Introduction
This Privacy Policy describes our policies and procedures on the collection, use and disclosure of your information when you use the Service and tells you about your privacy rights and how the law protects you.
We use your Personal Data to provide, maintain, secure and improve the Service. By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy.
Certain security features of our Service may require access to your device camera and/or device biometric authentication features, such as fingerprint authentication. These features are used to help verify your identity, perform liveness checks, prevent unauthorized access and protect your account and transactions. Where consent is required by applicable law, we will request your consent before activating or using these features.
Definitions
For the purposes of this Privacy Policy:
Account means a unique account created for you to access our Service or parts of our Service.
Company (referred to as either "the Company", "We", "Us" or "Our") refers to Yes Microfinance Bank, 4, Adenubi Close, off Majekodunmi Street, Allen Avenue, Ikeja.
Cookies are small files that are placed on your computer, mobile device or any other device by a website, containing the details of your browsing history on that website among its many uses.
Country refers to Nigeria.
Device means any device that can access the Service such as a computer, a cellphone or a digital tablet.
Personal Data is any information that relates to an identified or identifiable individual.
Biometric Authentication means authentication performed using biometric capabilities supported by your device, such as fingerprint or other device-supported biometric authentication methods.
Liveness Check means a security verification process designed to determine whether the individual presenting for identity verification is a live person and not a photograph, video, recording or other presentation intended to impersonate the user.
Facial/Liveness Data means information captured or generated during an authorized camera-based identity or liveness verification process. This may include images, video frames, facial verification information, liveness results and related technical information, where applicable.
Service refers to the Website and/or digital banking services provided by the Company.
Service Provider means any natural or legal person who processes data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to assist the Company in analyzing how the Service is used.
Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
Website refers to Yes Microfinance Bank, accessible from https://www.yesmfbank.com.
You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.
The Information We Collect
Personal Data
While using our Service, We may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. Personally identifiable information may include, but is not limited to:
- Name
- Gender
- Phone number
- Email address
- House/office address
- Date of birth
- Account number, credit card number and expiry date
- Merchant and acquirer information
- Customer identification and verification information
Kindly note that certain information may be required in order to provide specific services, comply with regulatory requirements, protect your account or complete identity verification. If you do not provide information that is necessary for a particular service, we may not be able to provide you with the full range of services that the site or application has to offer.
Camera and Liveness Verification
With your permission, our mobile application may request access to your device camera for identity verification and liveness detection purposes.
Camera access may be used to:
- Perform a liveness check to confirm that you are a real person;
- Help verify your identity during account registration or onboarding;
- Protect your account against impersonation and unauthorized access;
- Support enhanced security for sensitive banking activities or transactions;
- Detect and prevent fraudulent or suspicious activity; and
- Meet applicable identity verification, security and regulatory requirements.
Camera access will only be activated when required for an applicable feature and subject to the permissions provided through your device. You may decline camera access; however, certain services or security features that require liveness verification may not be available if you do so.
Where a liveness verification process is performed, the information generated from the verification may include images, video frames, facial verification information, liveness results and associated technical information. We will process such information only for legitimate and specified purposes, including identity verification, security, fraud prevention and regulatory compliance.
Fingerprint and Device Biometric Authentication
To provide additional security, our mobile application may support biometric authentication provided by your device, including fingerprint authentication where supported by the device.
Biometric authentication may be used, with your consent, to:
- Secure access to your account;
- Confirm that an authorized device user is accessing the application;
- Provide an additional authentication factor for selected services;
- Help prevent unauthorized access to your account; and
- Strengthen the security of sensitive activities and transactions.
The application does not request or store your raw fingerprint image or fingerprint template. Where supported by your device, fingerprint authentication is performed by the device's operating system and secure biometric hardware. The application receives only the authentication result required to continue or deny the requested action.
You may enable or disable biometric authentication through the appropriate settings available within the application and/or your device. If biometric authentication is disabled or unavailable, you may be required to use another available authentication method.
Consent for Camera and Biometric Security Features
Before accessing your camera or enabling applicable biometric security features, we will provide appropriate information about the purpose of the requested access and, where required, obtain your consent.
