Privacy FAQ

1. What kind of Personal information is in PayU Nigeria’s possession?

The scope of Personal information we process about you will depend whether you use PayU payment services as a merchant, or you submit a request to us or you visit our PayU Nigeria website. We may collect the following categories of personal information account log in information, contact information, financial information, transactional information, usage and technical information.  You can read more here.

2. What are my rights under the Nigerian Data Protection Regulation (NDPR) on personal data protection?

Under the Nigerian Data Protection Regulation, you can exercise the rights as stated in our PayU Nigeria Privacy Statement.  By clicking on the link, you will be taken directly to section in our Privacy Statement on what your individual rights are.

3. Awareness about the NDPR and its Framework

You can visit https://nitda.gov.ng/faq/ to learn more about data protection and the NDPR and its initiatives.  We encourage all our merchants, supplier and partners to ensure compliance with the Nigeria Data Protection Regulation as required.

4. Why does PayU need my email address?

We may need your email address in order to register and process your payment with our merchants. Your email can be also needed when you want to log-in to relevant PayU Nigeria’s services.

5. Why does PayU need my mobile number?

We may need your mobile number for purposes of risk analysis of payment transaction we serve for you as a payment provider.  We may use also your mobile number if you have requested us to contact you via mobile numbers.

6. How does PayU protect my personal information and keep my personal information secure?

The security of your personal information is important to us. We take legal, technical and organizational measures that we consider necessary in order to maintain the confidentiality and security of your personal information, with due regard to the applicable obligations and exceptions under the NDPR and other applicable legislation in force.

We follow the payments industry standards regarding the protection of payment card information. PayU is regularly audited to maintain the highest level of security certification with the Payments Card information Security Standard Council (PCI) in respect of protecting card data.

7. What is the purpose of processing my personal information by PayU?

PayU may need to process your personal information for purposes related to the payment services you have ordered from PayU and meet relevant legal obligations resulting from providing you such services. For more detailed description of the purposes of processing your Personal information you can click here to learn more about it.

8. Which companies may have access to my Personal information and when?

We may engage external vendors who support our infrastructure or our processes necessary to render you payment services. Each such vendor is bound with confidentiality and security obligations in order to protect your personal information.

 

We may also share your personal information with other payment providers engaged in the process of rendering you the payment services eg. Banks, payment schemes like Visa, Mastercard or Verve.

9. Why do you share my personal information with other companies?

We may need to share your personal information with our vendors for purposes of rendering by them services to us or providing us the infrastructure we need to serve your payments.

We may be also obliged to share your personal information with entities that are authorised to receive it under the applicable provisions of law, including relevant judicial authorities.

 

We may also share your personal information with other payment providers engaged in the process of rendering you the payment services eg. Banking partners and payment schemes like VISA, Mastercard or Verve in order to provide you the payment/financial services you have ordered from us.

10. How long do you keep my personal information for?

We may store your personal information for as long as required for the fulfilment of the purposes for which we collected it. The retention of Personal information by us is determined by considering compliance with legal (contractual or statutory requirements), accounting and compliance reporting requirements.

11. Can I remove personal information that PayU holds about me and how?

Yes. You have the right to have your personal information removed if your personal information is no longer needed for its original purpose and no other lawful purpose exists. You may ask us to processing using your personal information by contacting us through our Privacy Portal.

 

PayU may not immediately fully remove all your personal information. As financial and payments services provider we have a legal duty to store payment transaction data for a mandatory period of time under applicable laws in Nigeria or in the world e.g., to prevent anti-money laundering and combat anti-corruption and financing of terrorism.  However we do not keep personal information for longer than is required.

11