Privacy policy

Chase Micro Finance Bank Privacy Policy

1. Introduction/Scope

This Privacy Policy is prepared in accordance with the Nigeria Data Protection Regulation (NDPR) and the EU General Data Protection Regulation (GDPR). It outlines how Chase Micro Finance Bank (“we,” “us,” “our,” or “the Bank”) applies and complies with data privacy principles in processing personal data of customers, staff, vendors, visitors, and third parties interacting with the Bank. It also highlights the rights of individuals whose personal data is collected and processed, ensuring compliance with the NDPR.

2. Roles/Responsibilities

The Data Protection Officer (DPO) of Chase Micro Finance Bank is responsible for ensuring this document is accurate and up-to-date. The DPO ensures that data subjects are notified prior to the collection and processing of their personal data. All Bank employees who interact with personal data must follow the provisions outlined in this policy.

3. Policy Statement

Chase Micro Finance Bank is committed to protecting the privacy and security of personal data. We are responsible for determining how we hold and use personal information about our data subjects. According to the NDPR, the Bank is required to notify data subjects of the information contained in this document.

3.1 About Chase Micro Finance Bank

Chase Micro Finance Bank is a financial service provider licensed by the Central Bank of Nigeria (CBN). We are recognized for our commitment to innovation, superior performance, and the creation of value for all stakeholders. We operate branches and business offices across Nigeria and internationally, deploying various channels of banking technology. Due to the nature of our business, we collect and process personal data of Nigerian individuals as well as residents and citizens of other countries.

4. What Personal Data We Collect

The personal data we collect and process include:

Identity Data: Full name, maiden name, marital status, title, biometric information, national identification number (NIN), passport details, driver’s license details, date of birth, gender, address, employment history, and citizenship.

Contact Data: Address, email address, telephone numbers, and information received during face-to-face meetings, phone calls, emails, letters, and SMS.

Financial Data: Bank account information, bank statements, Bank Verification Number (BVN), income and outgoings, financial position, status, credit history, debit or credit card information, and account number.

Transaction Data: Information regarding products and services used, transactional information, and location data of transactions.

Technical Data: Internet protocol (IP) address, login data, browser and operating system details, time zone setting and location, browser plug-in types and versions, platform, device ID, geolocation, IP, model, and user agent on devices used to access our services.

Profile Data: Username and password.

Job Application Data: Data submitted during the recruitment process.

Usage Data: Information about how data subjects use our website, products, and services.

Marketing and Communications Data: Information about communications with the Bank and preferences in receiving marketing emails and consents given.

Other Data: CCTV/video footage when visiting our premises or using our ATMs, and telephone conversations via our contact center lines.

5. Why We Need the Data

Chase Micro Finance Bank ensures that the personal data collected and processed is necessary for the specific purpose of collection and does not exceed what is required for that purpose.

6. Legal Grounds for Processing

We identify, establish, define, and document the specific purpose and legal basis for processing personal data before any processing operation takes place, including:

Consent: Obtained from the data subject.

Contract: Necessary for the performance of a contract to which the data subject is a party.

Legal Obligation: Required to meet a legal obligation.

Vital Interests: Protecting the vital interests of the data subject.

Public Interest/Official Authority: Processing carried out in the public interest or under official authority.

National Law: Compliance with national laws such as biometric data requirements.

7. Processing of Personal Data Based on Consent

Where applicable, we require explicit consent to process personal data. Visitors to our website are expected to read and understand our privacy notice and agree to the terms of use. By consenting, data subjects permit us to use their personal data for specified purposes.

7.1 Withdrawal of Consent Individuals can withdraw their consent at any time by making a written request. We will cease processing activities that relied upon the consent immediately upon receiving such a request.

8. Use of Cookies

Our website uses cookies from trusted third parties to enhance user experience. Users can disable cookies via browser settings, though this may affect site functionality.

9. Disclosure to Third Parties

We do not disclose personal data to third parties without consent, except in response to legal obligations, or to prevent fraud or manage security issues. We ensure third parties have adequate measures to protect personal data.

9.1 Cross-Border Transfers We may transfer personal data to third parties abroad, ensuring they meet global regulatory standards and have adequate data protection measures in place.

10. Retention of Records

We retain personal data as long as necessary for service delivery and regulatory compliance. After the retention period, data is securely deleted or archived.

11. Data Subject Rights

Data subjects have the right to:

  • Request access to their personal data.
  • Correct inaccurate or incomplete data.
  • Request data erasure.
  • Restrict data processing.
  • Transfer their data to another organization.
  • Object to certain processing activities.
  • Complain to a supervisory authority.

12. Complaints

For complaints regarding the handling of personal data, data subjects can contact our DPO or lodge a complaint with the supervisory authority.

Contact Information: Chase Micro Finance Bank
11, Michael Olawale-Cole Drive Lekki Phase I Lekki, Eti-Osa, Lagos
info@chasemfb.com
+234 909 304 2828