Legal

Privacy Policy

Last updated: 8 May 2026

1. Introduction

This Privacy Policy explains how B A Technologies ("we", "us", "our") collects, uses, stores, and protects your personal information when you use the N3TBuy mobile application, website, and related services (the "Service"). By using N3TBuy, you consent to the practices described here.

We comply with the Nigeria Data Protection Act (NDPA) 2023, the Nigeria Data Protection Regulation (NDPR) 2019, and Central Bank of Nigeria (CBN) data-handling guidelines.

2. Information We Collect

2.1 Information You Provide

  • Identity data: full name, date of birth, gender, photograph, BVN and/or NIN.
  • Contact data: phone number, email address, residential address.
  • Account credentials: password (hashed), transaction PIN (hashed), biometric template (stored on-device only).
  • Financial data: wallet balance, transaction history, beneficiary bank accounts, virtual card details.

2.2 Information We Collect Automatically

  • Device data: device model, operating system, app version, unique device identifier.
  • Usage data: screens viewed, features used, transaction timestamps.
  • Network data: IP address, approximate location (city-level), network carrier.

2.3 Information from Third Parties

  • KYC providers (e.g. Lookmy, Ideefied) — to verify your NIN/BVN against NIMC and CBN records.
  • Banks & payment gateways — to confirm account ownership during withdrawals.
  • Telecom providers — to validate phone numbers and deliver airtime/data.

3. How We Use Your Information

We process your data for the following purposes:

  • Provide, operate, and maintain the Service.
  • Verify your identity (KYC) as required by Nigerian law.
  • Process transactions, settle payments, deliver airtime/data, and pay bills.
  • Detect, prevent, and investigate fraud, money laundering, and unauthorised access.
  • Send transaction receipts, security alerts, and important service updates.
  • Send marketing communications (only with your consent — you can opt out at any time).
  • Improve the Service through anonymised analytics.
  • Comply with legal obligations and respond to law-enforcement requests.

4. How We Share Your Information

We do not sell your personal data. We share it only with:

  • Service providers needed to deliver our Service (cloud hosting, SMS, email, payment processing, KYC verification).
  • Banks and partners — to settle wallet funding and bank transfers.
  • Regulators & law enforcement — when required by law or court order (CBN, EFCC, NDIC, NDPC).
  • Successors — in the event of a merger, acquisition, or sale of assets, your data may transfer to the new entity under the same protections described here.

5. How We Protect Your Data

  • Encryption in transit: all API traffic uses TLS 1.2+ with certificate pinning on mobile.
  • Encryption at rest: sensitive fields (PIN, password, BVN) are hashed or encrypted in the database.
  • Access control: only authorised staff can access user data, with full audit logs.
  • Single-device session lock prevents concurrent logins across devices.
  • Biometric authentication uses your device's secure enclave — we never see your fingerprint/face data.

6. Data Retention

We retain your data for as long as your account is active and for up to 7 years after closure — the period required by CBN for financial-record retention. After that, your data is securely deleted or anonymised, except where ongoing legal proceedings require longer retention.

7. Your Rights Under NDPA

You have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Delete your account and associated data (subject to retention obligations above).
  • Restrict or object to processing in certain circumstances.
  • Export your transaction history in a portable format.
  • Withdraw consent for marketing at any time.
  • Lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.

To exercise any of these rights, email support@n3tbuy.com. We respond within 7 working days.

8. Cookies & Tracking

The N3TBuy mobile app does not use third-party advertising trackers. The website (n3tbuy.com) uses minimal cookies only to remember your theme preference (dark/light mode). We do not use Google Analytics, Facebook Pixel, or any cross-site tracking technology.

9. Children's Privacy

N3TBuy is not intended for users under 18. We do not knowingly collect personal data from minors. If you believe a child has provided us with information, contact support@n3tbuy.com and we will delete it.

10. International Data Transfers

Your data is primarily stored on servers within Nigeria. Some service providers (e.g. cloud hosting, KYC partners) may process data internationally — these transfers happen only where the recipient country offers adequate data-protection safeguards or under signed Standard Contractual Clauses.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via in-app notification or email at least 7 days before they take effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

12. Contact Us

For privacy questions, data-rights requests, or to report a privacy concern: