We care about your Privacy Policy
Your privacy is important to us. This policy explains how we collect, use, and protect your information.
Effective Date: January 1, 2023
Last Updated: January 1, 2025
ARRAVO Technology Services (“ARRAVO”, “we”, “our”, or “us”) is committed to protecting your personal data and ensuring your privacy rights are respected. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our insurance marketplace application (“the App”) developed for customers in Nigeria.
This policy complies with the Nigeria Data Protection Regulation (NDPR) and other applicable laws and regulations.
1. Scope and Consent
By accessing and using our App, you consent to the practices described in this Privacy Policy. This policy applies to all users, including policy buyers, insurance partners, and third-party service providers who interact with the App or any related services.
2. Information We Collect
We may collect the following categories of personal data:
- Identity Information: Full name, date of birth, gender, National Identification Number (NIN), BVN.
- Contact Information: Phone number, email address, residential address.
- Financial Information: Bank details, payment card information (where applicable).
- Insurance Data: Insurance preferences, history, claims, and related documentation.
- Device and Technical Information: IP address, mobile device identifiers, operating system, app usage data.
- Biometric Data (if required): Facial recognition or fingerprint (used only with explicit consent and in accordance with NDPR).
3. How We Use Your Information
Your personal data may be used for the following purposes:
- To facilitate the purchase and management of insurance policies.
- To verify your identity and prevent fraud.
- To personalize your user experience within the App.
- To communicate with you regarding your account or transactions.
- To comply with legal obligations and regulatory requirements.
- For internal analytics and product development.
4. Legal Basis for Processing
We rely on the following legal bases under the NDPR:
- Consent: You have given clear consent to process your data.
- Contractual Necessity: Processing is necessary for the performance of a contract.
- Legal Obligation: Processing is required to comply with Nigerian laws.
- Legitimate Interests: Processing is necessary for our legitimate business interests (e.g., fraud prevention, service improvement).
5. Data Sharing and Disclosure
We may share your personal data with:
- Insurance Providers: To complete your insurance application or policy processing.
- Third-Party Service Providers: For payment processing, identity verification, hosting, and analytics.
- Regulatory Authorities: Where required by law or to comply with a legal process.
- Affiliates or Business Partners: Under strict data protection agreements.
We ensure all third parties comply with the NDPR and implement adequate data protection measures.
6. Data Security
We implement appropriate technical and organizational measures to secure your personal data, including:
- End-to-end encryption of sensitive data.
- Secure cloud storage with access controls.
- Multi-factor authentication.
- Regular audits and vulnerability assessments.
7. Data Retention
We retain your personal data for as long as necessary to fulfill the purposes stated in this policy or as required by law. Once data is no longer needed, it will be securely deleted or anonymized.
8. Your Data Privacy Rights
Under the NDPR, you have the following rights:
- Right to Access: You can request a copy of your personal data.
- Right to Correction: You can request that inaccurate data be corrected.
- Right to Deletion: You can request the deletion of your data, subject to legal and contractual obligations.
- Right to Object: You may object to processing based on legitimate interests.
- Right to Withdraw Consent: You can withdraw consent at any time.
To exercise any of these rights, please contact us at privacy@arravotech.ng .
9. Cross-Border Data Transfer
Where data needs to be transferred outside Nigeria, such transfers will only occur to countries with adequate data protection laws or with your explicit consent, in compliance with the NDPR.
10. Children’s Privacy
Our services are not intended for children under the age of 18. We do not knowingly collect personal data from minors. If we discover that a minor has provided us with personal data, we will delete such data immediately.
11. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will notify users through the App and update the "Last Updated" date. Continued use of the App after such changes indicates your acceptance of the revised policy.
12. Contact Us
f you have questions, concerns, or complaints regarding this Privacy Policy or our data handling practices, please contact:
call customer care