Privacy Policy of Provest Limited

Effective Date: March 1, 2025

1. Introduction

Provest Limited (“we,” “our,” or “us”) is committed to safeguarding the privacy and personal data of our clients and website visitors. This Privacy Policy outlines how we collect, use, disclose, and protect your personal information in compliance with the Nigerian Data Protection Act 2023 (NDPA) and other relevant regulations.

2. Information We Collect

We may collect and process the following categories of personal data:

• Personal Identification Information: Name, date of birth, gender, and other identifiers.​

• Contact Information: Address, email address, phone number.​

• Financial Information: Bank account details, transaction history, credit information.​

• Identification Documents: National Identification Number (NIN), passport details, driver’s license.​

• Technical Data: IP address, browser type, operating system, and other technical details collected through cookies and similar technologies.​

3. Legal Basis for Processing

We process personal data based on the following legal grounds:

• Consent: When you have given explicit consent for specific purposes.​

• Contractual Necessity: To fulfill our contractual obligations to you.​

• Legal Obligation: To comply with legal and regulatory requirements.​

• Legitimate Interests: For purposes such as fraud prevention, ensuring network security, and improving our services, provided that such interests are not overridden by your rights.​

4. Purpose of Data Collection

Your personal data may be used for the following purposes:

• Service Delivery: To provide, manage, and personalize our financial services.​

• Communication: To contact you regarding your account, transactions, or updates to our services.​

• Compliance: To adhere to legal obligations and regulatory requirements.

• Marketing: To inform you about products, services, or promotions that may interest you, subject to obtaining your prior consent.​

• Security: To protect against fraud, unauthorized transactions, and other illegal activities.​

5. Data Subject Rights

Under the NDPA, you have the following rights:

• Right to Be Informed: To know how your personal data is being used.​

• Right to Access: To request access to the personal data we hold about you.​

• Right to Rectification: To request correction of inaccurate or incomplete data.

• Right to Erasure: To request deletion of your personal data under certain conditions.

• Right to Object: To object to the processing of your data for direct marketing or on grounds relating to your particular situation.

• Right to Data Portability: To request transfer of your data to another service provider.

To exercise any of these rights, please contact us using the details provided in Section 10.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, firewalls, secure servers, and regular security assessments.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, regulatory, accounting, or reporting requirements. Upon expiration of the retention period, we will securely delete or anonymize your data.

8. Data Sharing and Disclosure

We may share your personal data with:

• Regulatory Authorities: To comply with legal obligations or respond to lawful requests.

• Service Providers: Third-party vendors who perform services on our behalf, under strict confidentiality agreements.​

• Affiliates and Partners: With your consent, to offer joint services or promotions.​

We do not sell or rent personal data to third parties.

9. Cross-Border Data Transfers

If we transfer your personal data to countries outside Nigeria, we will ensure that such transfers comply with the NDPA by implementing appropriate safeguards, such as standard contractual clauses or ensuring the recipient country has adequate data protection laws.

10. Contact Information

For any inquiries or to exercise your data protection rights, please contact our Data Protection Officer:

Data Protection Officer
Mercy Imador
2a, Lateef Jakande Road, Agidingbi, Ikeja, Lagos.
Email: penuelwayassociates@gmail.com
Phone: (+234) 8125782220

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes through our website or other communication channels. Please review this policy regularly to stay informed about how we are protecting your information.

By using our services, you acknowledge that you have read and understood this Privacy Policy.