🔒

Introduction

NkapFin SAS is committed to protecting the privacy and security of personal data processed through our financial infrastructure platform. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our services, APIs, dashboards, and websites.

This policy applies in accordance with applicable data protection laws including the CEMAC Regulation on Personal Data Protection, the Nigeria Data Protection Regulation (NDPR), the Kenya Data Protection Act (2019), POPIA, and the GDPR where applicable.

  • •Compliant with CEMAC, NDPR, Kenya DPA, POPIA, and GDPR
  • •Applies to all NkapFin services, APIs, and websites
  • •Data Protection Officer: Available via contact form
  • •Last updated: January 1, 2025

Data We Collect

We collect and process personal data in connection with providing our financial infrastructure services. This includes identity data, contact data, financial data, technical data, and compliance data necessary for KYC/AML obligations.

  • •Identity Data: name, date of birth, national ID, biometrics
  • •Financial Data: bank accounts, mobile money numbers, transaction history
  • •Technical Data: IP addresses, API keys, device identifiers
  • •Compliance Data: KYC results, sanctions screening, risk scores

How We Use Your Data

We process personal data for specific purposes, each supported by a lawful basis under applicable data protection legislation. Our processing activities are limited to what is necessary for providing financial infrastructure services and meeting regulatory obligations.

  • •Providing financial infrastructure services (contractual necessity)
  • •Identity verification and KYC/AML compliance (legal obligation)
  • •Fraud detection and prevention (legitimate interest)
  • •Regulatory reporting to financial authorities (legal obligation)

Your Rights

Depending on your jurisdiction, you have rights regarding your personal data including access, rectification, erasure, restriction of processing, data portability, and the right to object. Contact our Data Protection Officer at the contact form to exercise these rights.

  • •Right of access to your personal data
  • •Right to rectification of inaccurate data
  • •Right to erasure (subject to legal retention requirements)
  • •Right to data portability and restriction of processing