Privacy Policy

Account information: When you register, we collect your full name, email address, phone number, and (where applicable) BVN or NIN for identity verification as required by the Central Bank of Nigeria (CBN).

Transaction data: We record details of every transaction you initiate — including service type, recipient identifiers (phone numbers, meter numbers, smartcard numbers), amounts, and timestamps.

Device and usage data: We collect IP address, device type, operating system, browser type, and usage patterns to improve the Service and detect fraud.

Payment information: Card or bank account details are processed by our PCI-DSS compliant payment partners. ARATEC does not store full card numbers on its servers.

To provide and operate the Service — processing your transactions, generating receipts, and maintaining your account history.

To comply with regulatory obligations under the Nigeria Data Protection Act (NDPA), CBN directives, and applicable anti-money laundering (AML) requirements.

To communicate with you — sending transaction confirmations, service updates, and (with your consent) promotional communications.

To detect, investigate, and prevent fraudulent transactions and other illegal activities.

To improve and personalise the Service through analysis of aggregated, anonymised usage data.

We process your personal data under the following legal bases as defined in the Nigeria Data Protection Act 2023: (a) Performance of a contract — processing necessary to provide the Service you requested; (b) Legal obligation — compliance with applicable Nigerian laws and regulations; (c) Legitimate interests — fraud prevention, security, and service improvement; (d) Consent — where you have explicitly opted in to marketing communications.

We do not sell your personal data. We share data only as necessary to provide the Service:

Service providers: Third-party utility providers (telcos, DisCos, cable operators, examination bodies) receive the minimum data required to fulfil your transaction (e.g., phone number for airtime top-up).

Payment processors: Your payment information is shared with our licensed payment processing partners.

Regulatory bodies: We may disclose data to the CBN, EFCC, FIRS, or other regulatory authorities as required by law.

Legal proceedings: We may disclose data in response to lawful court orders or legal processes.

ARATEC implements industry-standard security measures including TLS 1.3 encryption for data in transit, AES-256 encryption for sensitive data at rest, multi-factor authentication options, and continuous intrusion detection monitoring.

Despite our best efforts, no system is 100% secure. In the event of a data breach that affects your rights, we will notify you within 72 hours as required by the NDPA.

We retain account and transaction data for a minimum of 5 years as required by Nigerian financial regulations and tax laws. After this period, data is securely deleted or anonymised.

If you close your account, we retain data for the regulatory minimum period before deletion. You may request a copy of your data at any time.

Under the Nigeria Data Protection Act 2023, you have the right to: access your personal data; correct inaccurate data; request deletion (subject to legal retention obligations); object to processing; and data portability.

To exercise any of these rights, email privacy@aratec.ng. We will respond within 30 days. Identity verification may be required before processing your request.

We use essential cookies to maintain your session and security state. We use analytics cookies (with your consent) to understand how users interact with the platform. You can manage cookie preferences in your browser settings.

The Service is not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us with data, please contact privacy@aratec.ng immediately.

We may update this Privacy Policy periodically. Material changes will be communicated via email or in-app notification at least 30 days before taking effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

For privacy-related enquiries or to exercise your data rights, contact our Data Protection Officer at: privacy@aratec.ng

Postal address: ARATEC Ltd, Lagos, Nigeria.