Privacy Policy

Your privacy matters to us at CardRex

Last Updated: December 2024

Welcome to CardRex. We are Nigeria’s premier digital gift card trading platform, committed to providing secure, fast, and reliable services to our users. This Privacy Policy explains how we collect, use, protect, and share your personal information when you use our platform at cardrex.app and our mobile applications.

1. Information We Collect

1.1 Personal Information You Provide

When you register for a CardRex account, we collect:

Account Information: Full name, email address, phone number, username, and password
Identity Verification: Government-issued ID, BVN, date of birth, and residential address
Financial Information: Bank account details for payment processing
Transaction Data: Gift card images, transaction history, and payment records
Communication Data: Messages through customer support channels

1.2 Information Automatically Collected

When you access our platform, we automatically collect:

Device Information: Device type, OS, browser, and unique identifiers
Usage Data: Pages visited, features used, and navigation patterns
Log Data: IP address, access times, and error logs
Location Data: General location based on IP address

1.3 Information from Third Parties

We may receive information from:

Identity verification services (NIMC, credit bureaus)
Payment processors and financial institutions
Fraud prevention and security providers
Analytics and advertising partners (with consent)

2. How We Use Your Information

CardRex uses your information for the following purposes:

🔐 Service Delivery & Account Management

Create and maintain your CardRex account
Process gift card transactions and facilitate payments
Verify identity and prevent fraud
Provide customer support
Manage preferences and settings

📊 Platform Improvement & Development

Analyze usage to improve user experience
Develop new features and services
Conduct research and analytics
Test and troubleshoot issues

💬 Communication & Marketing

Send transaction confirmations
Provide service updates
Send promotional offers (with consent)
Request feedback

⚖️ Legal & Compliance

Comply with Nigerian financial regulations
Meet KYC and AML requirements
Detect and prevent fraud
Respond to legal requests
Protect rights and safety

3. Data Security & Protection

At CardRex, we implement industry-standard security measures:

🔒 Encryption

All data transmitted using SSL/TLS technology.

🛡️ Access Controls

Restricted access to authorized employees only.

🔐 Secure Storage

Encrypted databases with regular audits.

🚨 Monitoring

Continuous monitoring for threats.

⚠️ Your Responsibility: Keep your credentials confidential. CardRex will never ask for your password via email, SMS, or other channels.

4. Information Sharing & Disclosure

CardRex does not sell your personal information. We only share in these circumstances:

4.1 Service Providers

Trusted third-party providers who help operate our platform:

Payment processors and banking partners
Identity verification services
Cloud hosting providers
Customer support platforms
Communication services

4.2 Legal Requirements

We may disclose information when required by law:

Comply with legal processes
Cooperate with law enforcement
Meet regulatory requirements
Protect legal rights
Investigate fraud

4.3 Business Transfers

In case of merger or acquisition, your information may be transferred. We will notify you before this occurs.

5. Your Rights & Choices

Under NDPR, GDPR, and CCPA, you have these rights:

✅ Right to Access

Request a copy of your personal information.

✏️ Right to Rectification

Request correction of inaccurate information.

🗑️ Right to Erasure

Request deletion of your data (subject to legal requirements).

⏸️ Right to Restrict Processing

Request limitation of data processing.

📦 Right to Data Portability

Receive your data in a portable format.

🚫 Right to Object

Object to processing for marketing purposes.

How to Exercise Your Rights

6. Cookies & Tracking Technologies

CardRex uses cookies to enhance your experience:

Cookie Type	Purpose	Duration
Essential	Required for basic functionality	Session
Performance	Analyze usage patterns	1 year
Functionality	Remember preferences	1 year
Marketing	Display relevant ads	90 days

You can manage cookies through your browser settings.

7. Data Retention

We retain your information as long as necessary to:

Provide Services: Maintain your account
Legal Compliance: Meet regulatory requirements (7 years for financial records)
Fraud Prevention: Detect fraudulent activities
Dispute Resolution: Handle legal claims

Account Deletion

If you close your account, we delete or anonymize your data within 90 days, except data required by law. Request deletion through account settings or support.

⚠️ Important: Deleted data cannot be recovered. Back up important information before deletion.

8. International Data Transfers

CardRex primarily operates in Nigeria. When we transfer data internationally, we ensure appropriate safeguards:

Standard contractual clauses
Data processing agreements
NDPR compliance
International data protection standards

9. Children’s Privacy

Age Restriction: CardRex services are only for individuals aged 18+. We do not knowingly collect information from anyone under 18. If you believe your child provided information, contact us at [email protected] immediately.

10. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices. When we make material changes, we will:

Post the updated policy with a new “Last Updated” date
Notify you via email
Display a notice on our platform
Request consent for changes requiring it

Your continued use after updates constitutes acceptance. Review this policy periodically.

📧 Contact Us

Questions about this Privacy Policy or our data practices? Contact us:

📧 Email:

📞 Phone:
+234 (0) 806 123 4567

💬 Live Support:
24/7 on cardrex.app

📍 Address:
CardRex Technologies Limited
Lagos, Nigeria

We respond to privacy inquiries within 48 hours.