Privacy and Cookies Policy

Privacy Policy Overview

This Privacy Policy explains AfricaCompare Limited’s (the “Company”, “nairaCompare”, “We”, “Us”) online information practices and your related choices. The Company owns, operates, or enables users to obtain information from several interactive websites and connected applications as well as provide online comparison of services, including but not limited to savings, loans, healthcare, internet providers and insurance (“Our Services”). This Privacy Policy applies to all information collected from and about You, irrespective of how it is collected or stored.

This Privacy Policy is in compliance with the Nigeria Data Protection Act 2023 (“the NDPA”) and the Nigeria Data Protection Commission’s General Application and Implementation Directive 2025 (“GAID”) and is applicable to any Personal Information which is given by You to Us (User Information) via our website. Your privacy is important to Us and this Policy is devised to help you feel more confident about the privacy and security of your personal details. Except as otherwise stated in this Policy, the Company is a Data Controller in the manner defined in the NDPA.

In this Policy

“Consent” means any freely given, specific, informed and unambiguous indication through a statement or clear affirmative action by You signifying agreement to the processing of personal data relating to You.

“Personal Information” refers to information about any individual that can be used on its own or with other information, directly or indirectly, to identify, contact or locate a single person. It includes but is not limited to a name, an identification number (such as a BVN or NIN), physical address, email address, IP address and location data.

“You” means the user(s) of the Site collectively and/or individually as the context allows.

“We/Us/the Company” means AfricaCompare Limited and any affiliate thereof.

“Processing” means anything done with personal data, whether or not by automated means, such as collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, dissemination, alignment, restriction, erasure or destruction.

1. Who we are

This Website is operated by AfricaCompare Limited. Our registered number is 14098447 and our registered address is 3 More London Riverside, London SE1 2AQ, United Kingdom. Our operating address in Nigeria is 29 Commercial Avenue, Sabo, Yaba, Lagos 101212.

Our registration as a data controller with the Nigeria Data Protection Commission is currently pending.

2. Privacy and Cookies Policy

• This Privacy and Cookies Policy sets out the basis on which we collect your personal data and use Cookies. Please read it carefully before using the Website.
• We are committed to protecting your privacy online. We explain how we collect information, what we do with it and what controls you have.
• By clicking “I agree” to this Policy, you consent to the collection and use of your personal information in accordance with it. Where a particular use requires your consent under the NDPA (for example marketing, surveys or the processing in clause 7B), we will seek that consent separately — your general acceptance of this Policy is not treated as consent for those purposes.
• Our Policy may be updated from time to time to reflect changes in our practices or the law. Where changes are material, we will take reasonable steps to notify you. Please review this page regularly. Continued use of the Website after changes take effect means you have agreed to the revised Policy.
• This Privacy and Cookies Policy was last updated on 30 June 2026.

3. Scope

These Policies apply to all activity on our Website and social media platforms in which the provision and processing of Information is required. Information classified as public is not subject to this Policy.

4. Other Applicable Terms

In addition to this Policy, our Website’s Terms of Use also apply to your use of the Website and are, where relevant, incorporated by reference.

5. Lawful basis and consent

Consent within the meaning of this Policy is your agreement to the processing of your Information for a stated purpose. Where consent is relied upon, it will be obtained separately for each specific purpose (e.g., marketing, surveys, customer-knowledge processing). Consent will never be bundled or treated as a precondition for accessing our Services. You may withdraw consent at any time, and withdrawal will be as easy as giving consent.

Where you provide Information about third parties, you must ensure their consent has been obtained beforehand.

We will only collect and/or process your Information where one of the following lawful bases under the NDPA applies:

• you have given consent for one or more specific purposes;
• it is necessary for the performance of a contract with you, or an order or instruction issued by You;
• it is necessary for compliance with a legal obligation to which we are subject;
• it is necessary for our legitimate interests or those of a third party — for example securing our platform, preventing fraud, or improving our Services — except where overridden by your rights and interests. We carry out a balancing assessment before relying on this basis;
• it is necessary to protect the vital interests of you or another person; or
• it is necessary for the performance of a task carried out in the public interest or official public mandate vested in Us.

You have the right to withdraw your consent at any time (see Clause 16). Withdrawal does not affect processing already carried out, or processing under another lawful basis.

