Legal
Privacy Policy
How Hibiscus Finance Company collects, uses, and protects your personal data.
Privacy Policy
1. Who We Are
Hibiscus Finance Company Limited ("HFC", "we", "us", "our") is a finance company licensed by the Central Bank of Nigeria (CBN). Our registered address is Victoria Island, Lagos, Nigeria. This Privacy Policy governs how we handle personal data collected via our website (https://hibiscusfinancecompany.com) and through our services.
2. Personal Data We Collect
- Website visitors: Email addresses submitted via waitlist or newsletter forms; IP addresses and browser data collected automatically.
- Contact enquiries: Name, email, phone number, and message content.
- Job applicants: Name, email, phone, CV, cover letter, and work history.
- Customers: Identity documents (NIN, BVN, passport), address, financial information, transaction history, and any data required for KYC compliance under CBN guidelines.
3. How We Use Your Data
- To provide and manage financial products and services
- To comply with CBN KYC, AML/CFT, and regulatory reporting obligations
- To send service communications, updates, and notices you have requested
- To respond to enquiries and complaints
- To process job applications
- To improve our website and services
4. Legal Basis for Processing
We process personal data on the basis of: consent (for waitlist and marketing communications); contract performance (for customer service delivery); legal obligation (for regulatory and KYC requirements); and legitimate interests (for fraud prevention and service improvement).
5. Data Sharing
We do not sell personal data. We may share data with: CBN and other regulators where required by law; credit bureaus for KYC and creditworthiness assessment; service providers who support our operations (under data processing agreements); and law enforcement agencies where legally required.
6. Data Retention
Waitlist data: retained until 12 months after launch or until unsubscribed. Customer data: minimum 10 years after relationship end, per CBN guidelines. Job applications: 12 months from submission unless a role is offered.
7. Your Rights
Under the Nigeria Data Protection Act (NDPA) 2023, you have the right to: access a copy of your personal data; correct inaccurate data; request deletion where legally permissible; restrict or object to processing; and withdraw consent at any time. To exercise these rights, contact: privacy@hibiscusfcl.com
8. Security
We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS), access controls, and regular security reviews. No internet transmission is 100% secure; we cannot guarantee absolute security.
9. Cookies
This website uses only essential session cookies necessary for the site to function. We do not use advertising or tracking cookies. Analytics, if implemented, will be disclosed and subject to appropriate consent mechanisms.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last Updated" date at the top reflects the most recent revision. Material changes will be communicated to registered users by email.
11. Contact
Data Protection Officer
Hibiscus Finance Company Limited
Victoria Island, Lagos, Nigeria
Email: privacy@hibiscusfcl.com