Privacy Policy

Doc Ref: TIL-PP-001  |  Version 2.0

Trustiva International Ltd. ("Trustiva"), RC No. 9270707, Abuja FCT, Nigeria, is committed to protecting your privacy. This Policy describes how we collect, use, store, share, and protect your personal data.

1. Data controller

Trustiva International Ltd. is the Data Controller. Our Data Protection Officer (DPO): dpo@trustiva.ng.

2. Personal data we collect

We collect the identity, contact, KYC/verification, financial, and technical data needed to operate the platform — for example your name and contact details, government ID/BVN, bank account details, transaction records, and device/login information.

3. How we collect & our legal basis

We collect data directly from you and from third-party verification providers, and process it under performance of contract, legal obligation (KYC/AML), legitimate interests, and consent (marketing, withdrawable at any time).

4. How we use your data

KYC onboarding and identity verification; escrow-facilitation management; payment processing and fraud detection; CBN, EFCC, and NDPC regulatory compliance; transactional communications; marketing (with consent); platform improvement; and customer support.

5. Data sharing

We share data only with our verification and payment partners, our escrow Custodian Partner, regulators when legally required, and infrastructure providers who process data on our behalf. We do not sell your personal data.

6. International transfers & retention

Any transfer of personal data outside Nigeria is made only with adequate safeguards in place.

Data is securely deleted or anonymised thereafter.

7. Your rights

You may: access your data; rectify inaccurate data; request erasure (subject to legal retention); restrict processing; object to legitimate-interest processing; request data portability; and withdraw consent.

Contact dpo@trustiva.ng (response within 30 days). Complaints may be lodged with the NDPC.

8. Cookies & security

We use essential, analytics (with consent), and marketing (with consent) cookies, controllable via browser settings. We implement encryption in transit and at rest, multi-factor authentication, role-based access controls, regular penetration testing, and ISO 27001 / SOC 2-equivalent controls (or are working towards these). Breaches are reported to the NDPC within 72 hours and to affected data subjects as required.

9. Children & updates

Our Services are not directed at children under 18, and we do not knowingly collect their data; if discovered, it is deleted immediately. Material changes to this Policy are notified by email or platform notification at least 30 days before the effective date.

10. Contact

DPO: dpo@trustiva.ng  |  Legal: legal@trustiva.ng  |  Trustiva International Ltd., Abuja, Nigeria.