Credit Application Privacy Notice

This notice explains how Purch Limited (“Purch”, “we”, “us”) collects, uses, stores, and shares the information you provide when you apply for an installment / credit purchase, and the rights you have under the Nigeria Data Protection Act 2023 (NDPA) and related regulations. It applies only to the credit application; our general Privacy Policy covers everything else.

Purch is the data controller for the application. Where your application is shared with a finance partner (see section 5), that partner becomes an independent controller of the information they receive and is responsible for their own handling of it under their privacy notice.

We collect information in two stages, to avoid asking for sensitive documents before they are needed:

At application (now):

• Identity & contact details — full name, email, phone, residential address, date of birth.
• Employment / business details — employer or business name, business contact, occupation.
• Financial overview — income, bank name and account number, assets, and existing financial obligations.
• Details of the goods you wish to purchase and their price, and referee / guarantor details you choose to provide.

Later, only if a finance partner is engaged:

• Verification documents and identifiers — e.g. BVN, NIN, government ID, bank statements, utility bill, tax clearance, business registration, and a passport photograph.

We ask for the second set of information only when it is actually required for an assessment, and we will tell you what is needed at that point.

We use your information to verify your identity, assess your eligibility for installment / credit purchase, present your application to our finance partners, communicate with you about it, and meet legal and regulatory obligations.

Our lawful basis is your consent, which you give when you submit the form. We also process some information to comply with legal obligations (for example, anti-fraud and “know your customer” requirements). You can withdraw your consent at any time (see section 8).

We share your information with:

• Our licensed finance and loan partners, so they can consider your application and decide whether to offer credit.
• Service providers who help us run the application securely (for example, our cloud hosting and database providers), under confidentiality obligations and only as needed.
• Regulators or authorities where we are required to by law.

We do not sell your personal data.

Your information is stored on secure, access-controlled infrastructure and is encrypted in transit and at rest. Access is limited to authorised staff who need it to process your application. Some of our providers may store data outside Nigeria; where they do, we rely on appropriate safeguards as required by the NDPA.

We keep your application only as long as necessary for the purposes above — normally up to 24 months after a decision is made or your application is withdrawn — after which it is deleted or anonymised, unless a longer period is required by law. Documents collected for verification are retained for no longer than needed for the assessment.

Under the NDPA you have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate or incomplete data;
• ask us to delete your data, where applicable;
• object to or restrict certain processing;
• withdraw your consent at any time, without affecting prior processing;
• lodge a complaint with the Nigeria Data Protection Commission (NDPC).

Withdrawing consent or asking us to delete your data may mean we can no longer process your application.

To exercise any of these rights, withdraw consent, or ask a question about this notice, contact us at info@purchgadgets.com or via our contact page.

We may update this notice from time to time. The date at the top shows when it was last revised; significant changes will be communicated where appropriate.