Privacy policy.

EFFECTIVE DATE: 10 June 2026 · LAST REVIEWED: 10 June 2026

1. Who we are

MAVI Finance Limited ("MAVI", "we", "us") is a money-lending company registered in Abuja, Nigeria, holding a money lender's licence issued by the FCT Ministry of Justice. Our registered office address is Abuja, FCT, Nigeria.

We are the data controller of personal data described in this policy. Our designated Data Protection Officer can be reached at dpo@mavifinance.com.ng.

2. What personal data we collect

To assess loan applications, disburse funds, and collect repayments we collect:

• Identity — full name, date of birth, BVN, NIN, government-issued ID, photograph
• Contact — phone number, email, residential and employer address
• Financial — bank account details, salary information, statements, credit-bureau reports
• Employment — employer name, employment status, IPPIS number for federal staff
• Device & usage — IP address, device identifier, app/web interaction logs

3. How we use it

We use your data to:

• Verify your identity and prevent fraud (KYC and AML obligations under CBN and NFIU rules)
• Decide whether to extend credit and on what terms
• Disburse loans, collect repayments, and operate direct-debit mandates
• Communicate with you about your application, your loan, and important account updates
• Report to credit bureaus (CRC, FirstCentral, CreditRegistry) as required by CBN regulation
• Improve our products and meet our regulatory and legal obligations

4. Who we share data with

We share data only with parties who help us deliver the service to you, or where the law requires:

• Credit bureaus — CRC, FirstCentral, CreditRegistry (mandatory CBN reporting)
• Identity providers — NIBSS, Youverify, or Smile Identity (BVN/NIN verification)
• Direct-debit providers — Remita and Mono (open banking)
• Banks — for fund transfers and statement verification
• Regulators & courts — when required by law (CBN, NFIU, NDPC, FIRS, courts)

We never sell your personal data. We never share it for unrelated marketing.

5. How long we keep data

We retain your data for as long as you have an active relationship with us, plus the minimum periods required by law (typically seven years for loan records under FIRS and CBN retention schedules). After that, your data is securely deleted or anonymised.

6. Your rights

Under the Nigeria Data Protection Act 2023, you have the right to:

• Access the personal data we hold about you
• Correct data that is inaccurate or incomplete
• Request deletion of your data (subject to our regulatory retention obligations)
• Object to processing for marketing purposes
• Withdraw consent for processing that is consent-based
• Lodge a complaint with the Nigeria Data Protection Commission (ndpc.gov.ng)

To exercise any of these rights, email dpo@mavifinance.com.ng. We respond within 30 days.

7. Security

We use industry-standard technical and organisational measures to protect your data — TLS encryption in transit, encryption at rest, role-based access controls, audit logging, and regular security testing. No system is perfectly secure, but we treat your data with the seriousness it deserves.

8. Cookies

Our website uses essential cookies for session management and analytics cookies (Google Analytics) for understanding how visitors use the site. You can disable analytics in your browser settings without losing functionality.

9. Changes to this policy

We may update this policy from time to time. The "Last reviewed" date at the top will reflect the most recent change. Material changes will be communicated via email and an in-app notice.

10. Contact

Questions, complaints, or rights requests:
Data Protection Officer
MAVI Finance Limited
Abuja, FCT, Nigeria
dpo@mavifinance.com.ng
+234 800 000 0000