This Privacy Policy explains how BullionPlus collects, uses, shares and protects your personal data. We process data in line with the Nigeria Data Protection Act (NDPA) and, where applicable, the EU General Data Protection Regulation (GDPR).
We collect information you provide (name, email, phone number, identity and KYC documents, bank details), information generated when you transact (amounts, services, timestamps), and technical data (device, IP address, cookies). We only collect what is necessary to deliver and secure the services.
We use your data to process transactions, verify identity, prevent fraud, provide support, meet legal and regulatory obligations, and improve the services. We rely on lawful bases including performance of a contract, legal obligation, legitimate interest and, where required, your consent.
We share data with payment and service providers, banks, identity-verification partners and regulators where necessary to deliver the services or comply with law. We do not sell your personal data. Partners are bound by confidentiality and data-protection obligations.
We keep personal data only as long as needed for the purposes described, or as required by financial and anti-money-laundering regulations. When no longer needed, data is securely deleted or anonymised.
Subject to applicable law, you have the right to access, correct, delete or restrict the processing of your data, to object to processing, to data portability, and to withdraw consent. To exercise these rights, contact us using the details below.
We protect your data with encryption, access controls, 2FA and continuous monitoring. While no system is completely secure, we maintain safeguards appropriate to the sensitivity of the data we hold.
Where data is transferred outside Nigeria, we ensure appropriate safeguards consistent with the NDPA and, where relevant, GDPR transfer mechanisms.
For privacy enquiries or to exercise your rights, email customersupport@bullion-plus.com. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).