Legal

Privacy Policy

Last updated

1.IntroductionLink to this section

This Privacy Policy explains how Rille Digital Ltd ("Rille," "we," "our," or "us"), a company registered in the Federal Republic of Nigeria, collects, uses, discloses, and safeguards your personal information when you use the Rille platform (the "Platform"). Rille is the data controller of your personal information and is committed to protecting it in accordance with the Nigeria Data Protection Act 2023 (NDPA) and applicable regulations issued by the Nigeria Data Protection Commission (NDPC).

2.Information We CollectLink to this section

We collect the following categories of personal information:

Account Information:
name, email address, phone number, username, and profile details you provide.
Identity and Verification Information:
to meet legal KYC/KYB and anti-money-laundering obligations, we and our verification partners collect identity data such as your Bank Verification Number (BVN), National Identification Number (NIN), date of birth, government-issued identification, a selfie or liveness check, and, for businesses, registration documents and beneficial-owner details.
Financial and Transaction Information:
wallet balances, bank-account details you add, transaction and order history, settlement and payout records, and public blockchain wallet addresses. We never store your private keys.
Usage and Device Information:
how you interact with the Platform, pages and features used, device identifiers, IP address, and approximate location.
Communications:
messages, support requests, and interactions with merchants and other users on the Platform.

3.How and Why We Use Your InformationLink to this section

We process your information for the following purposes and lawful bases under the NDPA:

  • To provide the Platform and perform our contract with you: create and manage your account, process payments, escrow, settlements, and payouts, and deliver the features you request.
  • To meet legal obligations: identity verification (KYC/KYB), anti-money-laundering and fraud screening, transaction monitoring, tax, and record-keeping.
  • For our legitimate interests: securing the Platform, preventing and investigating fraud and abuse, and improving our services.
  • With your consent: marketing communications and certain personalisation, which you may withdraw at any time.

4.How We Share Your InformationLink to this section

We do not sell your personal information. We share it only as needed, with:

  • Licensed banking, payment, and settlement partners: to process payments, hold funds, and settle payouts to bank accounts.
  • Identity-verification partners: to perform KYC/KYB, BVN/NIN, and liveness checks required by law.
  • Merchants and other users: to facilitate transactions you initiate (for example, the information needed to fulfil an order).
  • Infrastructure and service providers: cloud hosting, analytics, communications, and customer support acting on our behalf under confidentiality obligations.
  • Regulators, law-enforcement, and legal authorities: where required by law, regulation, legal process, or to protect our rights, users, or the public.
  • Corporate transactions: in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

5.International Data TransfersLink to this section

Our Platform is hosted on cloud infrastructure (Amazon Web Services) located in the United Kingdom / European region (eu-west-2, London), and some of our service providers may process data outside Nigeria. Where we transfer personal information outside Nigeria, we do so in accordance with the NDPA and ensure an adequate level of protection through appropriate legal safeguards, such as contractual data-protection commitments and transfers to jurisdictions or providers offering adequate protection.

6.Data RetentionLink to this section

We retain your personal information for as long as your account is active and as necessary to provide the Platform. Where we are subject to legal, financial, tax, or anti-money-laundering obligations, we retain the relevant records for the periods required by law. For transaction, KYC, and AML records this is typically up to five (5) years after the end of our relationship, or longer where the law or a regulator requires. When information is no longer needed, we securely delete or anonymise it.

7.Data SecurityLink to this section

We implement technical and organisational measures to protect your data, including encryption in transit and at rest, encryption of sensitive identity data, access controls and least-privilege access, and regular security reviews. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for protecting your credentials, transaction PIN, and devices.

8.Your RightsLink to this section

Subject to applicable law, you have the right to:

  • Access the personal information we hold about you and request a copy.
  • Request correction of inaccurate or incomplete information.
  • Request deletion of your information, subject to our legal retention obligations.
  • Object to or request restriction of certain processing.
  • Withdraw consent where processing is based on consent, and opt out of marketing at any time.
  • Request portability of information you provided to us.
  • Lodge a complaint with the Nigeria Data Protection Commission (NDPC).

To exercise these rights, contact us using the details below. We may need to verify your identity before acting on a request.

9.ChildrenLink to this section

The Platform is not intended for anyone under 18 years of age, and we do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can delete it.

10.Cookies and TrackingLink to this section

We use cookies and similar technologies to keep you signed in, improve your experience, analyse usage, and deliver relevant content. You can manage your preferences through your browser settings; disabling some cookies may affect Platform functionality.

11.Changes to This PolicyLink to this section

We may update this Privacy Policy from time to time. Material changes will be notified through the Platform or by email, and the "Last updated" date will be revised. Your continued use of the Platform after changes take effect constitutes acceptance of the updated Policy.

12.Contact UsLink to this section

Rille Digital Ltd. If you have questions about this Privacy Policy, wish to exercise your rights, or want to reach our data-protection contact, email us at privacy@rillehq.com or hello@rillehq.com.