Privacy Policy

This Policy applies to personal information we process when you use Infinity Trust Mortgage Bank Plc websites, mobile applications, services, tools and content. It also explains your privacy rights and how to exercise them.

You accept this Policy when you sign up for, access or use our services. We may update it from time to time by posting a revised version on our platform. Unless we state otherwise, updates take effect seven (7) days after posting.

3.1 Information we collect: We may collect information you provide directly, information generated when you use our digital channels, and information received from lawful third-party sources. This may include your name, address, telephone number, email address, account information, device and browser information, IP address, transaction records, location data, verification details, BVN, TIN, photographs, and any other information reasonably required to provide our products and services.

We may also collect information through cookies, analytics tools, device identifiers and similar technologies used to improve security, functionality, user experience and service performance. Where required by law, we will obtain your consent before deploying non-essential cookies or tracking technologies.

3.2 Updating or deleting information: You may ask us to correct, update or delete inaccurate personal information, subject to identity verification and any legal, regulatory, security or legitimate business reason requiring us to retain it.

3.3 Processing concerns: You may contact us if you believe your personal information is being processed outside the scope of this Policy or your consent. We will assess the request and take appropriate action in accordance with applicable law.

We use personal information to provide and improve our services, process authorized transactions, verify identity, manage accounts, resolve disputes, collect fees, communicate with you, manage risk, prevent fraud, comply with laws and regulations, protect our systems, improve product offerings, send relevant service or product updates, and support profiling or automated decision-making where permitted by law.

Where we rely on legitimate interest as a lawful basis, we will ensure that such interests are balanced against your rights and freedoms. We will only use personal data for new purposes where permitted by law and, where required, after obtaining additional consent.

We may store and process personal information in Nigeria or other locations where our facilities or service providers operate. Where data is transferred outside Nigeria, we apply appropriate safeguards as required by applicable law.

We use physical, technical, and administrative safeguards, including access controls, encryption, firewalls and secure facilities, to reduce the risk of loss, misuse, unauthorised access, disclosure, or alteration.

If we identify an actual or suspected personal data breach, we will take reasonable steps to investigate, contain and remediate the breach, and notify affected persons or regulators where required by law.

Where personal data is transferred outside Nigeria, such transfers will be made only where adequate protection exists or appropriate safeguards and lawful transfer mechanisms have been implemented in accordance with applicable data protection laws.

You may access certain personal data through secure login features on our platforms. You may also request access, correction, return, transfer or discontinuation of processing by contacting us. We may request information to verify your identity and may retain data where required by law or legitimate business needs.

We may share personal information with transaction parties, service providers, verification or fraud-prevention partners, regulators, courts, law-enforcement agencies, professional advisers, affiliates, successors in a merger or restructuring, and other parties where lawful and necessary to provide services, protect our business, comply with obligations or enforce our rights.

We may use customer testimonials, images, or social media references for limited promotional purposes that are lawful. We do not knowingly collect personal information from minors.

Third-party service providers that process personal data on our behalf are required to implement appropriate security measures, maintain confidentiality, and process personal data only in accordance with our instructions and applicable law.

We use technical and operational controls to protect personal data, including secure transmission technologies such as SSL/TLS where available. You should also protect your device, passwords, tokens, and login credentials.

In the event of a personal data breach, we will notify the appropriate regulator and affected individuals where required by applicable law.

We treat your information as confidential and disclose it only as permitted by law, regulation, this Policy or your consent. You are responsible for keeping passwords, tokens, authentication details, and devices secure.

We retain personal data and transaction data only for as long as necessary for the purpose collected, or as required or permitted by law, regulation, audit, dispute resolution, fraud prevention or legitimate business needs. Transaction data may be retained for at least ten (10) years after our business relationship ends, after which the data will be securely deleted or anonymized where appropriate.

Different categories of personal data may be retained for different periods depending on legal, regulatory, operational, audit, fraud prevention, and business requirements. Upon expiry of the applicable retention period, data will be securely deleted, anonymised, or archived as required by law.

Our platforms may contain links to third-party websites or services. We are not responsible for their content, security, or privacy practices. Please review their privacy notices before sharing personal information.

We may modify this Policy at any time. Please check it regularly for updates.

To the extent permitted by law, Infinity Trust Mortgage Bank Plc will not be liable for indirect, special, incidental or consequential loss arising from use of our services, unauthorized access caused by your failure to protect security credentials, or other circumstances outside our reasonable control. Any proven liability will be limited to the fees paid for the specific transaction giving rise to the claim, unless a court or applicable law requires otherwise.

We may use automated tools and profiling for fraud prevention, risk management, compliance, and service improvement. Where required by law, appropriate safeguards will be implemented, and data subjects may exercise applicable rights relating to automated decision-making.