6. Information we may collect from you

• 6.1 We may collect and process the following information about you:
  • personal information (such as your name, date of birth, email, postal address, BVN, and demographic information) provided when you register, submit material or request information;
  • your log-in and password details;
  • details of transactions made through the Website;
  • where you choose to provide them, bank statements or linked-account information used to assess suitability or affordability;
  • communications you send Us; details of your visits and resources you access; technical information from your device; and information you post in public areas.
• 6.2 You are under no obligation to provide such information, but if you withhold it we may not be able to provide certain Services.

7. How we use your information

We will use the personal information you provide to:

• 7.1 identify you when you sign into your account;
• 7.2 provide requested comparisons of services, products and information, and communicate about promotional offers;
• 7.3 administer your account;
• 7.4 execute your orders, including processing payment information;
• 7.5 analyze use of the Website to improve our content and services, including research into our users’ demographics;
• 7.6 send you information you have requested or agreed to receive, including marketing, where you have consented;
• 7.7 allow, with your prior consent, selected third parties to send you information about their products and services;
• 7.8 improve and optimize our Website;
• 7.9 invite you, where you have consented, to take part in research and satisfaction surveys;
• 7.10 update or confirm existing records;
• 7.11 respond to your enquiries and instructions;
• 7.12 comply with legal authority or lawful requests by regulators; and
• 7.13 fulfil our general business operations, including accounting, recordkeeping and administration.

7A. Research and satisfaction surveys

Where we invite you to take part in a survey about our Services and the survey is run on our behalf by a third party, that party acts as our data processor: it may use the data we provide only to administer the survey on our documented instructions, and may not reuse it for its own purposes. For such surveys we share only the minimum personal data needed to reach you (typically your first name and email address), invite only customers who have not objected to being contacted, identify ourselves as the sender, and give you a clear way to opt out.

7B. Customer-knowledge processing (aggregated financial insights)

Participation in customer-knowledge processing is entirely optional. Each category of processing (profiling, aggregation, sharing with institutions) requires a distinct opt-in. No adverse consequence will result from declining. Insights shared with institutions will be limited to the minimum necessary, and institutions must comply with NDPA and GAID safeguards, including human review of automated decisions.

8. Disclosure of Personal Information

Personal data will be used only for the reasons specified in “How we use your information” above. Personal information shall not be sold, and shall not be disclosed to any third party except with your consent (where you consent, we draw your attention to the fact that this information may be transferred within or outside Nigeria), or where the law requires (for example, to law-enforcement agents or courts).

We may share personal information with the following categories of third parties:

• third-party service providers, media partners and affiliates that provide services to Us or to whom we outsource certain services (such as data hosting, technology or survey services), acting on our instructions under a written agreement meeting NDPA section 29;
• our professional advisers, such as accountants, for audit purposes;
• government and/or regulatory authorities; professional indemnity insurers; tax authorities and corporate registries.

We may also share aggregated or de-identified information with third parties for research, marketing and analytics, provided such information does not identify an individual.

9. Data Retention

Personal Information will be retained only for the period necessary to fulfil the stated purpose, in line with our retention schedule (available on request). Profiles and insights created under Clause 7B will be retained for a maximum of 5 years, after which they will be deleted or anonymized.

10. Information sharing

• 10.1 You can decline to receive information about our or third parties’ products and services, or to have your details shared with third parties, at the point of collection or later by using the unsubscribe instructions or contacting Us.
• 10.2 We may disclose aggregate statistics about visitors that include no personally identifiable information.
• 10.3 We may disclose your personal information to our affiliates, agents or contractors who assist Us (for example with transactions, communications, data analysis or support services). Such parties act as our processors under a written agreement meeting NDPA section 29 and will only use your information to the extent necessary to perform their functions.
• 10.4 If we undergo reorganization or are sold, your personal information may be transferred to the successor entity, subject to this Policy.
• 10.5 We may disclose your personal information where legally entitled or required to do so.

10A. Loyalty & Rewards Program

• 10A.1 Where You choose to participate in Our Loyalty & Rewards Program, We will collect and process additional categories of Personal Information beyond those described in Section 6 above, including: evidence of your transactions that You upload for verification (such as receipts, statements, or screenshots); your unique referral code and information about the relationship between You and any User You refer, or who referred You; and bank account details (such as bank name, account number, and account name) You provide for the purpose of receiving a Reward payout.
• 10A.2 Information collected for the Loyalty & Rewards Program will be used solely for verifying eligibility, processing payouts, and fraud prevention. It will not be repurposed for marketing or profiling without your separate consent.
• 10A.3 In connection with the Program, We may share your Personal Information with: our customer relationship management and records provider, for the purpose of maintaining your Reward balance and processing your redemption request; and our third-party payment service provider(s), for the sole purpose of completing your Reward payout. These third parties are only provided with the information reasonably necessary to perform these functions.
• 10A.4 Information collected in connection with the Program will be retained for as long as reasonably necessary to administer the Program, resolve any disputes relating to a Reward, and comply with Our legal and regulatory obligations, after which it will be deleted or anonymized in accordance with Section 9 (Data Retention) above.
• 10A.5 All other provisions of this Privacy and Cookies Policy, including Your Rights under Section 16, apply equally to Personal Information collected in connection with the Program.

