Privacy Policy

At Bunben Data Hub, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what information we collect when you use our website and services, why we collect it, how we use and protect it, and the choices and rights available to you.

Bunben Data Hub is responsible for the personal data described in this policy and handles it in accordance with the Nigeria Data Protection Act 2023 and other applicable data protection laws. This policy should be read together with our Terms & Conditions.

We collect only the information we need to provide our services to you.

Information you give us

• When you create an account: your username, email address, phone number and password. Your password is stored in a securely encrypted form that cannot be read, including by us.
• When you buy data: the phone number you want the data delivered to and the plan you choose.
• When you contact us: your contact details and any information you share with our support team.

Information created when you use our services

• Your wallet balance and a record of your wallet funding, purchases and refunds, including amounts, dates and transaction references.
• The status of each order and, where an order fails, the reason.
• Account details such as when you joined and whether your email address has been verified.
• Notifications we send you about your account and orders.

Information collected automatically

When you use our website, technical information such as your IP address, browser and device type, and the time of your visit is recorded to keep the service secure and working properly. We also keep records of certain account activity to help prevent fraud and abuse, and diagnostic information when something goes wrong so that we can fix it.

Payment information

Wallet payments are processed by our payment provider, Monipay. You enter your card or bank details directly with Monipay, and we do not receive or store them. We receive only the information needed to confirm your payment, such as the amount, a payment reference and whether the payment was successful.

We use your personal data to:

• create and manage your account and verify your email address;
• process wallet funding and credit your wallet once payment is confirmed;
• deliver the data you purchase to the phone number you provide;
• refund your wallet when an order cannot be completed;
• send you important messages about your account and orders;
• respond to your enquiries and resolve complaints;
• protect your account and our services against fraud, misuse and security threats; and
• keep accurate financial records and meet our legal obligations.

We only use your personal data where the law allows us to. In most cases, this is because we need it to provide the services you have requested. We also process data where we are legally required to, such as keeping transaction records, and where it is in our legitimate interest to keep our services safe and running well, provided this does not override your rights.

We do not send marketing messages, and we will not do so without first asking for your consent.

If you buy data for another person, you will provide their phone number. Please only do so where you have their permission. We use that number solely to deliver the data and to keep a record of the transaction, and we do not use it to contact them for any other purpose.

To provide a fast and reliable service, some processes happen automatically. For example, orders are processed and failed orders are refunded without manual intervention, and unusual activity may be temporarily restricted to protect your account. We do not use your personal data to build profiles about you. If you believe an automated outcome has affected you unfairly, please contact us and a member of our team will review it.

We do not sell, rent or trade your personal data.

We share personal data only with trusted third parties where this is reasonably necessary to provide, maintain and secure our services:

• Payment providers — Monipay processes wallet payments on our behalf.
• Telecommunications providers — data you purchase is delivered through MTN Nigeria's services, which requires sharing the recipient phone number and the amount of data.
• Cloud, hosting and technology providers — trusted providers that securely host, store and process the information needed to operate our website, your account and our services.

These providers may use your information only to provide their services to us and are expected to protect it appropriately.

We may also disclose personal data where required or permitted by law, regulation or court order, at the request of a competent governmental or regulatory authority, or where necessary to prevent fraud or protect the rights and safety of our customers.

Some of the providers that help us operate our services may store or process data outside Nigeria. Where this happens, we take reasonable steps to ensure your personal data continues to receive an adequate level of protection, as required by Nigerian data protection law.

We keep personal data only for as long as we need it for the purposes described in this policy.

• Your account information is kept for as long as your account is open.
• Records of payments, wallet activity and purchases are kept for as long as required for tax, accounting and legal purposes, including after your account is closed.
• Diagnostic information about errors is deleted after 30 days, and records used to detect repeated or abusive activity are deleted after one day.
• Backup copies of our systems are kept for up to 30 days before being permanently deleted.

When information is no longer needed, we delete it or anonymise it so that it can no longer identify you.

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration. These include encrypted connections to our website, secure storage of passwords, access controls that ensure each customer can see only their own information, verification of payment confirmations, and encrypted backups.

While we take these steps seriously, no method of transmitting or storing information is completely secure. If a data breach occurs that is likely to put your rights at risk, we will notify the relevant authority as required by law and inform you where appropriate.

You can help protect your account by using a strong password, keeping it private and contacting us immediately if you suspect unauthorised access.

We use only the cookies and browser storage that are essential for our website to work. These keep you securely signed in and remember simple preferences, such as whether you have chosen to hide your wallet balance.

We do not use advertising, analytics or tracking cookies. Because the cookies we use are essential, you are not asked to accept them. You can clear them through your browser settings, although this will sign you out of your account.

You have rights over your personal data, and we will help you exercise them. You may:

• Request a copy of the personal data we hold about you.
• Ask us to correct information that is inaccurate or incomplete. You can update your username yourself from your profile; contact us to change other details.
• Ask us to delete your personal data. We will do so except where we are required by law to keep certain records, such as your transaction history.
• Object to or ask us to restrict certain uses of your data, particularly where we rely on our legitimate interests.
• Receive your data in a commonly used format, or ask us to transfer it to another organisation where this is technically possible.
• Ask for a person to review any decision made solely by automated means that significantly affects you.
• Withdraw your consent at any time, where we rely on consent to use your data.

To make a request, please email us at bunben2023@gmail.com from the email address registered to your account. We may need to confirm your identity before acting on your request. We will respond without undue delay, and there is normally no charge.

If you would like to close your account, please see "Closing Your Account" in our Terms & Conditions.

Our services are intended for people aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

We encourage you to contact us first if you have a concern about how we handle your personal data, so that we can review and address it. If you remain dissatisfied or believe that your data protection rights have been infringed, you may also seek assistance from the Nigeria Data Protection Commission (NDPC), in accordance with applicable data protection law.

We may update this Privacy Policy from time to time to reflect changes to our services or to the law. When we do, we will revise the "Last updated" date at the top of this page. If the changes are significant, we will let you know by email or through a notification in your account.

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

• Email: bunben2023@gmail.com
• Phone or WhatsApp: 0803 085 9828