Privacy Policy

This Privacy Policy ("Policy") outlines how Rank Microfinance Bank Limited ("Rank," "We," "Us," or "Our") collects, uses, stores, discloses, and protects the personal data of individuals, including customers, employees, clients, vendors, and other third parties. We are committed to processing personal data in a lawful, fair, and transparent manner, in full compliance with the Nigeria Data Protection Act (NDPA) 2023 and its subsidiary regulations. This Policy explains our data handling practices and the rights available to you regarding the use of your personal data.

This Policy applies to all personal data collected, processed, or stored by Rank across all operational channels and touchpoints. These include, but are not limited to:

a) Our mobile and web applications,
b) Physical and digital forms,
c) Voice communications (e.g., phone calls),
d) Emails, text messages, and customer service chats,
e) In-person interactions and other communication mediums, etc.

All personal data, regardless of format or means of collection, is handled in accordance with the standards, safeguards, and user rights outlined in this Policy.

This Policy is guided by the legal requirements set out in the Nigeria Data Protection Act (NDPA) 2023, which specifies lawful grounds for the collection and processing of personal data. Rank processes personal data only when there is a valid legal basis for doing so. These include:

a) Consent: You provide consent to our processing of your personal data when you access our website, download our mobile application, or engage with our services. Consent may be withdrawn at any time, subject to legal or contractual restrictions.

b) Legal Obligation: We may process your personal data to comply with legal and regulatory obligations under Nigerian law. For example, we are required to collect specific data for compliance with Anti-Money Laundering (AML) and Countering the Financing of Terrorism (CFT) regulations.

c) Legitimate Interest: We may process your personal data when it is necessary to pursue our legitimate business interests, provided such interests do not override your fundamental rights and freedoms. These interests may include:
i. ensuring the security of our systems and operations,
ii. preventing fraud and financial crime,
iii. enhancing and improving our services,
iv. supporting operational efficiency and innovation.

Under the Nigeria Data Protection Act (NDPA) 2023, you have several rights in relation to your personal data. These rights empower you to maintain control over how your personal data is collected, processed, and used by Rank Microfinance Bank Limited. They are:

4.1. Right of Access

You have the right to request a comprehensive report of all personal data we hold about you. This includes information on: why and how your data is processed, the categories of data involved, and any third-party recipients with whom your data has been shared.

4.2. Right to Rectification

You may request that we correct or update any of your personal information that is inaccurate, incomplete, or outdated.

4.3. Right to Erasure ("Right to be Forgotten")

You have the right to request the deletion of your personal data from our records, especially when it is no longer necessary for the purposes for which it was collected. Please note that this right may be subject to legal or regulatory obligations, such as Know Your Customer (KYC) and Customer Due Diligence (CDD) rules that require financial institutions to retain certain information for a specified period.

4.4. Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that we transfer it to another service provider where technically feasible.

4.5. Right to Restrict Processing

You may request that we restrict the processing of your personal data to certain purposes or services, particularly where the accuracy of the data is contested, or the processing is unlawful.

4.6. Right to Object

You have the right to object to the processing of your personal data, particularly where it involves direct marketing, profiling, or is based on our legitimate interests, if you believe it impacts your fundamental rights or freedoms.

4.7. Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Please note that your withdrawal of consent does not affect the lawfulness of any processing carried out prior to such withdrawal.

4.8. Right to Lodge a Complaint

If you believe your data has been mishandled, you may file a complaint with us by contacting our Data Protection Officer. If you are not satisfied with our response, you may escalate your complaint to the Nigerian Data Protection Commission (NDPC).

4.9. How to Exercise Your Rights

To exercise any of your rights under this Policy, please send a clear written request specifying the right you wish to invoke to our Data Protection Team at: dataprotection@userank.com

We collect personal data during various interactions with our services in accordance with the Nigeria Data Protection Act (NDPA) 2023. This data helps us provide secure, compliant, and personalised financial services. The types of personal data we collect may include, but are not limited to, the following categories:

5.1. Know Your Customer (KYC) / Customer Due Diligence (CDD) Data

To comply with regulatory requirements and verify your identity, we may collect the following:
• full name, email address, phone number, and residential address,
• date of birth, gender, and marital status,
• Bank Verification Number (BVN) and National Identification Number (NIN),
• government-issued identification (e.g. passport, driver's license),
• biometric data (e.g. facial recognition), photographs, and employment info.

5.2. Device and Application Usage Data

To enhance platform performance and user experience, we may collect technical data from your devices, such as device type, operating system, unique device identifiers, IP address, and browser settings. With your explicit consent, we may also access GPS location data, camera access, and contacts.

5.3. Third-Party Data Sources

We may collect additional personal data from reliable third-party sources to meet regulatory obligations, assess risk, and improve service delivery. These sources include identity verification service providers, credit bureaus, banks, and regulatory databases.

By creating an account or using the Rank App, you give us express, informed, and revocable consent to collect, control, and process your personal data. We use your personal data to deliver secure, compliant, and personalised financial services. Below are the primary purposes:

6.1. Service Delivery

Your personal data enables us to provide and manage our core financial services, including opening accounts, processing transfers, assessing loan applications, and enabling app features.

6.2. Regulatory Compliance

We process data to perform KYC/CDD checks, conduct AML/CFT screenings, comply with tax requirements, and respond to lawful government requests.

6.3. Innovation and Service Improvement

We analyse personal data to improve and innovate our services, conduct market research, and evaluate new products.

6.4. Communication and Customer Support

We use your data to send transaction alerts, resolve disputes, offer promotions (with opt-out choice), and run surveys.

6.5. Security and Fraud Prevention

Your data is vital for system safety, fraud detection, verifying transactions, and protecting our infrastructure.

You acknowledge that the Rank App is provided on an "as is" basis, and that We make no warranties regarding its ability to meet Your expectations. We do not guarantee that Our services will be uninterrupted, timely, secure, or error-free. Under no circumstances shall We be liable for any damages, including but not limited to, direct, indirect, special, incidental, or consequential damages, losses, or expenses, arising from Your use of Our services or any performance failures, errors, system issues, or interruptions.

8.1. Third-Party Service Providers

We share personal data with processors, identity verifiers, credit bureaus, and IT hosters. We ensure third parties comply with globally recognised standards, but Rank isn't liable for breaches caused by third parties beyond our control.

8.2. Disclosures in Fraud Investigations and Legal Requests

In cases of actual or suspected fraud, we disclose data to the NPF, EFCC, NFIU, or CBN. This includes contact details, BVN, and transaction records. Legal disclosures may be made without prior notice to you.

We retain your personal data only for as long as necessary to fulfill the purposes collected, or as required by applicable laws. In particular, we are obligated to retain KYC and transaction records for a minimum of five (5) years after your relationship ends in compliance with anti-money laundering codes.

We implement comprehensive technical safety strategies, including end-to-end encryption of data in transit and at rest, secure login protocols, and regular penetration testing. Despite our efforts, no system is 100% secure. Protect your details and alert us immediately at hello@userank.com if you suspect a compromise.

We reserve the right to amend this Policy at any time. When material changes are made, we will notify you via email or in-app alerts. Updates take effect on the day they are published. We encourage checking back periodically.

For inquiries or assistance, please contact:

DPO: Ayomide Oladunjoye
Email: ayomide@userank.com
General Inquiries: hello@userank.com
Office Address: 1, Mufutau Idogo Street, Opposite Beachwood Estate, Ibeju-Lekki, Lagos.

If you are unsatisfied with our response, you may escalate your concerns to the NDPC via their official website: https://ndpc.gov.ng