PRIVACY POLICY

Last Updated: 15 August 2026

This Privacy Policy describes how Credit Cliq Technologies Limited ("CreditCliq", "we", "us" or "our") collects, uses, stores, shares and protects your personal data when you use the CreditCliq application, website and related services (collectively, the "Service").

We are committed to protecting your personal data and processing it in accordance with applicable data protection laws, including the Nigeria Data Protection Act 2023 ("NDPA") and applicable regulations and guidance issued by the Nigeria Data Protection Commission ("NDPC").

This Privacy Policy explains what personal data we collect, how we use it, the circumstances in which we may share it, how we protect it and the rights available to you.

By using our Service, you acknowledge that you have read this Privacy Policy and understand how your personal data may be processed.

1. DEFINITIONS

For purposes of this Privacy Policy:

"Account" means the account created by you to access the Service.
"Application" means the CreditCliq mobile application.
"Company", "we", "us" or "our" means Credit Cliq Technologies Limited, Lagos, Nigeria.
"Personal Data" means information relating to an identified or identifiable individual.
"Service" means the CreditCliq Application, website and related services.
"Service Providers" means third parties that process personal data on our behalf or provide services that support our operations.
"You" means the individual accessing or using the Service.

2. INFORMATION WE COLLECT

We collect information that is necessary to provide, maintain, secure and improve our Services.

Depending on how you use CreditCliq, the information we collect may include the following:

2.1 Identity and Contact Information

This may include:

First name and last name;
Email address;
Phone number;
Address;
Date of birth;
Account information; and
Other information required to identify and communicate with you.

2.2 Credit and Financial Information

Because CreditCliq provides credit-related services, we may collect and process information relating to your credit and financial profile.

This may include:

Credit history;
Credit reports;
Credit scores;
Credit accounts;
Credit inquiries;
Information relating to your credit profile;
Financial information;
Information relating to your creditworthiness; and
Other information necessary to provide our credit-related services.

2.3 Identity Verification Information

We may collect and process information required to verify your identity.

This may include:

Bank Verification Number (BVN);
National Identification Number (NIN), where applicable;
Other identification information; and
Information obtained through identity verification processes.

We will only process identity information for legitimate and lawful purposes connected with the Services.

2.4 Information Obtained from Third Parties

We may obtain information about you from third parties where necessary to provide our Services.

These third parties may include:

Credit bureaus;
Lenders;
Financial institutions; and
Other authorised third parties.

Information obtained from these sources may include credit, identity, financial and other information relevant to providing our Services.

2.5 Usage and Device Information

We may automatically collect information about how you use our Service.

This may include:

IP address;
Device type;
Operating system;
Browser or application information;
Application version;
Pages or features accessed;
Date and time of access;
Time spent using the Service;
Unique device identifiers;
Diagnostic information; and
Other technical information necessary to operate, secure and improve the Service.

2.6 Location Information

Where a feature of the Service requires location information, we may collect location information with the appropriate permission.

You may enable or disable location access through your device settings.

3. INFORMATION FROM THIRD-PARTY SOCIAL MEDIA SERVICES

Where social-media login functionality is made available, you may be able to create or access your account through a third-party social media service.

Depending on the service and the permissions you provide, we may receive information associated with your account, such as your name, email address or other information made available to us by that third-party service.

The third-party service will process your information in accordance with its own privacy policy.

4. HOW WE USE YOUR PERSONAL DATA

We may use your personal data for the following purposes:

To create and manage your account;
To provide and maintain the CreditCliq Service;
To verify your identity;
To provide credit-related services;
To obtain and provide credit reports and credit information;
To provide or generate credit scores;
To analyse your credit profile;
To provide credit-related insights and services;
To assess eligibility for relevant services;
To detect and prevent fraud;
To protect the security of our users and Services;
To monitor and improve the performance of the Service;
To communicate with you regarding your account and use of the Service;
To respond to your requests, complaints and enquiries;
To comply with legal and regulatory obligations;
To establish, exercise or defend our legal rights;
To investigate suspected fraud, misuse or unlawful activity; and
For other purposes disclosed to you at the point of collection or otherwise permitted by applicable law.

5. CREDIT SCORING, PROFILING AND AUTOMATED PROCESSING

CreditCliq uses automated processing in connection with its Services.

This may include:

Credit scoring;
Profiling;
Eligibility decisions; and
Fraud detection.

Automated processing may involve analysing information relating to your identity, credit history, financial information, credit profile and other relevant information.

The purpose of this processing is to provide credit-related services, assess relevant eligibility, identify potential fraud and provide information or services relevant to your credit profile.

Where applicable law provides you with rights in relation to automated decision-making, you may exercise those rights in accordance with this Privacy Policy.

These rights may include the right to:

Request human intervention;
Express your point of view;
Contest an automated decision; and
Object to applicable automated processing.

Nothing in this section limits any rights available to you under applicable data protection law.

6. LAWFUL BASIS FOR PROCESSING

We process personal data only where there is a lawful basis for doing so.

Depending on the nature and purpose of the processing, the applicable lawful basis may include:

Your consent;
Performance of a contract or taking steps at your request before entering into a contract;
Compliance with a legal obligation;
Legitimate interests, where applicable; or
Another lawful basis recognised under applicable data protection law.

Where we rely on consent, you may withdraw your consent at any time.

Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

7. SHARING YOUR PERSONAL DATA

We may disclose or share your personal data where necessary and lawful to provide ourServices or fulfil our obligations.

Recipients may include:

Lenders;
Financial institutions;
Credit bureaus;
Service providers;
Technology and infrastructure providers;
Security and fraud-prevention providers;
Professional advisers;
Regulators and government authorities where required by law; and
Other authorised third parties necessary to provide the Services.

