Privacy Policy

 

Effective Date: 10th March, 2026
Last Updated: 18th March, 2026

BPrime Assets Ltd (“Company,” “we,” “our,” or “us”) is committed to protecting the privacy and personal data of its clients, investors, partners, and website users. This Privacy Policy outlines how we collect, process, store, transfer, and protect personal data in compliance with:

  • The Nigeria Data Protection Act
  • The General Data Protection Regulation
  • Applicable international data protection and privacy laws

This Policy applies to all personal data collected through bprimeassets.com and in the course of our business operations.

 

1. Definitions

  • “Personal Data”: Any information relating to an identified or identifiable individual.
  • “Data Subject”: Any individual whose personal data is processed.
  • “Processing”: Any operation performed on personal data (collection, storage, use, disclosure, etc.).
  • “Controller”: BPrime Assets Ltd, determining purposes and means of processing.
  • “Processor”: Third parties processing data on our behalf.

 

2. Legal Basis for Processing (GDPR & NDPA Compliance)

We process personal data under the following lawful bases:

  • Consent (e.g., marketing communications)
  • Contractual necessity (e.g., investor onboarding, transactions)
  • Legal obligation (e.g., regulatory compliance, KYC/AML requirements)
  • Legitimate interests (e.g., business development, fraud prevention), provided such interests do not override your fundamental rights

 

3. Categories of Personal Data Collected

a. Identity & Contact Data

  • Full name
  • Email address
  • Phone number
  • Residential or business address

b. Financial & Investment Data

  • Investment preferences
  • Transactional information
  • Bank or payment-related details (where applicable)

c. Technical Data

  • IP address
  • Browser type and version
  • Device identifiers
  • Website usage data

d. Compliance Data

  • Identification documents (for KYC/AML compliance)
  • Risk profiling information

 

4. Purpose of Data Processing

We process personal data for the following purposes:

  • Investor onboarding and account management
  • Provision of real estate and agricultural investment services
  • Compliance with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
  • Communication regarding investments, updates, and opportunities
  • Internal analytics, audits, and operational improvements
  • Legal and regulatory compliance obligations

 

5. Data Sharing and Disclosure

We may disclose personal data to:

  • Regulatory authorities and government agencies as required by law
  • Financial institutions and payment processors
  • Professional advisors (legal, financial, auditors)
  • Third-party service providers acting as data processors

All third parties are contractually obligated to maintain confidentiality and comply with applicable data protection laws.

We do not sell personal data under any circumstances.

 

6. Cross-Border Data Transfers (GDPR & NDPA)

Where personal data is transferred outside Nigeria or the European Economic Area (EEA), we ensure appropriate safeguards, including:

  • Standard Contractual Clauses (SCCs)
  • Adequacy decisions by relevant authorities
  • Binding contractual obligations ensuring data protection standards equivalent to NDPA and GDPR

 

7. Data Retention Policy

We retain personal data only for as long as necessary to:

  • Fulfill contractual and business purposes
  • Comply with legal, tax, and regulatory obligations
  • Resolve disputes and enforce agreements

Retention periods are determined based on data type, legal requirements, and risk considerations.

 

8. Data Security Measures

We implement industry-standard technical and organizational measures, including:

  • Encryption and secure data storage
  • Access controls and authentication protocols
  • Regular security audits and monitoring
  • Staff confidentiality obligations

Despite these measures, no system is completely secure, and we cannot guarantee absolute data security.

 

9. Data Subject Rights

Under NDPA and GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate or incomplete data
  • Request erasure (“right to be forgotten”)
  • Restrict processing
  • Object to processing based on legitimate interests
  • Data portability (GDPR)
  • Withdraw consent at any time

To exercise your rights, contact us using the details below.

 

10. Automated Decision-Making

We do not engage in fully automated decision-making or profiling that produces legal or similarly significant effects without human intervention.

 

11. Cookies and Tracking Technologies

We use cookies to:

  • Enhance website functionality
  • Analyze user behavior
  • Improve service delivery

You may manage cookie preferences through your browser settings.

 

12. Children’s Data

Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors.

 

13. Data Protection Officer (DPO)

In compliance with NDPA and GDPR accountability requirements, we may appoint a Data Protection Officer (DPO).

For all data protection inquiries, contact:
Email: [Insert DPO Email]

 

14. Breach Notification

In the event of a data breach, we will:

  • Notify relevant authorities as required under NDPA and GDPR
  • Inform affected individuals where there is a high risk to their rights and freedoms

 

15. Third-Party Links

Our website may contain links to third-party platforms. We are not responsible for their privacy practices or content.

 

16. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Updates will be published on this page with a revised effective date.

 

17. Contact Information

BPrime Assets Ltd
Website: bprimeassets.com
Email: hello@bprimeassets.com
Phone: +234 812 365 7315
Address: BPrime Assets Ltd, Adebola House (Suite 100, Rear Wing), 38 Opebi Road, Ikeja-Lagos