CardKudi Privacy Policy

1. Privacy Policy and Privacy Rights

This Privacy Policy applies to the activities of DEEPLOGIX TECHNOLOGY NIGERIA LTD, operating under the CardKudi brand, and to information shared with or collected by CardKudi from visitors to our website, mobile applications and offices, and from users of our related services.

This Privacy Policy describes your privacy rights regarding our collection, use, storage, sharing and protection of your personal information.

If you have created a username, identification code, password or any other piece of information as part of our access security measures, you must treat such information as confidential and must not disclose it to any third party.

We reserve the right to disable any user identification code or password, whether chosen by you or allocated by us, if we reasonably believe that you have failed to comply with this Policy or the applicable service terms.

2. Consent and Policy Updates

By using the Platform or our services, you acknowledge that you have read this Policy. Where consent is required by law for a particular processing activity, we will request it before collecting the relevant data. We may amend this Policy by publishing a revised version on our website, in our applications or through another appropriate channel. The revised version will apply from its stated effective date.

3. Information We Collect

The personal information that you are asked to provide, and the reasons why it is requested, will be made clear at the point of collection. If you register on the Platform, you may be required to provide your full name, username, email address and phone number.

If you contact us directly, we may receive additional information about you, such as your name, email address, phone number, the contents of your message, attachments and any other information you choose to provide.

Where payment or settlement processing is required, you may be asked to provide bank details, including bank name, account name and account number, or other information necessary to process the payment.

CardKudi does not currently conduct KYC or identity verification and does not collect government identity documents, BVN, NIN, selfies, liveness checks or biometric information for KYC purposes. If this changes in the future, we will update this Policy and provide appropriate notice before collection.

• Contact Data: contact address, email address, telephone number, device details and billing details.
• Log and Technical Information: access times, links clicked, time spent on pages, device identifiers, login information, approximate location and other device details.
• Financial Data: account information, merchant information, transaction date and amount, and other information provided by financial institutions or merchants in connection with the services.
• Transactional Data: information relating to payments, orders, transaction status and related records when you use our products or services.
• Marketing and Communications Data: records of your decision to subscribe to or opt out of marketing materials, and records of communications between you and us.
• Aggregated or Anonymized Data: statistical, demographic or other data that does not reasonably identify an individual.

This Policy applies to CardKudi services only. Third-party websites, plug-ins or services may use their own cookies and collect personal information. Their privacy practices are governed by their own policies. Please review those policies before using third-party services.

4. How We Use Your Information

• Provide, operate and maintain the Platform and services.
• Comply with applicable legal, regulatory and audit requirements.
• Provide services and support, and resolve disputes or technical issues.
• Verify account or transaction information where applicable.
• Improve, personalize and expand the Platform and its functionality.
• Understand and analyze how users use the Platform.
• Develop new products, services, features and experiences.
• Communicate with you for customer service, service updates, marketing and promotional purposes; marketing messages may be opted out of as described in this Policy.
• Detect, prevent and investigate fraud, abuse and security incidents.

5. Log Files

CardKudi follows a standard procedure of using log files. The information collected may include Internet Protocol addresses, browser type, Internet Service Provider, date and time stamps, referring or exit pages and click information. We use this information to analyze trends, administer the Platform, understand usage and improve security. Where logs can identify an individual when combined with other data, we treat them as personal data.

6. Cookies

Cookies are small files stored on a device that may identify a session, remember preferences and support specific functions. The Platform may use session cookies or similar technologies to record activity during a session. Session cookies normally expire after a predefined timeout, when you log out or when you close the browser.

7. Data Security

The security of your personal information is important to us. We maintain reasonable internal, technical and physical controls, including secure servers, firewalls, appropriate encryption and access restrictions. You should also keep your CardKudi account and password secure. No online system can guarantee absolute security.

Unless a longer period is required for legal, regulatory, tax, accounting, anti-fraud, dispute-resolution or security reasons, personal information in production or operational systems is generally retained for one year. Backup copies may be retained for an extended period for disaster recovery, business continuity, security audit and fault recovery; backups are isolated from routine systems, access-restricted and not used for routine operations or marketing.

8. Nigeria Data Protection Rights

• Right of access: request a copy of the personal data we hold about you.
• Right to rectification: request correction of inaccurate or incomplete information.
• Right to erasure: request deletion of personal data under applicable conditions.
• Right to restrict processing under applicable conditions.
• Right to object to certain processing under applicable conditions.
• Right to data portability where applicable.
• Right to withdraw consent where processing is based on consent and to opt out of marketing messages.
• Right to lodge a complaint with the Nigeria Data Protection Commission or another competent authority.

To exercise your rights, contact CardKudi at cardkudi@cardkudi.com. We may request reasonable information to verify your identity and will handle requests in accordance with applicable law.

9. Retention of Personal Data

We retain personal information only for as long as reasonably necessary to provide services, detect and investigate fraudulent transactions, comply with legal and regulatory obligations, satisfy tax, accounting or reporting requirements, and address potential disputes or litigation. The general retention rule and treatment of backups are stated in Section 7 of this Policy.

10. Children's Information

CardKudi is available only to users who are 18 years old or above. We do not knowingly provide accounts to individuals under 18 or knowingly collect their personal information. If you believe that an individual under 18 has provided personal information to CardKudi, please contact us immediately so that we can take appropriate steps.

11. Amendments to This Privacy Policy

We may amend this Policy from time to time and will publish the latest version and its effective date on our website, in our applications or through another appropriate channel. We will provide additional notice where changes are material or where required by law.

12. Contact Details

Company: DEEPLOGIX TECHNOLOGY NIGERIA LTD

Brand/platform: CardKudi

Email: cardkudi@cardkudi.com

Address: PRIMAL TEK PLAZA, AKOWONJO ROUNDABOUT, NO. 3 SHASHA ROAD, AKOWONJO, LAGOS STATE, NIGERIA