Privacy Policy

Chawpass Limited (“Chawpass”, “we”, “us”, or “our”) provides food-restricted payment cards and wallets for employers, individuals, merchants and partners in Nigeria. This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, and the choices and rights you have in respect of that information.

This Policy applies to our website, mobile applications, USSD service, the Chawpass card and wallet, our merchant locator, and any employer or merchant portal we operate (together, the “Services”). By using the Services, you agree to the collection and use of information in accordance with this Policy.

We collect information in the following ways:

• Information you give us — name, phone number, email address, date of birth, government-issued ID (such as BVN or NIN where required for identity verification), employer or business details, and delivery or billing address when you register, apply for a card, or contact support.
• Financial and transaction information — card and wallet balances, funding sources, transaction history, merchant details, and amounts spent, processed on our behalf by our CBN-licensed sponsor bank and payment processing partners.
• Employer and payroll data — where an employer funds allowances for its staff, we process the employee list, allowance amounts, and disbursement schedules the employer provides.
• Merchant data — business name, location, category, and settlement details for merchants that accept Chawpass.
• Device and usage information — IP address, device identifiers, browser type, operating system, pages visited, and approximate location (for example, to power the merchant locator).
• Cookies and similar technologies — as described in the Cookies and Tracking Technologies section below.

We use the information we collect to:

• Create and manage your Chawpass account, card and wallet;
• Verify your identity and comply with Know Your Customer (KYC) and anti-money laundering obligations;
• Process funding, spend, settlement and refund transactions;
• Operate employer disbursement schedules and merchant settlement;
• Provide customer support and respond to enquiries or complaints;
• Detect, investigate and prevent fraud, unauthorised transactions and other illegal activity;
• Send transactional messages, service updates, and — where you have opted in — product news and offers;
• Improve and personalise the Services, including the merchant locator and Food Price Index; and
• Comply with applicable law and regulatory requirements, including those of the Central Bank of Nigeria (CBN).

We do not sell your personal information. We may share it with:

• Our CBN-licensed sponsor bank, which issues Chawpass cards and holds wallet funds in custody;
• Payment processors, card schemes, and identity-verification providers who help us operate the Services;
• The employer or business that funds your allowance, limited to the information needed to administer that allowance;
• Merchants, solely to the extent needed to authorise and settle a transaction;
• Service providers who support hosting, analytics, customer support and communications, under contractual confidentiality obligations;
• Regulators, law enforcement, or courts, where required by law or to protect the rights, safety or property of Chawpass, our users, or the public; and
• A successor entity in connection with a merger, acquisition or sale of assets, subject to this Policy continuing to apply.

We retain personal information for as long as your account is active and for a reasonable period afterwards to meet our legal, regulatory, tax, accounting and fraud-prevention obligations — including the record-keeping periods required of regulated financial products in Nigeria. When information is no longer required, we securely delete or anonymise it.

Subject to the Nigeria Data Protection Act 2023 and applicable regulations, you have the right to:

• Request access to the personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Request deletion of your information, subject to our legal and regulatory retention obligations;
• Object to or restrict certain processing of your information;
• Request a copy of your information in a portable format; and
• Withdraw consent for marketing communications at any time.

To exercise any of these rights, contact us using the details in Contact Us below. We may need to verify your identity before acting on a request.

We use administrative, technical and physical safeguards — including encryption in transit, access controls, and card/wallet processing through our licensed sponsor bank — designed to protect your information against unauthorised access, loss, misuse or alteration. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

We use cookies and similar technologies to keep you signed in, remember your preferences, understand how the Services are used, and measure the performance of our website. You can control cookies through your browser settings; disabling some cookies may affect the functionality of the Services.

We also use third-party advertising and measurement tools on our marketing website, including the Meta Pixel from Meta Platforms, Inc. These are switched off until you accept them in the cookie banner: the pixel loads but transmits nothing to Meta until you consent, and it stays off if you decline. Once accepted, it sets cookies and reports page views and actions such as joining the waitlist or submitting the contact form, so we can measure how our advertising performs and show relevant ads on Meta products like Facebook and Instagram. It does not receive the contents of your messages. You can manage how Meta uses this information through your Meta ad preferences, change your choice at any time using the “Cookie settings” link in our footer, or block these cookies through your browser settings or an ad blocker without losing access to the Services.

The Services are not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

We primarily store and process information within Nigeria. Where we use service providers located outside Nigeria, we take steps consistent with the Nigeria Data Protection Act 2023 to ensure your information continues to receive an adequate level of protection.

We may update this Policy from time to time to reflect changes to our practices or for legal, regulatory or operational reasons. We will post the updated Policy on this page with a revised “Last updated” date, and where changes are material, we will provide additional notice.

If you have questions about this Privacy Policy or how we handle your information, contact us at hello@chawpass.com or write to Chawpass Limited, RC 9654485, Lagos, Nigeria.