Introduction
Welcome to Chequebase's privacy policy. Chequebase values your privacy and pledges to safeguard your personal information. This document explains how we manage your personal information when you access our website from any location. It also details your privacy rights and the legal protections in place for you.
Key Information and our Identity
Purpose of This Privacy Policy
This document is designed to provide details on how Chequebase gathers and processes your personal information via this website. This includes information provided when subscribing to our newsletter, or purchasing a product or service. We advise you to read this privacy policy in conjunction with any other relevant policies we may issue during specific data collection or processing events. This policy complements, and does not replace, other notices and privacy policies.
Data Controller
Chequebase is the data controller and is accountable for your personal information (referred to as "Company", "we", "us", or "our" in this policy). For any inquiries about this policy or to exercise your legal rights, please contact us at compliance@chequebase.io
Policy Updates and Your Responsibility to Notify Us of Changes
Our privacy policy is subject to periodic review. Ensuring that the personal information we maintain about you is up-to-date is crucial. Please inform us of any changes in your personal information during your association with us.
External Links
Our website may have links to external sites, plug-ins, and applications. Interacting with these links may allow third parties to collect or share your data. We have no control over these external websites and their privacy statements. We recommend reviewing the privacy policy of each site you visit.
Data We Collect About You
Personal information is any data about an individual that can lead to their identification. This does not include information where the individual's identity has been removed (anonymous data). We may collect, use, store, and transfer various types of personal data about you, which are grouped as follows:
- Identity Data includes first name, last name, username or similar identifier, marital status, title, date of birth, and gender.
- Contact Data comprises billing address, delivery address, email address, and telephone numbers.
- Technical Data covers internet protocol (IP) address, login information, browser type and version, time zone, location, browser plug-in types and versions, operating system, platform, and other technologies on your access devices.
- Profile Data includes your username and password, your purchase orders, interests, preferences, feedback, and survey responses.
- Usage Data pertains to how you use our website, products, and services.
- Marketing and Communications Data reflects your marketing preferences and communication choices.
We also gather and utilize Aggregated Data like statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data in law as it does not reveal your identity. If we combine Aggregated Data with your personal data so that it can identify you, we treat the combined data as personal data in line with this privacy policy.
We do not collect Special Categories of Personal Data or data about criminal convictions and offenses.
Consequences of Not Providing Personal Data
Failure to provide necessary personal data when required under legal or contractual terms may hinder our ability to fulfill our contractual obligations or provide certain services or products. In such cases, we may have to cancel a product or service you have with us, and we will inform you if this occurs.
Collection of Your Personal Data
We collect your data through different methods:
- Direct interactions: You may provide your Identity and Contact Data by completing forms or by communicating with us via post, phone, email, or otherwise. This includes data provided when applying for our products or services, creating an account, subscribing to our services or publications, requesting marketing material, participating in promotions or surveys, and providing feedback.
- Automated interactions: As you navigate through our website, we automatically collect Technical Data about your equipment, browsing actions, and patterns using cookies, server logs, and other technologies. We may also receive Technical Data if you visit other websites using our cookies. Refer to our cookie policy for more details.
- Third parties or public sources: We may receive personal data about you from various third parties and public sources, including:
- Technical Data from analytics providers [e.g., Google outside the Federal Republic of Nigeria], advertising networks, and search information providers.
- Contact, Financial and Transaction Data from technical, payment, and delivery service providers.
- Identity and Contact Data from data brokers or aggregators and public sources.
Utilization of Your Personal Data
We will only use your personal data when legally permitted. The most common uses of your personal data are:
- To perform a contract with you.
- Where it serves our legitimate interests (or those of a third party) and your fundamental rights do not override those interests.
- To comply with a legal obligation.
We generally do not rely on consent as a legal basis for processing your personal data, although we will seek your consent before sending third party direct marketing communications to you
Purposes for Utilizing Your Personal Data
Below, we have outlined in a structured format the various purposes for which Chequebase will utilize your personal data, along with the legal justifications for each use. Where relevant, our legitimate interests in processing your data have also been specified.
It is important to note that the basis for processing your personal data might vary depending on the particular context of use. For further information about the specific legal basis we rely on to process your personal data, especially where multiple grounds have been identified, please feel free to reach out to us.
