Privacy Policy

Introduction

This privacy notice explains how Xpress MTS collects and uses personal data and describes the rights you have with respect to your personal data. At Xpress MTS the privacy of our data subjects is of utmost importance to us.

This policy states our commitment to your privacy on all our platforms. It is designed to provide information regarding our privacy practices and help you understand how we handle your data.

Information We Collect

Information we hold about you will often come from you directly (for example, when you apply for a new product or service). The personal data we collect may include but not limited to the following:

Personal Data Type	Description of Personal Data

Identity Data	Your personal details (e.g. name, date of birth, passport or other identification information)
Contact Data	Postal address, phone number, email address, mobile number
Financial Data	Data about your financial profile
Transaction Data	Payments you make and receive
Technical Data	IP address, device info, browser data, geolocation, OS, user agent
Profile Data	Data that helps us identify you
Job Application Data	Information submitted during recruitment process
Usage Data	How you use our website, products, services
Marketing & Communications Data	Marketing preferences and communication consent
Others	CCTV/video footage at premises and call recordings

How We Use Your Information

We use your personal information for the following purposes:

Offer and provide tailored products and services
To fulfil the terms of any service contract(s) you might have with us.
Improve customer experience with us
Conduct business operations
Manage customer relationships
Comply with laws and regulations
Provide credit information to agencies
Maintain updated customer records
Develop regulatory/statistical reports

Xpress MTS will limit the collection and use of your personal information for the stated purposes.

Data Subject Rights Under the Policy

Under NDPA/GDPR, individuals have rights including:

Right to be Informed
Right to Access
Right to Rectification
Right to Erasure
Right to Restrict Processing
Right to Data Portability
Right to Object
Right to File a Complaint

Sharing of Personal Data

We share data only with trusted partners bound by contractual confidentiality and protection obligations.

Service providers and outsourced vendors
Financial institutions and payment processors
Security, fraud prevention & regulatory enforcement agencies

How We Protect Your Data

We implement robust security measures including confidentiality compliance, access control, encryption, and staff training.

Users are responsible for securing credentials used to access products.

Data (Cross-Border) Transfer

Data may be processed outside your country where legally permitted with adequate protections.

Remedies for Violation

Our DPO will respond to any rights violation within 30 days and provide corrective measures.

Changes to This Privacy Policy

Policy is reviewed annually or when business/regulation changes.

Minors

No personal data collection from minors under 18. Parents/guardians may request deletion.

Data Retention

Data stored for 10 years or required by law before secure deletion.

Lawful Basis for Processing

Purpose of Processing	Lawful Basis of Processing

Account Management	Performance of a contract
Fraud Prevention & Customer Support	Legitimate interests
Internal Reporting, Business Development, Strategic Decisions	Legitimate interests
Compliance with AML, KYC & Regulatory Policies	Legal obligation
Marketing & Promotions	Consent (withdrawable anytime)

Contact Us

For concerns or requests:

Email: dpo@xpresspayments.com

Address: No. 23 Oba Akinjobi Way, GRA Ikeja, Lagos

Complaints may also be directed to NDPC at Info@ndpc.gov.ng

Declaration

I have read all terms and conditions within this Notice and hereby agree to the use of my personal data for the above-mentioned purposes.