Privacy for Nexa Credo pension agent products

Nexa Credo Ltd provides digital products and support services for accredited pension agent activity in Nigeria. Our products help agents, employers and pension members manage onboarding, guidance, account access, employer engagement and pension support workflows.

As an Accredited Pension Agent-focused platform, we handle personal information for activities connected with pension education, member registration assistance, Retirement Savings Account support, employer pension support and related service requests.

This Privacy Policy explains how we collect, use, disclose, retain and protect personal information when you use Nexa Credo websites, portals, account creation forms, agent tools, employer pages, member support journeys and customer support channels.

We may collect identification and contact details such as name, phone number, email address, date of birth, gender, address, employer name, staff number, role and authorised representative details.

For Nexa Credo pension support products, we may process RSA-related information, selected Pension Fund Administrator, employer pension details, employee onboarding information, contribution support data, next-of-kin or beneficiary details, identity verification information, support requests and service history.

For employer and agent products, we may collect company information, administrator contact details, staff lists, contribution schedule support data, onboarding status, agent activity records, customer interaction notes and documents you upload or submit through our platform.

When you use our digital services, we may collect login, device, browser, IP address, usage, audit, support message and cookie information so we can secure accounts, monitor product reliability and improve the user experience.

We use personal information to create and manage Nexa Credo accounts, verify users, support agent-led onboarding, assist members with RSA-related enquiries, help employers organise pension support workflows, respond to support requests and keep service records.

We may use employer and member information to support products such as employer onboarding, member activation, agent advisory workflows, contribution schedule preparation support, employee pension record support, service reminders and customer communication.

We may also use aggregated or de-identified information to improve Nexa Credo product reliability, reporting, product design, risk controls and operational performance.

Depending on the product or service, we process personal information because it is necessary to provide requested Nexa Credo services, perform a contract, comply with legal or regulatory obligations, protect legitimate business and security interests, or because you have given consent or authorisation.

Where consent or authorisation is required for an agent, employer or member workflow, you may withdraw it, but this may affect services that depend on the information or prevent us from completing a requested pension support process.

We may share personal information with employers, authorised pension agents, Pension Fund Administrators, Pension Fund Custodians, identity verification providers, payment and banking partners, technology hosting providers, professional advisers, regulators, law enforcement agencies or other parties where required for Nexa Credo product delivery, compliance, security or dispute resolution.

Where a Nexa Credo product requires coordination with a PFA, PFC, employer or PenCom-regulated process, we may disclose only the information reasonably needed to support the requested agent, employer or member service.

We require service providers and partners to handle personal information securely, use it only for authorised purposes and respect applicable confidentiality and data protection obligations.

We use administrative, technical and organisational safeguards designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. These may include access controls, audit trails, encryption, monitoring and staff confidentiality controls.

We retain personal information for as long as needed to provide Nexa Credo products, maintain account and support records, meet tax, accounting, regulatory and legal obligations, support audit trails, resolve disputes and maintain accurate operational records for agent, employer and member workflows.

Subject to applicable law and verification, you may request access to your personal information, correction of inaccurate information, deletion where appropriate, restriction or objection to certain processing, withdrawal of consent, and information about how your data is used.

If your request relates to RSA records, employer pension records or information held by a Pension Fund Administrator, employer or another third party, we may need to coordinate with the relevant organisation before completing the request.

Some pension support records may need to be retained or corrected through the relevant official channel rather than deleted, especially where the record is required for compliance, audit, contribution history, identity confirmation or service documentation.

Our website and portals may use cookies and similar technologies to keep sessions secure, remember preferences, measure performance and understand how visitors use our pages. You can control cookies through your browser settings, although some features may not work correctly without essential cookies.

Where Nexa Credo uses cloud, infrastructure or support providers outside Nigeria, we take steps designed to ensure that personal information remains protected in line with applicable data protection requirements, contractual safeguards and the sensitivity of pension-related information.

For privacy questions, data subject requests or concerns about how your information is handled, contact Nexa Credo Ltd through our official support channels. You may also contact us through the Contact page and mark the message for the Data Protection or Compliance team.