11. Additional information

When you visit the Website we may automatically collect information such as your browser or device type, referring website, IP address and operating system. We use this information to operate and secure the Website, monitor and improve its performance, analyze usage trends, troubleshoot technical issues, and generate aggregated or anonymized statistical information that does not identify individual users.

12. Cookies and similar technology

• 12.1 The Website uses Cookies or similar technology to collect information about your access to the Website.
• 12.2 Cookies are small pieces of information transferred to your device. Some last only for your session; others remember you on return and last longer.
• 12.3 We use Cookies to recognize you, allow easier navigation, remember your login session and preferences, customize layout and content, and collect statistical information to improve our Services.
• 12.4 Our Website uses both first-party Cookies set by Us and third-party Cookies set by service providers acting on our behalf, including our website and hosting platform (HubSpot) and tag-management and analytics tools (such as Google Tag Manager and associated analytics). These third parties may set Cookies to help us measure and improve performance.
• 12.5 Most browsers accept Cookies automatically, but you can change your settings to refuse or delete them. Blocking Cookies may prevent full use of the Website.
• 12.6 Where required, we ask for your consent to non-essential Cookies through our cookie banner.

13. Public forums

Any information disclosed in chat rooms, message boards or other public forums becomes public. Exercise caution and never disclose personal information there.

14. External links

The Website may contain links to external websites. We are not responsible for their privacy policies or content.

15. Security

• 15.1 We place great importance on security and have technical and organisational measures in place to protect personal information against loss, misuse and unauthorised access. Only authorised personnel have access, and our practices are reviewed periodically. We cannot guarantee absolute security but use all reasonable efforts.
• 15.2 Submission of information over the internet is never entirely secure and is at your own risk.
• 15.3 Please close your browser when you have finished your session.
• 15.4 Personal data breaches
   Where a personal data breach is likely to result in a risk to your rights and freedoms, we will notify the Nigeria Data Protection Commission within 72 hours of becoming aware of it, and will inform affected data subjects without undue delay where the breach is likely to result in a high risk to them.

16. Your Rights

• 16.1 Right to withdraw consent

  You may withdraw your consent to processing at any time, as easily as you gave it, via the Website, email, letter or phone. This may mean we can no longer provide certain Services. Withdrawal cannot be backdated and does not affect processing already performed.

• 16.2 Right to access, rectification, deletion, restriction, objection and copies

  You have the right to access your Information; receive copies (subject to a possible fee for excessive requests); object to or restrict processing; rectify or update inaccurate Information; and request deletion. You also have the right to data portability, where applicable, and to receive your data in a commonly used electronic format.

• 16.3 Automated decision-making and profiling

  Where a decision producing a legal or similarly significant effect on you would be based solely on automated processing, we will not carry it out on that basis unless permitted by the NDPA and with appropriate safeguards. In such cases you have the right to be informed, to obtain a meaningful explanation of the logic involved, to express your point of view, and to request human review of the decision.

• 16.4 Right to complain and seek redress

  Where you consider your Personal Information has been misused, you may complain to the Nigeria Data Protection Commission or the courts. Please notify Us immediately upon discovering or suspecting via any of our contact channels and we will endeavour to resolve the issue within 30 days of acknowledging your complaint, including if you believe your account has been compromised, your information used fraudulently, or you have been asked for your password by email or SMS.

17. Transfer and storing of Personal Information outside Nigeria

Due to the international nature of our operations, we may process, transfer or store your Personal Information in countries other than Nigeria. Where Personal Information is transferred outside Nigeria, we will ensure compliance with NDPA and GAID 2025 by using one of the following safeguards: adequacy decision, standard contractual clauses approved by the NDPC, or binding corporate rules. Details of applicable safeguards are available on request.

18. Contact us

19. Disclaimer

This Policy covers only our operations on the Site, our social media platforms and other online channels. Third parties to which we link may have their own policies, for which we accept no responsibility. We are not responsible for information you voluntarily make public in forums, message boards, profiles or other public areas of Our Services, and we do not recommend that you share Personal Information there.