Privacy policy

This policy explains how CSwitch, a product of Connexxion Telecom (“we”, “us”), collects, uses and protects personal data when you visit our website, apply for or use a CSwitch account, or pay a merchant that uses CSwitch. We process personal data in line with the Nigeria Data Protection Act 2023 and guidance from the Nigeria Data Protection Commission.

What we collect

• Merchant and identity details you give us when you apply: names, company registration documents, government ID, BVN, address, email and phone number.
• Transaction data: payments, transfers, payouts and the details needed to process them, such as account numbers and references.
• Device and usage data: how you use our website, app and dashboard, your device type, IP address and security logs.
• Your customers' data: when your customers pay you, we process the details needed to complete and record each payment.
• Messages you send us through forms, tickets, email or chat.

How we use it

• To open and run your account, and to verify your identity and your merchant account (know-your-customer and know-your-business checks).
• To process payments, transfers and payouts, and to send you receipts and alerts.
• To detect, prevent and investigate fraud and financial crime, and to meet our legal and regulatory obligations.
• To provide support and to resolve complaints and disputes.
• To improve our products, and, where you agree, to tell you about new features.

Our lawful bases

We process personal data to perform our contract with you, to comply with legal obligations (including anti-money-laundering rules), for our legitimate interests in running a safe and reliable service, and with your consent where the law requires it. You can withdraw consent at any time.

Who we share it with

We share personal data only when we need to, with:

• banks, card schemes, payment switches and settlement partners that process your transactions;
• identity verification and fraud prevention providers;
• service providers that host our systems or help us support you, under contracts that protect your data;
• regulators, law enforcement and courts, where the law requires it.

We do not sell personal data.

How long we keep it

We keep personal data for as long as your account is open, and afterwards for as long as the law requires us to keep financial and identity records. When we no longer need it, we delete or anonymise it.

How we protect it

We use encryption in transit, access controls, monitoring and staff training to protect personal data. Read more on our security page.

Your rights

You can ask to access your personal data, correct it, delete it where the law allows, restrict or object to how we use it, or receive a copy in a portable format. You can also complain to the Nigeria Data Protection Commission.

To use any of these rights, contact us. We may need to confirm your identity before we act on a request.

Cookies

See our cookie policy for how we use cookies and how to change your preferences.

Changes to this policy

We'll update this page when our practices change, and tell you directly about significant changes.