| Purpose/Activity | Data Categories | Basis for Processing and Legitimate Interest Justification |
| Registering a New Customer | Identity, Contact | Execution of a contract with you |
| Processing and Fulfilling Your Order, which includes: Handling payments, fees, and charges, Debt collection | identity, Contact, Financial, Transaction, Marketing and Communications | Execution of a contract with you, Essential for our legitimate interests (debt recovery) |
| Maintaining Our Relationship with You, including: Updating you on changes to terms or privacy policy, Requesting reviews or survey participation | Identity, Contact, Profile, Marketing and Communications | Execution of a contract with you, Compliance with legal requirements, Essential for our legitimate interests (record keeping, customer service analysis) |
| facilitating Participation in Prize Draws, Competitions, or Surveys | identity, Contact, Profile, Usage, Marketing and Communications | execution of a contract with you, Essential for our legitimate interests (customer engagement analysis, business development) |
| business and Website Administration (troubleshooting, data analysis, testing, system maintenance, support, reporting, hosting) | identity, Contact, Technical | essential for our legitimate interests (business operations, IT services, network security, fraud prevention, business restructuring), Compliance with legal requirements |
| enhancing User Experience on Website and for Tailored Advertising (evaluating advertising effectiveness) | identity, Contact, Profile, Usage, Marketing and Communications, Technical | essential for our legitimate interests (customer usage analysis, product/service development, business growth, marketing strategy) |
| improving Website, Products/Services through Data Analytics | technical, Usage | essential for our legitimate interests (customer segmentation, website relevance, business development, marketing strategy) |
| personalized Recommendations and Suggestions for Products or Services | identity, Contact, Technical, Profile, Usage, Marketing and Communications | essential for our legitimate interests (product/service enhancement, business growth) |
Marketing
Chequebase is dedicated to offering you options regarding the usage of your personal data, especially in relation to marketing and advertising.
Promotional Offers from Chequebase
We may analyze your Identity, Contact, Technical, Usage, and Profile Data to understand your interests and needs, helping us determine relevant products, services, and offers for you. This forms the basis of our marketing strategies. If you have previously requested information or purchased goods or services from us, and haven't opted out, you may receive marketing communications from Chequebase.
Third-party Marketing
Before sharing your personal data with any external parties for marketing purposes, we will seek your explicit consent.
Opting Out
You have the liberty to request Chequebase or third parties to cease sending marketing communications. This can be done by adjusting your marketing preferences on our website, using the opt-out links in any marketing message, or contacting us directly. Opting out of marketing communications does not apply to personal data given to us due to product/service purchase, warranty registration, or other transactions.
Cookies
Chequebase's website employs cookies to recognize visited areas and personalize content. The cookies do not store personally identifiable information. You can configure your browser to reject cookies or alert you when cookies are being sent. However, disabling cookies might affect the functionality of certain parts of our website.
Change of Purpose
We will use your personal data solely for the reasons it was collected, unless a new purpose arises that is compatible with the original one. For an explanation on how the new processing purpose is compatible with the original one, please contact us. Should there be a need to use your personal data for an unrelated purpose, we will inform you and clarify the legal basis for such processing. Note that your personal data may be processed without your knowledge or consent, as required or permitted by law, in line with these rules.
Disclosures of Your Personal Data
For the objectives outlined in the section 'Purposes for which we will use your personal data', we may disclose your personal data to internal and external parties as detailed in the Glossary.
Data Security
Chequebase has implemented suitable security measures to prevent accidental loss, unauthorized use, alteration, or disclosure of your personal data. Access to your personal data is restricted to those with a legitimate business need. These individuals will process your data solely on our instructions and are bound by confidentiality obligations. We have procedures in place for managing suspected personal data breaches and will notify you and any relevant regulator of a breach as legally required.
Data Retention
We retain your personal data only as long as necessary for the purposes we collected it, including legal, regulatory, tax, accounting, or reporting requirements. The retention period is determined by the volume, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, the processing purposes, and applicable legal requirements.
Your Legal Rights
You have certain rights under data protection laws regarding your personal data. These include the right to:
- Access your personal data.
- Correct your personal data.
- Erase your personal data.
- Object to processing your personal data.
- Restrict processing of your personal data.
- Transfer your personal data.
- Withdraw consent.
For exercising any of these rights, please contact legal@chequebase.io
No Fee Usually Required
Accessing your personal data is generally free, but we may charge a reasonable fee for unfounded, repetitive, or excessive requests. Alternatively, we may refuse to comply with your request under these circumstances.
Verification of Identity
To access your personal data or exercise other rights, we may need to verify your identity. This is a security measure to ensure that personal data is not disclosed to unauthorized individuals. We may also ask for more information to expedite our response.
Response Timeframe
We aim to respond to legitimate requests within one month. Complex or multiple requests might take longer, but we will notify and update you in such instances.
Glossary
LAWFUL BASIS
Legitimate Interest refers to Chequebase's business interests in managing and conducting our business to provide the best service/product and secure experience. We balance our interests against your rights before processing your personal data for our legitimate interests. We do not process personal data where our interests are overridden by your rights, unless consent is given or legally required. Contact us for more information on how we assess our legitimate interests against potential impacts on you.
Performance of Contract entails processing your data as necessary for fulfilling a contract you are part of, or to take steps at your request before entering a contract.
Comply with a Legal Obligation means processing your personal data as necessary to comply with legal obligations we are subject to.
THIRD PARTIES
Internal Third Parties
Chequebase affiliates acting as joint controllers or processors, providing IT and system administration services and undertaking leadership reporting.
External Third Parties
- IT and system administration service providers acting as processors.
- Professional advisers including lawyers, bankers, auditors, and insurers providing consultancy, banking, legal, insurance, and accounting services.
- Regulators and other authorities acting as processors or joint controllers based in the Federal Republic of Nigeria who require reporting of processing activities in certain circumstances.