Your participation in camera-based liveness verification and optional device biometric authentication is intended to provide an additional layer of security and protection. You may refuse or withdraw consent where applicable. However, refusing or withdrawing consent may prevent you from using certain services or security features that require enhanced identity verification.
Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn. Where another lawful basis for processing applies, the Company may continue to process information where permitted or required by applicable law.
Usage Data
Usage Data is collected automatically when using the Service. It may include information such as your device's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.
When you access our service by or through a mobile device, we may collect certain information automatically, including, but not limited to, the type of mobile device you use, your mobile device unique ID, the IP address of your mobile device, your mobile operating system, the type of mobile Internet browser you use, unique device identifiers and other diagnostic data.
We may also collect information that your browser sends whenever you visit our service or when you access the service by or through a mobile device.
Security and Device Information
To protect our customers and services, we may collect technical and security information relating to the device used to access our Service. This may include device identifiers, operating system information, application version, authentication status, security events, IP address, network information and other diagnostic information.
This information may be used to identify unusual activity, detect potentially compromised devices, prevent unauthorized access, investigate suspected fraud and improve the security of our services.
Tracking Technologies and Cookies
We use Cookies and similar tracking technologies to track the activity on our service and store certain information. Tracking technologies used are beacons, tags, and scripts to collect and track information and to improve and analyze how our Service is used.
Cookies or Browser Cookies. A cookie is a small file placed on your device. You can instruct your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if you do not accept Cookies, You may not be able to use some parts of our Service. Unless you have adjusted your browser setting so that it will refuse Cookies, our Service may use Cookies.
Age Restriction
The Site is intended for persons eighteen (18) years or older. Persons under the age of eighteen (18) should not access, use and/or browse this site. We do not knowingly collect information from children under 18.
Use of Your Personal Data
The Company may use Personal Data for the following purposes:
- To provide and maintain our Service: Including monitoring the usage of our Service and ensuring that our services operate effectively.
- To manage your Account: To manage your registration as a user of the Service. The Personal Data you provide can give you access to different functionalities of the Service that are available to you as a registered user.
- For identity verification: To verify your identity and satisfy applicable customer identification, onboarding and regulatory requirements.
- For liveness verification: To perform camera-based liveness checks where required to confirm that the person undergoing verification is physically present and to help prevent impersonation and fraudulent activity.
- For biometric device authentication: To allow users who provide consent to use supported device biometric authentication, including fingerprint authentication, as an additional security mechanism.
- For account and transaction security: To detect, prevent and investigate unauthorized access, fraudulent transactions, account takeover attempts and other security threats.
- For the performance of a contract: For the development, compliance and undertaking of the purchase contract for the products, items or services you have purchased or of any other contract with us through the Service.
- To contact you: To contact you by email, telephone calls, SMS, or other equivalent forms of electronic communication, such as a mobile application's push notifications regarding updates or informative communications related to the functionalities, products or contracted services, including security updates.
- To manage your requests: To attend to and manage your requests to us.
- For business transfers: We may use your information to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets.
- For fraud prevention and risk management: To identify suspicious activity, detect fraud, protect customers and prevent misuse of our Service.
- For other purposes: To conduct data analysis, identify usage trends, determine the effectiveness of our promotional campaigns and evaluate and improve our Service, products, services, marketing and user experience.
Sharing of Your Personal Data
We may share your personal information in the following situations:
- With Service Providers: We may share your personal information with trusted Service Providers that process information on our behalf for purposes such as identity verification, liveness detection, fraud prevention, security, infrastructure, analytics and service delivery.
- For business transfers: We may share or transfer Your personal information in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of Our business.
- With affiliates: We may share your information with our affiliates, in which case we will require those affiliates to honor this Privacy Policy.
- With business partners: We may share information with business partners where necessary to provide requested products or services, subject to applicable privacy and confidentiality requirements.
- With your consent: We may disclose your personal information for other purposes where you have provided the required consent.
- For legal and regulatory purposes: We may disclose information where required or permitted by applicable law, regulation, court order or lawful request from a competent authority.
Retention of Your Personal Data
The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations, resolve disputes, enforce our legal agreements and policies, prevent fraud and maintain the security of our services.
Information generated from security, identity verification and liveness processes will be retained only for as long as reasonably necessary for the stated purpose, applicable regulatory requirements, fraud prevention, dispute resolution, security investigations or other lawful purposes.
Where possible and appropriate, the Company may retain verification results or other necessary security information instead of retaining unnecessary raw biometric or camera data.
Usage Data is generally retained for a shorter period, except when this data is used to strengthen the security or improve the functionality of our Service, or when we are legally obligated to retain it for longer periods.
Transfer of Your Personal Data
Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located.
This means that information may be transferred to and maintained on computers located outside of your city, state, country or other governmental jurisdiction where data protection laws may differ from those in your jurisdiction.
Where required, the Company will obtain the appropriate consent or implement appropriate safeguards for such transfers and will take reasonable steps to ensure that your information is treated securely and in accordance with this Privacy Policy and applicable data protection laws.
Disclosure of Your Personal Data
Business Transactions
If the Company is involved in a merger, acquisition or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy, where required by applicable law.
Law Enforcement
Under certain circumstances, the Company may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities, such as a court or government agency.
Other Legal Requirements
The Company may disclose your Personal Data in the good faith belief that such action is necessary to:
- Comply with a legal obligation;
- Protect and defend the rights or property of the Company;
- Prevent or investigate possible wrongdoing in connection with the Service;
- Protect the personal safety of Users of the Service or the public;
- Prevent, detect or investigate fraud or security incidents; and
- Protect against legal liability.
Security of Your Personal Data
The security of your Personal Data is important to us. We implement appropriate technical and organizational measures designed to protect Personal Data against unauthorized access, alteration, disclosure, loss, misuse or destruction.
Security measures may include encryption, access controls, authentication, device security checks, fraud monitoring, liveness verification and device-supported biometric authentication.
Where device biometric authentication is used, the biometric verification itself is performed by the secure biometric facilities provided by the user's device where supported. We do not require or intend to store the user's raw fingerprint image or fingerprint template.
Notwithstanding the security measures we employ, no method of transmission over the Internet or method of electronic storage is completely secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.
Indemnity
Yes Microfinance Bank, its directors, officers, agents, licensors, employees and suppliers cannot be held liable for any claims, actions or demands, liabilities and settlements including without limitation, reasonable legal and accounting fees, resulting from, or alleged to result from, your violation of these Agreement.
Links to Other Websites
Our Service may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.
We have no control over and assume no responsibility for the content, privacy policies or practices of third-party sites or services.
Your Rights
You have rights under applicable data protection laws in relation to your Personal Data. These may include rights to:
Request Access
You can request access to your Personal Data held by us, subject to applicable legal requirements and exemptions.
Request Correction
You may request correction of inaccurate or incomplete Personal Data that we hold about you.
Request Erasure
You may request erasure of your Personal Data where there is no lawful reason for us to continue processing it, subject to applicable legal and regulatory obligations.
Object to Processing
You may object to certain processing of your Personal Data where permitted under applicable data protection laws.
Request Restriction of Processing
You may request restriction of processing in circumstances permitted under applicable data protection laws.
Request of Transfer
You may request transfer of your Personal Data to you or to a third party where applicable law provides such a right.
Withdraw Consent
Where we rely on your consent to process your Personal Data, you may withdraw your consent at any time.
This includes consent relating to optional security features such as camera access for liveness verification and device biometric authentication, where applicable.
Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn. If you withdraw consent for a security feature that is necessary for a particular service, we may be unable to provide that service or may require you to use another available verification method.
If you wish to exercise any of the rights set out above, please contact us using the information provided in the "Contact Us" section of this Privacy Policy.
We try to respond to all legitimate requests within one month. Occasionally, it may take us longer if your request is particularly complex or you have made several requests. In this case, we will notify you and keep you updated.
Changes to Our Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of changes by posting the new Privacy Policy on this page.
Where appropriate, we will let you know via email and/or a prominent notice on Our Service prior to the change becoming effective and update the "Last updated" date at the top of this Privacy Policy.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
Contact Us
If you have any questions about this Privacy Policy, you can contact us via email: care@yesmfbank.com.