PeerPurse | Personal , Business Banking & Embedded Finance

Effective Date: November 1, 2025

Last Updated: October 17, 2025

1. Introduction

This Privacy Policy describes how PeerPurse Technologies Limited (“PeerPurse”, “we”, “our”, or “us”) collects, uses, stores, discloses, and protects your personal information when you access or use the PeerPurse Platform, mobile application, website, or related services (collectively, the “Platform”). We are committed to protecting your privacy and ensuring compliance with the Nigeria Data Protection Act (NDPA) 2023, Central Bank of Nigeria (CBN) regulations, and international best practices for data security and privacy. By using the Platform or creating an account, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

2. Scope of Policy

This Policy applies to all users of the Platform, including Borrowers, Investors, and visitors, as well as any third-party service providers engaged by PeerPurse. It governs all personal data collected through the mobile application, website, electronic communications, and customer service interactions.

3. Legal Basis for Processing

PeerPurse processes personal data lawfully and transparently based on: • Consent • Contractual necessity • Legal obligation • Legitimate interest • Public interest

4. Information We Collect

• Identification & Contact Information (name, address, NIN, BVN, ID) • Financial & Transaction Data (bank details, wallet history, repayments) • Device & Technical Information (IP, browser, geolocation, cookies) • Employment & Socioeconomic Data • Communication Records • Biometric or sensitive data (where applicable with consent)

5. How We Use Your Information

• Create and manage accounts or wallets • Process loans, repayments, and investments • Assess creditworthiness • Communicate updates and notifications • Detect and prevent fraud • Comply with legal obligations • Improve platform functionality and security

6. Data Sharing and Disclosure

We may share data only when necessary with: • Regulatory and legal authorities (CBN, NFIU) • Credit bureaus • Insurance partners • Payment processors and banks • Technology and hosting partners • Law enforcement agencies • Corporate affiliates during restructuring PeerPurse does not sell or rent personal information.

7. Data Security and Retention

Security Measures include encryption, multi-factor authentication, firewalls, secure servers, and audits. Personal data is retained only as long as necessary. Transaction and identity records are typically kept for at least five (5) years to comply with regulatory requirements.

8. Your Rights Under NDPA 2023

You have the right to: • Access your data • Rectify inaccuracies • Request deletion • Data portability • Withdraw consent • Restrict processing • Lodge complaints with the Nigeria Data Protection Commission (NDPC)

9. International Data Transfers

Where data is transferred outside Nigeria, PeerPurse ensures compliance with NDPA requirements and applies appropriate safeguards and agreements to protect your information.

10. Cookies and Tracking Technologies

We use cookies and similar technologies to personalize experience, analyze usage, and improve security. You may manage cookies via your browser settings, though some features may not function properly if disabled.

11. Children’s Privacy

PeerPurse does not knowingly collect or process data from persons under 18 years old. Any such data discovered will be promptly deleted.

12. Contact Information

PeerPurse Technologies Limited Email: privacy@peerpurse.africa Attention: Data Protection Officer (DPO) We acknowledge inquiries within three (3) business days and aim to resolve requests within thirty (30) days.

Privacy Policy