Data Governance

Privacy policy.

How Ubuntu Exchange collects, uses, stores, and protects customer information across onboarding, settlement, and support operations.

Controller Ubuntu Cygnet Digital Limited
Market Nigeria-focused operations
Purpose Service delivery and compliance
Contact Compliance desk
01

Privacy framework

This page explains how Ubuntu Exchange collects, uses, stores, and protects personal and operational information in connection with onboarding, settlement, support, compliance review, and public platform access. It is intended to provide a clear public summary of the platform’s data-handling posture.

Privacy handling may be shaped by legal, operational, and compliance obligations attached to the service you use and the records required to support it.
02

Information we collect

We may collect onboarding details, government-issued identity information, address and contact records, transaction instructions, customer-support communications, and technical device or access signals needed to operate the platform securely and responsibly.

Identity and onboarding data

Information reasonably required to verify who is requesting access and whether the platform can support that relationship under its internal controls.

Operational and transaction data

Information generated when users request settlement, communicate with support, or interact with service interfaces and public website surfaces.

03

Why we process data

Customer information is processed to verify identity, evaluate risk, execute transactions, maintain records, respond to inquiries, and comply with applicable legal, contractual, and regulatory obligations. Information may also support fraud prevention, sanctions review, internal controls, and service integrity.

04

Sharing and processors

Where necessary, information may be shared with regulated payment partners, identity verification providers, infrastructure providers, legal advisers, and competent authorities. Such sharing is limited to circumstances reasonably connected to service delivery, compliance obligations, fraud prevention, or lawful review.

Information is not published or shared for unrelated marketing activity.

05

Retention and security

Records are retained for operational, contractual, audit, and compliance purposes for as long as reasonably required by policy or law. Ubuntu Exchange applies access controls, monitoring, infrastructure protections, and operational restrictions designed to reduce unauthorized access, misuse, or disclosure.

Retention posture

Retention periods depend on the record type, legal obligations, and the platform’s need to support dispute resolution, review, and internal control.

Security posture

Technical and procedural safeguards are used to reduce exposure, though no digital system should be understood as risk-free in every circumstance.

06

Your requests

You may contact the compliance desk to request clarification, correction of inaccurate information, or further explanation of how records are handled, subject to lawful verification and record-retention obligations. Some requests may be limited where continued processing is required for compliance, fraud prevention, or service integrity.

07

Policy updates

This page may be updated when products, infrastructure, partner relationships, or legal obligations change. The current published version reflects Ubuntu Exchange’s active public privacy posture.

Privacy Contact

Need a privacy clarification?

Send any privacy or data-handling request to the compliance desk so it can be reviewed under the platform’s governance process.