Privacy
policy.

Who is responsible for your data

Oluyole Microfinance Bank Limited (“Oluyole”, “we”, “us” or “our”), RC 210313, provides Oluyole Mobile and is responsible for the personal data described in this policy. This policy applies specifically to the Oluyole Mobile application and the services it connects to.

Data we collect

Depending on the service you use, we collect and process:

• Identity and contact data: your name, registered telephone number, email address, customer and account identifiers, and account status.
• Authentication and security data: banking PIN submissions, one-time passwords, authentication tokens, a randomly generated app or device identifier, login attempts, and security or fraud signals. We do not display or store your banking PIN as readable text.
• Financial and account data: balances, transaction history, loan information, statements, transfer beneficiaries, bank and account details, amounts, references and transfer status.
• Requests and communications: information you submit in support enquiries, complaints, loan requests and other instructions to the bank.
• Technical records: service timestamps, request identifiers, diagnostic and audit records needed to operate, secure and investigate the service.

Oluyole Mobile does not request access to your precise location, contacts, photos, camera, microphone, SMS messages or call logs. It does not use an advertising identifier and does not include advertising or third-party analytics software as of the date above.

How we use data

• verify your identity, activate and secure mobile banking access;
• show your account, balance, transaction, loan and statement information;
• receive and process transfers, banking instructions, applications and support requests;
• confirm beneficiaries and communicate transaction outcomes;
• prevent fraud, enforce account controls, investigate incidents and maintain audit records;
• meet banking, anti-money-laundering, data protection, reporting and other legal obligations; and
• operate, support and improve the reliability and security of Oluyole Mobile.

Who we share data with

We do not sell personal data and we do not share it for third-party advertising. We may share only what is necessary with:

• authorised Oluyole staff and service providers that host, support or secure the bank’s systems under confidentiality and data-protection duties;
• payment service providers, correspondent or recipient banks, account-name-enquiry services and payment networks when you request a transfer;
• professional advisers, auditors and insurers where their work requires it; and
• courts, law-enforcement bodies, the Central Bank of Nigeria, the Nigeria Data Protection Commission and other regulators or public authorities where law or a lawful request requires disclosure.

Some providers may process data outside Nigeria. Where this occurs, we apply the safeguards required by applicable data-protection law.

Storage and security

The app communicates with approved banking services over encrypted HTTPS connections. Authentication material and pending transfer information used by the app are stored using the device’s secure storage facilities. We use access controls, audit records and other administrative and technical measures designed to protect banking data. No system can guarantee absolute security; contact us promptly if you believe your account or device has been compromised.

How long we keep data

We retain data only for as long as needed for the purposes above and for banking, accounting, anti-money-laundering, dispute, audit and regulatory requirements. Transaction and statutory records may therefore be retained after mobile access is disabled or a customer relationship ends. Temporary app data is removed or replaced when it is no longer required, subject to security, backup and legal-retention controls.

Your choices and rights

Subject to applicable law, you may ask to access or correct your personal data, object to or restrict certain processing, withdraw consent where consent is the basis for processing, or complain about how your data is handled. You may also request deletion of your Oluyole Mobile profile or closure of your banking relationship. We will verify requests and explain any information that must be retained by law.

See the Oluyole Mobile account-deletion instructions. Deleting the app from your phone does not close your bank account or erase records that the bank must retain.

Children

Oluyole Mobile is not directed to children. Customers must meet the bank’s account and service eligibility requirements. Where a lawful minor’s account is supported, a parent or guardian should contact the bank before mobile access is enabled.

Changes to this policy

We may update this policy when the app, our providers or legal requirements change. We will publish the updated version on this page, change the “last updated” date and provide additional notice where a material change requires it.

Contact us

For privacy questions or rights requests, contact the Data Protection Contact at Oluyole Microfinance Bank Limited: