This Privacy Policy explains how Nuevopay Ltd ("NuevoPay", "we", "us") collects, uses, discloses, and safeguards personal and business information when you visit our websites, create an account, or use our payment services (the "Services"). By using the Services, you agree to the practices described here.
1. Who we are
NuevoPay provides payments infrastructure that enables businesses to collect from and pay out to customers across African markets through a single integration. For the purposes of applicable data-protection law, NuevoPay acts as a data controller for the information we collect about our account holders and their representatives, and as a data processor for personal data we process on behalf of our customers in connection with their transactions.
2. Information we collect
Information you provide
- Account & contact data — name, email address, phone number, and login credentials.
- Business & verification data (KYB/KYC) — company name, registration and tax identifiers, registered address, certificate of incorporation and other corporate documents, and information about directors and beneficial owners, including government-issued identification and proof of address.
- Communications — information you provide when you contact support, sales, or respond to requests for information.
Information generated through your use
- Transaction data — collections, payouts, withdrawals, amounts, currencies, counterparties, mobile-money operators or banks involved, references, and status.
- Technical & usage data — IP address, device and browser information, log data, and cookies or similar technologies (see "Cookies" below).
Information from third parties
- Verification & screening providers — identity, sanctions, and risk-screening results from partners that help us meet legal obligations.
- Payment partners — mobile-money operators, banks, and processors that confirm and settle transactions.
3. How we use information
- To provide, operate, and maintain the Services and process transactions.
- To verify your identity and that of your business, directors, and beneficial owners (KYB/KYC) before activating live access.
- To detect, prevent, and investigate fraud, money laundering, and other prohibited activity.
- To comply with legal, regulatory, and contractual obligations, including sanctions screening and record-keeping.
- To communicate with you about your account, security, service changes, and support.
- To improve, secure, and develop our products and to produce aggregated, de-identified analytics.
4. Legal bases for processing
Where applicable data-protection law requires a legal basis, we rely on one or more of: performance of a contract with you; compliance with a legal obligation; our legitimate interests in operating and securing the Services and preventing fraud; and your consent where we ask for it. Where we rely on consent, you may withdraw it at any time.
5. How we share information
We do not sell personal information. We share information only as needed to deliver the Services and meet our obligations, including with:
- Payment partners — mobile-money operators, banks, and processors to execute and settle transactions.
- Service providers — cloud hosting, communications, identity verification, and analytics vendors who process data under contract on our behalf.
- Regulators & authorities — where required by law, regulation, legal process, or to protect our rights, users, or the public.
- Corporate transactions — in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate safeguards.
6. International transfers
We operate across multiple countries, and your information may be processed in jurisdictions other than your own. Where we transfer personal data across borders, we put appropriate safeguards in place consistent with applicable law.
7. Data retention
We retain personal and business information for as long as your account is active and thereafter for the period required to meet our legal, regulatory, accounting, and anti-money-laundering obligations (which, for transaction and verification records, is typically several years), to resolve disputes, and to enforce our agreements. We then delete or anonymise it.
8. Security
We use technical and organisational measures designed to protect information, including encryption in transit, access controls, and secure storage of verification documents. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your login credentials confidential and for enabling available account-security features.
9. Your rights
Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict the processing of your personal data, to object to certain processing, and to data portability. To exercise these rights, contact us using the details below. We may need to verify your identity, and some data must be retained to meet legal obligations. Account holders processing their customers' data should direct end-user requests to the relevant account holder, who acts as controller for that data.
10. Cookies
We use cookies and similar technologies to keep you signed in, remember preferences, secure the Services, and understand usage. You can control cookies through your browser settings; disabling some cookies may affect functionality.
11. Children
The Services are intended for businesses and are not directed to individuals under 18. We do not knowingly collect personal information from children.
12. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you. Your continued use of the Services after changes take effect constitutes acceptance.
13. Contact us
Questions or requests about this policy can be sent to privacy@nuevopay.co