MOVIL DATA POLICY

Introduction

MOVIL is committed to responsible data management and protection. This Data Policy outlines how we collect, store, process, and secure data to ensure compliance with global data protection standards, including the Nigeria Data Protection Regulation (NDPR), General Data Protection Regulation (GDPR), and industry best practices.

Scope

This policy applies to all data collected, processed, and managed by MOVIL, including but not limited to:

  • Customer and user data
  • Business partner and vendor data
  • Employee and internal operational data
  • Any data processed through our shortcode services, gamification solutions, consumer intelligence tools, and marketing automation systems.

Data Collection

MOVIL collects data through various channels, including website interactions, subscription services, APIs, interactive shortcodes, and third-party integrations. Data collected includes:

  • Personally Identifiable Information (PII): Name, email, phone number, location, and user preferences.
  • Transactional Data: Payment history, service usage, subscriptions, and rewards transactions.
  • Behavioral Data: Engagement patterns, gaming activity, SMS/USSD interactions, and analytics.

Data Processing & Usage

Data collected is processed for:

  • Service delivery and improvement
  • Customer engagement and personalization
  • Fraud prevention and security monitoring
  • Regulatory compliance and reporting
  • Analytics and insights to optimize business performance

MOVIL ensures data minimization, meaning only necessary data is collected and processed for specific purposes.

Data Storage & Security

MOVIL employs industry-leading security measures, including:

  • End-to-end encryption (AES-256 for storage, TLS 1.2+ for transmission)
  • Access controls with role-based authentication
  • Data anonymization where applicable
  • Secure cloud storage with regular penetration testing and vulnerability assessments

Data Sharing & Third Parties

MOVIL does not sell user data. However, we may share data with:

  • Regulatory bodies: To comply with legal and compliance obligations.
  • Business partners and service providers: To enable seamless integrations, payments, and third-party services (with strict data protection agreements).
  • Analytics and AI engines: For improved user experience, fraud detection, and engagement strategies.

User Rights & Data Access

Users have the following rights:

  • Right to Access: Users can request a copy of their stored data.
  • Right to Rectification: Users can request corrections to inaccurate data.
  • Right to Deletion ("Right to be Forgotten"): Users can request data deletion unless retention is legally required.
  • Right to Object: Users can opt out of data processing for marketing purposes.

Requests can be sent to contactus@movil.com.ng and will be processed within 30 days.

Data Retention & Disposal

MOVIL retains data for only as long as necessary for legal, regulatory, and business purposes. Data no longer required is securely erased using industry best practices.

Compliance & Audits

MOVIL undergoes regular compliance audits to ensure adherence to global data protection regulations. Any data breach incidents are reported within 72 hours as required by law.

Policy Updates

This policy is reviewed and updated annually. Users will be notified of any major changes.