Privacy Policy — Terra Switch

Terra Switching and Processing Company Limited ("we", "our", "Terra Switch") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in compliance with the Nigeria Data Protection Regulation (NDPR) 2019 and other applicable laws.

1. Information we collect

We collect personal and financial data necessary to provide our payment services, including:

Identity data: Full name, date of birth, BVN, NIN, government-issued ID
Contact data: Email, phone, physical address
Financial data: Bank account details, card information, transaction history
Technical data: IP address, device identifiers, browser type, cookies
Compliance data: KYC documents, sanctions screening results

2. How we use your information

We process your data for the following purposes:

To provide and operate our payment switching and processing services
To verify identity and comply with KYC/AML obligations
To detect and prevent fraud, money laundering, and other financial crimes
To process transactions and provide customer support
To comply with regulatory reporting requirements (CBN, NDPR)
To improve our services and develop new features

3. Legal basis for processing

We process your data on the following legal bases: (a) performance of a contract with you; (b) compliance with legal obligations, particularly under CBN regulations and anti-money laundering laws; (c) our legitimate interests in operating a secure payment platform; and (d) your consent, where required.

4. Data sharing

We do not sell your personal data. We may share your information with: (a) banks and financial institutions involved in your transactions; (b) regulatory authorities (CBN, NDPR, law enforcement) when legally required; (c) service providers who help us operate (e.g., cloud hosting, fraud detection) under strict data processing agreements; and (d) counterparties in card network operations.

5. Storage duration

We retain your data for the following periods:

Transaction records: Minimum 7 years (CBN requirement)
KYC documents: 5 years after account closure
Marketing data: Until you withdraw consent
Technical logs: 12 months unless required for investigation

6. Your rights

Under the NDPR, you have the right to:

Access a copy of your personal data
Request correction of inaccurate data
Request deletion of your data (subject to legal retention requirements)
Object to or restrict certain processing activities
Withdraw consent where processing is based on consent
Lodge a complaint with the Nigeria Data Protection Commission (NDPC)

7. Data deletion requests

To request access to or deletion of your personal data, email privacy@terraswitching.com with your full name and registered email. We will respond within 30 days. Note that we may be required to retain certain data to comply with legal and regulatory obligations.

8. Security

We implement industry-standard security measures including encryption in transit (TLS 1.3) and at rest (AES-256), PCI DSS Level 1 controls, access controls, and continuous monitoring. See our Compliance page for full details.

9. Cookies

We use cookies and similar technologies. You can manage your cookie preferences via the cookie banner displayed on your first visit. See our Cookie Policy for details.

10. Contact

For privacy-related inquiries, contact our Data Protection Officer at dpo@terraswitching.com.