Your data, your rights

We collect various types of personal data to provide and improve our services. This includes:

• Identification Information: Full name, phone number, email address, and date of birth.
• Account Information: Username, hashed password, and any profile photo you upload.
• Financial Information: Bank account details for withdrawals, deposit and investment amounts, wallet balances, and transaction history.
• Technical Data: IP address, browser type, device identifiers, pages visited, and browsing information collected through cookies or similar technologies.
• Referral Information: Referral codes or user IDs linked to your account for reward tracking.
• Verification Documents: Identity cards, passports, utility bills, or other documents provided for KYC compliance.

We gather personal data from you in several ways:

• Account Registration: Information you provide on the sign-up form (name, email, phone number, username, and password).
• Profile Updates: Additional details added when completing or updating your user profile, including KYC documents.
• Transactions & Investments: Information related to deposits, investments, or withdrawal requests.
• Referral Program: Data recorded when you use or share a referral code.
• Automatic Collection (Cookies & Tech): Technical data collected automatically through cookies when you use the Site.
• Administrator Input: Information entered by our team on your behalf, such as verification documents submitted via email.

Our Site uses cookies and similar technologies to improve user experience and analyse how the platform is used. Cookies help us keep you logged in, remember your preferences, and gather usage analytics.

You can modify your browser settings to decline cookies, though doing so may affect certain Site features.

We use the personal data we collect for the following purposes:

• Account Creation and Management: To register you, maintain your profile, and personalise your dashboard.
• Authentication and Security: To verify your identity at login and protect your account from unauthorised access.
• Processing Transactions: To facilitate deposits, investments, and withdrawals, and to maintain your transaction history.
• Communication: To send transactional notifications (deposit confirmations, payout alerts, withdrawal receipts) and, where permitted, marketing updates. You can opt out of marketing emails at any time.
• Referral Program Management: To track referrals and attribute rewards accurately.
• Product Improvement and Analytics: To understand usage patterns and improve platform functionality and security.
• Security and Fraud Prevention: To monitor for suspicious activity and protect the platform and its users.
• Legal Compliance: To meet KYC, AML, tax, and other regulatory obligations.

We do not sell your personal information. We share data only in the following limited circumstances:

• Service Providers: Trusted third parties (payment processors, email delivery, hosting, analytics) who are contractually bound to use your data solely for the services they provide to us.
• Legal Compliance and Protection: When required by law, court order, or to protect our rights, property, or safety.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity under equivalent privacy protections.
• With Your Consent: For any other purpose, only if you have given explicit permission.

We use the following key third-party services:

• Paystack: Our PCI-DSS compliant payment processor for deposits and withdrawals. We do not store your card details on our servers.
• Email Service Provider: A third-party service used to deliver transactional and marketing emails on our behalf.
• Other Providers: Cloud hosting, analytics, and customer support tools — all vetted for strong data protection standards and bound by confidentiality obligations.

We implement the following security measures to protect your data:

• SSL/TLS Encryption: All communications between your browser and our Site are encrypted in transit.
• Password Hashing: Passwords are never stored in plain text — they are hashed using modern cryptographic algorithms.
• Token-Based Authentication: Secure session tokens are used to validate your login and can be revoked if suspicious activity is detected.
• Access Controls: Personal data is accessible only to staff who need it for their specific role, under strict confidentiality obligations.
• Regular Security Reviews: Our servers are protected by firewalls and monitoring systems. We conduct periodic security audits and vulnerability assessments.
• Encrypted Backups: Regular database backups are stored securely to protect against data loss.

No method of internet transmission is 100% secure. We encourage you to use a strong password, never share your login credentials, and log out on shared devices. Contact us immediately if you suspect unauthorised access to your account.

We retain your personal information for as long as necessary to fulfil the purposes in this Policy, or as required by law.

• Active Accounts: Your data is retained throughout the life of your account.
• Closed Accounts: Certain data (such as transaction records and KYC information) may be retained after account closure to comply with financial, tax, or AML regulations — typically for a minimum of 5 years for financial data.
• Usage Data: Aggregated, anonymised technical data may be retained indefinitely for internal analysis. This data does not identify you personally.

Once retention periods expire or the purpose for collection is fulfilled, data is irreversibly anonymised or securely deleted.

Depending on applicable law, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Ask us to correct inaccurate or incomplete information.
• Right to Erasure: Request deletion of your data, subject to legal retention obligations.
• Right to Withdraw Consent: Withdraw consent for marketing communications at any time via the unsubscribe link in any email.
• Right to Data Portability: Request your data in a structured, machine-readable format for transfer to another provider.

To exercise any right, contact us using the details below. We may verify your identity before fulfilling a request. We aim to respond within 30 days. If you believe we have infringed your rights, you may lodge a complaint with your local data protection authority.

We may update this Policy from time to time. Material changes will be communicated via email or a prominent notice on the Site. The updated Effective Date will appear at the top of the Policy. Continued use of the platform after any change constitutes your acceptance of the revised Policy.

If you have any questions or requests regarding this Privacy Policy, please contact us:

• Email: info@ijeaweleinvest.com
• Mailing Address: Ijeawele Invest, Mulliner Towers, 39 Alfred Rewane Road, Ikoyi, Lagos 101233, Nigeria

Effective Date: May 30, 2025    Version: 1.0

Thank you for trusting Ijeawele Invest. We are dedicated to safeguarding your personal information.