Privacy Policy

How EPR Access Limited collects, uses, and safeguards your personal data.

Disclaimer: This Privacy Policy is a general template and should be reviewed by a legal professional to ensure full compliance with the Nigeria Data Protection Act (NDPA) 2023 and other relevant regulations in Nigeria.

At EPR Access Limited, we are committed to protecting your personal data and respecting your privacy. This policy outlines how we collect, use, and safeguard your information in accordance with the Nigeria Data Protection Act (NDPA) 2023 and other applicable laws.

By using our website and services, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy. We are your partner in financial freedom, and that includes ensuring your data is handled with the utmost care and transparency.

1. Information We Collect

We may collect various types of information to provide you with our services. This includes:

Personal Identification Data: Your name, date of birth, Bank Verification Number (BVN), National Identity Number (NIN), Tax Identification Number (TIN), and a copy of your government-issued ID (e.g., International Passport or Driver's License).
Contact Information: Your residential and postal address, email address, and phone number.
Financial Data: Bank account details and your IP address details. We may use cookies and similar technologies to collect this information.
Biometric Data: Where required by law or for enhanced security, we may collect biometric data such as fingerprints or facial images for identity verification.

2. How We Use Your Information

We use the information we collect for the following purposes, all of which are grounded in a legal basis as required by the NDPA:

To provide and manage our services as a capital market operator, asset manager, and investment company.
To process transactions and administer your accounts and investments.
To verify your identity and conduct necessary due diligence checks as required by anti-money laundering (AML) and counter-terrorism financing (CFT) laws.
To communicate with you about your account, transactions, and our services.
To improve our website and services by analyzing usage patterns and feedback.
To comply with legal and regulatory obligations, including reporting to the SEC and other government authorities in Nigeria.
To detect, prevent, and investigate fraudulent or illegal activities.
To send you marketing communications about our products and services, but only where we have your explicit consent or a legitimate interest that does not override your rights.

3. Disclosure of Your Information

We do not sell or rent your personal data to third parties. We may, however, share your information with:

Regulatory and Law Enforcement Authorities: When required by law or a court order, or to assist with official investigations.
Service Providers and Partners: Trusted third parties who perform services on our behalf, such as IT support, payment processing, or data analytics, under strict confidentiality agreements.
Legal and Professional Advisors: Our lawyers, auditors, and other professional advisors.

Any data transfer to third parties will be done in compliance with the NDPA, ensuring that your data remains protected.

4. Data Security

We have implemented robust technical and organizational security measures to protect your personal data against unauthorized access, use, alteration, and loss. These measures include encryption, firewalls, and secure data storage practices. Our staff are trained on data protection and are bound by confidentiality obligations. While we strive to protect your information, no system is 100% secure, and we cannot guarantee the absolute security of your data.

5. Your Data Protection Rights

Under the NDPA, you have the following rights regarding your personal data:

Right to be Informed: To be informed about how your data is being used. This policy serves that purpose.
Right of Access: To request a copy of the personal data we hold about you.
Right to Rectification: To request that we correct any inaccurate or incomplete data we hold about you.
Right to Erasure (Right to be Forgotten): To request the deletion of your personal data where there is no legal or regulatory reason for us to continue processing it.
Right to Restrict Processing: To request that we stop or limit the way we process your personal data.
Right to Data Portability: To receive your personal data in a structured, commonly used, and machine-readable format.
Right to Object: To object to the processing of your personal data in certain circumstances.

To exercise any of these rights, please contact us using the details below. We will respond to your request within the timeframe stipulated by the NDPA.

6. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on our website, and we will notify you of any significant changes. We encourage you to review this policy periodically.

7. Contact Us

If you have any questions or concerns about this Privacy Policy or our data protection practices, please contact our Data Protection Officer at:

E-mail: privacy@epraaccess.com
Address: 54b, Adeniyi Jones, Ikeja 101233, Lagos, Nigeria.
Phone: (+234) 803-666-0392, (+234) 810-333-0394