Last updated: 6 August 2026
This Privacy Policy explains how BovaOne LTD ("BovaOne", "we", "us", or "our") collects, uses, shares, and protects your personal information when you use the BovaRefill platform (the "Services"). We process personal data in accordance with the Nigeria Data Protection Act 2023 and the Nigeria Data Protection Regulation (NDPR).
We collect information you provide directly, such as your name, email address, phone number, date of birth, and — where required for identity verification — your BVN, NIN, or a government-issued ID. We also collect transaction data (for example, wallet funding, purchases, transfers, card and virtual-account activity, and flight bookings), device and usage data (such as IP address, device identifiers, and app interaction logs), and any information you provide when you contact our support team.
We use your information to: create and manage your account; verify your identity and comply with know-your-customer (KYC) and anti-money-laundering (AML) obligations; process transactions and provide the Services you request; detect and prevent fraud, abuse, and security incidents; send you transactional notifications (such as receipts and status updates) and, where you have not opted out, product updates; and comply with legal and regulatory requirements.
We process your personal data on the basis of: performance of the contract between you and BovaOne (delivering the Services you request); compliance with a legal obligation (for example, KYC/AML regulations); our legitimate interest in operating and securing the platform; and, where applicable, your consent (for example, for marketing communications you can opt out of at any time).
We share personal data with: licensed third-party partners who help deliver a Service you requested (for example, a card issuer, a bank or payment processor, or an airline/travel-content provider) — only the information necessary for that partner to fulfil the transaction; regulators and law enforcement, where required by law or a valid legal process; and service providers who support our operations (for example, cloud hosting, customer support tooling, and analytics), under contractual confidentiality obligations. We do not sell your personal data.
Some of our service providers may process data outside Nigeria. Where this occurs, we take steps to ensure an adequate level of protection is in place, consistent with NDPR requirements for cross-border data transfers.
We retain personal data for as long as your account is active, and for a further period afterward as required to meet our legal, regulatory, tax, and fraud-prevention obligations (identity-verification and transaction records are typically retained for a minimum period set by applicable financial-services regulation). When data is no longer required, we securely delete or anonymize it.
Subject to applicable law, you may have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data, where we are not otherwise required to retain it; object to or restrict certain processing; and withdraw consent for marketing communications at any time. To exercise these rights, contact us using the details below.
We apply administrative, technical, and physical safeguards designed to protect your personal data against unauthorized access, loss, misuse, or alteration — including encryption of sensitive data in transit and at rest, and access controls limiting who within BovaOne can view identity and payment information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Services are used, so we can improve them. You can control cookies through your browser settings; disabling some cookies may affect how the Services function.
The Services are not directed to individuals under 18, and we do not knowingly collect personal data from minors.
We may update this Privacy Policy from time to time. Material changes will be communicated to you before they take effect, and the "Last updated" date above will reflect the most recent revision.
For privacy-related questions or to exercise your data-protection rights, contact us at [email protected], or write to us at our registered address: BovaOne LTD, Plot 9, Road 5, Isheri North GRA, Lagos State, Nigeria.