We will only share personal data where there is a lawful basis for doing so and will take appropriate steps to protect your information.

Where a third party processes personal data on our behalf, we will take appropriate steps to ensure that the third party provides appropriate safeguards and processes the data in accordance with applicable data protection requirements.

8. INTERNATIONAL AND CROSS-BORDER DATA TRANSFERS

CreditCliq may, as its services and operations expand, transfer or make personal data accessible outside Nigeria.

Where personal data is transferred or made accessible outside Nigeria, we will ensure that the transfer is carried out in accordance with applicable data protection laws and regulatory requirements.

Where consent is required for a transfer outside Nigeria, we will obtain the appropriate consent from the relevant data subject before the transfer.

We will also implement appropriate safeguards and contractual or other protections required by applicable data protection law for international transfers.

Where a third party outside Nigeria receives or processes personal data on our behalf, we will take reasonable steps to ensure that appropriate data protection and security measures are in place.

9. DATA RETENTION

We retain your personal data for ten (10) years, unless a different retention period is required or permitted by applicable law.

The retention period may be necessary to:

Comply with legal or regulatory obligations;
Maintain appropriate credit and financial records;
Resolve disputes;
Establish, exercise or defend legal claims;
Prevent fraud or misuse;
Comply with contractual obligations; or
Meet other lawful requirements.

When personal data is no longer required, we will take appropriate steps to securely delete, anonymise or otherwise dispose of it in accordance with our applicable data retention procedures.

10. DATA SECURITY

The security of your personal data is important to us.

We implement appropriate technical and organisational measures designed to protect personal data against:

Unauthorised access;
Loss;
Misuse;
Alteration;
Unauthorised disclosure;
Destruction; and
Other security threats.

However, no method of transmission over the Internet or method of electronic storage is completely secure.

While we take reasonable steps to protect your personal data, we cannot guarantee absolute security.

11. COOKIES AND TRACKING TECHNOLOGIES

Our website may use cookies and similar technologies to:

Operate essential website functions;
Remember preferences;
Understand how visitors use the website;
Analyse website performance; and
Improve the website and user experience.

The use of cookies on our website may be subject to your applicable cookie preferences and consent choices.

The CreditCliq Application does not currently use cookies in the same manner as the website.

For more information, please refer to our Cookie Policy.

12. MARKETING COMMUNICATIONS

Where permitted by applicable law, we may contact you by email, telephone, SMS, push notification or other electronic means regarding:

Your account;
Security or service updates;
Changes to our Services; and
Products, services or promotions.

Where consent is required for direct marketing, we will obtain the appropriate consent.

You may opt out of marketing communications at any time by using the unsubscribe option provided or by contacting us.

You may continue to receive important service-related communications even if you opt out of marketing communications.

13. YOUR DATA PROTECTION RIGHTS

Subject to applicable law and any applicable limitations, you may have the right to:

Be informed about how your personal data is processed;
Request access to your personal data;
Request correction of inaccurate or incomplete personal data;
Request deletion or erasure of your personal data;
Request restriction of processing in appropriate circumstances;
Object to certain processing;
Withdraw consent where processing is based on consent;
Request data portability where applicable;
Exercise rights relating to automated decision-making and profiling; and
Lodge a complaint with the appropriate supervisory authority.

These rights are subject to the conditions and limitations provided under applicable data protection law.

14. HOW TO EXERCISE YOUR RIGHTS

If you wish to exercise any of your data protection rights or have questions about how we process your personal data, you may contact us at:

Email:
dataprotection@creditchek.africa

We may request reasonable information to verify your identity before processing a request.

We will respond to valid requests within the timeframe required by applicable law.

Where we are unable to comply with a request because of a legal or other permitted limitation, we will explain the reason where legally permitted.

15. DATA ACCURACY AND CREDIT INFORMATION

We take reasonable steps to ensure that personal data processed by us is accurate and up to date.

If you believe that information contained in your credit profile or other personal data held by us is inaccurate, you may contact us using the privacy contact details provided in this Privacy Policy.

Where appropriate, we may work with the relevant credit bureau, lender, financial institution or other data source to investigate and correct inaccurate information.

16. DATA BREACHES

Where we become aware of a personal data breach, we will assess and respond to the incident in accordance with applicable law and our internal data breach procedures.

Where notification to a regulatory authority or affected data subjects is required by law, we will make the appropriate notification within the applicable timeframe.

17. CHILDREN'S PRIVACY

Our Services are not intended for children where the processing of their personal data is not permitted by applicable law.

We do not knowingly collect personal data from children in circumstances where such collection is prohibited by applicable law.

If we become aware that we have collected personal data in breach of applicable requirements, we will take appropriate steps to address the situation.

18. THIRD-PARTY WEBSITES AND SERVICES

Our Service may contain links to third-party websites or services that are not operated by us.

We are not responsible for the privacy practices, content or security of third-party websites or services.

We encourage you to review the privacy policies of third-party services before providing them with your personal data.

19. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in:

Our Services;
Our data-processing activities;
Applicable laws or regulations;
Our privacy practices; or
Technology and security practices.

Where required by law, we will provide appropriate notice of material changes.

The "Last Updated" date at the beginning of this Privacy Policy indicates when the policy was last revised.

20. CONTACT US

If you have any questions about this Privacy Policy, our processing of your personal data, or your data protection rights, please contact:

Credit Cliq Technologies Limited
Lagos, Nigeria

Data Protection Contact:
dataprotection@creditchek.africa

Website:
https://creditcliq.com