Privacy policy.

1. Introduction

BlocMFB is committed to safeguarding your privacy. This Privacy Policy explains how personal information is collected, used, disclosed, and protected when you access our website. As the data controller, the organization determines the purposes and means of processing your personal data. By using our services, you acknowledge and agree to the practices described in this Privacy Policy.

1.1 Who are we?

We are BlocMFB, a technology company that provides digital trust solutions. You can contact us by email at Banking.blocmfb@blocmfb.com or by telephone at 07081566776.

The contact details of our Data Protection Officer are: AbdulAzeez Adesanya with email address abdulazeez.adesanya@crayfinance.com.

1.2 Mission Statement

Our mission is to empower businesses and individuals with innovative, accessible, and secure financial solutions. We bridge the gap between traditional banking and modern technology, providing tools that help our customers grow, save, and transact with confidence.

We uphold the following principles:

• Access: You maintain control over your personal information. Individuals retain control over the privacy of information they provide and that is processed by the organization.
• Transparency: The organization will clearly communicate what data is collected and how it will be used, enabling informed decisions.
• Data Minimization: Only personal information necessary for delivering services and improving user experience is collected and used. Collection is limited to what is relevant and required.
• Security: Strong security and encryption measures are applied to protect entrusted data, ensuring confidentiality, integrity, and availability.
• Compliance: The organization respects applicable privacy laws and works to ensure individuals' legal rights to privacy are upheld.

2. How we collect and use your information

2.1 When you use our platform

During account creation and onboarding, we collect only the personal information required for account setup and service delivery, such as your name, email address, business name, and organization type. This information is used to create and manage your account, verify your identity, communicate with you, and ensure platform functionality.

2.2 When you submit an enquiry via our website

When you submit an enquiry, we ask for your full name, telephone number, and work email address. This information enables us to respond to your query and follow up on your interest, based on our legitimate interest in providing accurate information prior to a sale. Enquiry records may be shared with our partners and will be stored for three years after the last contact.

2.3 When you sign up for newsletters on our website

When you sign up for newsletters or request a demo, we collect your full name, telephone number, and work email address. This information is securely stored in our database and used solely to send you requested communications.

2.4 Cookies

We use essential cookies to ensure the proper functioning of our web application and to enhance your experience. These cookies may be placed without your consent; however, we will always request your permission before using non-essential cookies.

2.5 How do we share your information?

We do not sell or rent your personal information. We may share your information with trusted partners who assist in delivering our services, under strict Data Processing Agreements (DPAs) and Service Level Agreements (SLAs). Partners must comply with applicable data protection laws, including the Nigeria Data Protection Act (NDPA), and recognized security frameworks such as ISO 27001.

3. Why we need your personal data

We collect your personal data for the following purposes to enable us to:

• Comply with CBN and other banking regulations
• Verify your data in compliance with Banking regulations
• Verify the accuracy of your information such as address, NIN and BVN

4. Lawful basis for Processing

In the table below, we describe the major types of personal data we process, along with the purpose of processing and the corresponding lawful basis under applicable data protection legislation.

5. Your rights as a data subject

We take your privacy rights seriously and consider them fundamental to our operations.

• Access: request a copy of your personal information.
• Rectification: correct inaccurate or incomplete data.
• Withdraw consent: withdraw your consent at any time.
• Restrict processing: limit how your data is used.
• Object to processing: challenge how your data is processed.
• Erasure: request deletion of your data.
• Complaint: lodge a complaint with the appropriate authority.

5.1 Your right to complain

If you have concerns about our use of your information, we encourage you to contact us first so we can address the issue.

6. Data Retention

We retain your personal data only as long as necessary for the purposes for which it was collected or to satisfy legal, regulatory, or contractual requirements.

We retain your data for up to 60 days after contract termination. After this period, data is securely deleted or anonymized.

7. Security

We implement comprehensive security measures aligned with international standards including ISO 27001, ISO 27701, and the Nigeria Data Protection Act (NDPA). Our measures include encryption, access controls, audits, and employee security training.

8. Updates to this privacy policy

We review and update this policy periodically. If we intend to use your personal data in a new way, we will notify you and obtain consent where necessary.

9. Contact us

For questions, concerns, or requests regarding this Privacy Policy, contact us at: Banking.blocmfb@blocmfb.com

To exercise your data protection rights, use the contact information provided above in this Contact Us section.

Last updated: July 2026. This policy is governed by the laws of the Federal Republic of Nigeria.