned, for as long as permitted for legal, regulatory, fraud prevention and legitimate business purposes.

DATA SECURITY AND CONFIDENTIALITY

We will treat your information as confidential and will not use it for any purpose incompatible with those outlined in these Terms. Reasonable measures will also be taken to safeguard against unauthorized or unlawful processing and accidental loss or destruction or damage to your information. 

YOUR RIGHTS

  1. You can ask for a copy of the information we hold about you by writing to us.
  2. If you wish to withdraw your consent or have concerns relating to the processing of your personal information, you may do so at any time by notifying us at domains@upperlink.ng. We will respond to your concerns within 30 days of receiving your notice and provide you with the necessary documentation to execute withdrawing your consent.
  3. If you have any questions about this Data Processing Policy or our data processing activities, please contact us at domains@upperlink.ng

CHANGES TO THIS DATA PROTECTION POLICY 

Upperlink reserves the right to update sections of this Data Protection Policy at any time. Please check this policy periodically for any changes