Privacy Policy & Data Protection

We only collect information necessary to fulfill your requested transactions and secure your account:

• Identity & Contact: Full name, telephone number, and email address provided during registration or checkout.
• Utility & Transactional Data: Meter numbers, smartcard numbers, recipient phone numbers for data/airtime top-ups, transaction references, and timestamp logs.
• Security Credentials: Encrypted password hashes and a self-selected 4-digit transaction authorization PIN. We never store plain-text passwords or PINs.
• Technical Information: IP address, device operating system, browser type, and diagnostic error logs used solely for fraud prevention, rate limiting, and system stability.

To successfully process your orders, specific transactional identifiers are shared with authorized third parties on a strict need-to-know basis:

• Telecommunication Carriers & Aggregators: Recipient phone numbers and requested bundle sizes are shared with carriers (MTN, Airtel, Glo, 9mobile) and certified data gateways to dispatch SME data and airtime.
• Electricity Distribution Companies (Discos): Meter numbers and payment amounts are transmitted to discos (IKEDC, EKEDC, AEDC, IBEDC, etc.) to generate your 20-digit prepaid recharge token.
• Licensed Payment Gateways & Banks: Payment processing, card clearing, and bank transfer verifications are executed via PCI-DSS certified payment processors (e.g. Paystack, Monnify). ZuvaPay does not store or process raw debit card PANs or CVVs.
• International Carrier Aggregators: For foreign virtual SMS numbers, requests are forwarded to global telecom switches without sharing your personal identity.

We never sell, rent, or trade your personal information to marketing brokers, data aggregators, or unauthorized third parties.

As a data subject under Nigerian law, you are entitled to: