Privacy Policy

1. Introduction

Ultra Pay Microfinance Bank Limited ("UltraPay", "we", "our", or "the Bank") is committed to protecting your personal data and respecting your privacy in full compliance with the Nigeria Data Protection Act (NDPA), Nigeria Data Protection Regulation (NDPR), and Central Bank of Nigeria (CBN) consumer protection regulations.

2. Information We Collect

When you open an account, use our web or mobile application, or transact with an UltraPOS terminal, we collect:

• Identity Data: Full Name, Date of Birth, BVN, NIN, Passport Photograph, and Government-issued ID.
• Contact Data: Phone number, residential address, and email address.
• Financial & Transaction Data: Account numbers, transaction history, POS card settlement logs, and loan records.
• Technical & Device Data: IP address, device model, operating system, and biometric authorization tokens.

3. How We Protect Your Data

We implement 256-bit TLS encryption, salted PIN hashing, firewalled database clusters, and strict role-based access control. BVN and NIN records are strictly used for KYC validation against NIBSS and NIMC databases and are never sold or shared with unauthorized third parties.

4. Your Rights Under NDPR

You have the right to request access to your personal data, rectify inaccurate records, object to direct marketing, or request account closure and data retention per CBN statutory audit retention laws.

5. Contact Our Data Protection Officer (DPO)

For privacy inquiries or to exercise your rights, please email our Data Protection Desk at info@ultrapay.ng or visit our Head Office in Wudil, Kano State.