This Privacy Policy explains what personal data Bill Trick Technologies Ltd collects, why we collect it, and the choices you have — in line with the Nigeria Data Protection Regulation (NDPR).
1. Information we collect
- Identity data: full name, date of birth, means of identification, and BVN or NIN where required for KYC.
- Contact data: phone number, email address, and physical address.
- Transaction data: service used, amount, timestamps, and biller reference numbers.
- Device and usage data: IP address, device identifiers, and app interaction logs, used for security and fraud prevention.
2. How we use your data
We use your data to process transactions, verify your identity, prevent fraud, provide customer support, comply with regulatory reporting obligations, and — only with your consent — send product updates.
3. Who we share data with
We share only what's necessary with: licensed settlement banks, payment processors, the specific biller or agency you're transacting with (e.g. a DISCO, WAEC, or the CAC), and regulators where legally required. We do not sell personal data to third parties.
4. Data retention
We retain transaction records for a minimum of five years to meet CBN record-keeping requirements. Account data is retained for as long as your account is active, plus any period required by law after closure.
5. Your rights
Under the NDPR, you can request a copy of your data, ask us to correct inaccuracies, or request deletion where we're not legally required to retain it. Contact [email protected] to exercise these rights.
6. Security
Data is encrypted in transit and at rest. Access is restricted to staff who need it to perform their role, and all access is logged. See our Security & Trust page for more detail.
7. Cookies
Our website uses essential cookies to keep you logged in and remember form progress, and optional analytics cookies to understand how the site is used. You can manage cookie preferences in your browser at any time.
8. Changes to this policy
We'll notify you in-app or by email of material changes to this policy at least 14 days before they take effect.
9. Contact
Data protection queries: [email protected].