Privacy notice
Who is responsible
ChampPay is responsible for the personal data submitted through this website. Privacy questions and rights requests can be sent to contact@champ-pay.com with “privacy” in the subject line.
What we collect
The contact form asks for your name, work email, company or organisation, your role and the message you choose to send. We also receive ordinary security and delivery information generated when a web request is made, such as an IP address, timestamp and browser information in infrastructure logs.
Why we use it
We use enquiry data to assess your request, respond, route it to the appropriate person, maintain a record of the conversation and protect the website against misuse. The applicable basis is taking steps at your request and our legitimate interest in handling genuine business enquiries, securing the site and keeping proportionate records.
Who may receive it
Access is limited to people handling the enquiry and service providers needed to host the site and deliver the message. Cloudflare serves and protects the website; the configured email-delivery provider sends the form message; the receiving email service stores it. Professional advisers may receive relevant information where necessary and subject to appropriate duties.
International processing
Web hosting and email providers may process data outside Nigeria. Where an international transfer occurs, we use providers and contractual or organisational safeguards appropriate to the service and the information involved.
How long we keep it
A routine enquiry is normally retained for up to 12 months after the last substantive contact. We may keep a narrower record for longer where a commercial relationship, dispute, security event or legal obligation makes that necessary. Data that is no longer needed should be deleted or de-identified.
Your choices and rights
Subject to applicable law, you may ask for access, correction, deletion, restriction, objection or a portable copy, and may withdraw consent where consent is the basis used. We may need to verify your identity before acting. You may also complain to the Nigeria Data Protection Commission.
Security
The site uses HTTPS and reasonable technical and organisational controls. Do not send passwords, keys, card information, account credentials, transaction files, identity documents or confidential attachments through the first-contact form.
Cookies, fonts and reference data
This site does not run advertising pixels or behavioural analytics. Google Fonts receives the ordinary network information required to serve the typefaces. Cloudflare processes web requests and technical logs for delivery and security.
Public reference data may be fetched from open.er-api.com, the World Bank, Binance, CoinGecko or Coinbase. Those services receive an ordinary web request when their data is loaded; their own privacy notices apply. Rates and market figures are contextual and are not transaction quotes.