BPAYEX COOKIE POLICY
Effective date: 1st May 2026
This Cookie Policy explains how Bpayex Digital Solution Limited uses cookies and similar technologies through Bpayex websites and digital services.
This Cookie Policy forms part of the BPAYEX contractual and privacy framework. The Privacy Policy explains how Bpayex processes personal information, including information collected through cookies and similar technologies. The General Terms contain the terms that generally apply to use of Bpayex services. The Business Terms apply to business accounts and business services, and the applicable Product Terms contain additional terms for particular products or services. The Cookie Policy explains technology-specific practices and does not replace or amend those other documents. If there is a conflict, the applicable contractual terms govern the relevant service, while this Cookie Policy governs the use of cookies and similar technologies to the extent permitted by law.
1. What cookies are
Cookies are small files stored by a website on your browser or device. Similar technologies can include:
- Pixels;
- Tags;
- Local storage;
- SDKs;
- Device identifiers.
2. Types of cookies we use
Strictly necessary cookies. These support:
- Authentication;
- Account security;
- Fraud prevention;
- Session management;
- Website functionality;
- Cookie-consent settings.
These cannot ordinarily be disabled through our consent tool because the website may not work correctly without them.
2.1 Functional cookies
These may remember preferences such as:
- Language;
- Region;
- Previous settings.
Where law requires consent for functional cookies, we will not activate them before consent, in the same way as described below for analytics and marketing cookies.
2.2 Analytics cookies
With consent where required, these help us understand:
- How visitors use the site;
- Which pages are popular;
- Errors;
- Performance.
We use analytics to improve our Services.
2.3 Marketing cookies
If used, marketing technologies may help Bpayex understand the effectiveness of campaigns or present relevant advertising.
We do not use sensitive identity or financial information for behavioural advertising.
Where law requires consent, optional marketing cookies will not be activated before consent.
3. Mobile application technologies
Mobile applications do not necessarily use browser cookies.
Bpayex applications may instead use:
- Secure local storage;
- Authentication tokens;
- SDKs;
- Device or app identifiers;
- Analytics technologies.
These are described in our Privacy Policy and applicable app-store privacy disclosures.
4. Managing cookies
You may manage optional cookies through: Cookie Settings / Cookie Preferences
You may also manage cookies through your browser.
Blocking necessary cookies may prevent parts of Bpayex from functioning.
You may withdraw consent at any time through Cookie Settings / Cookie Preferences. Withdrawal does not affect processing carried out before withdrawal.
5. Third-party cookies
Some technologies may be operated by service providers. Depending on the website, service and your choices, these may include:
- Google Analytics, provided by Google Ireland Limited;
- Google Tag Manager, provided by Google Ireland Limited;
- Microsoft Clarity, provided by Microsoft Ireland Operations Limited;
- Meta Pixel, provided by Meta Platforms Ireland Limited;
- Cloudflare, provided by Cloudflare, Inc.;
- OneTrust, provided by OneTrust Technology Limited.
These providers may process information such as IP address, device information, browser information, approximate location, pages viewed, events, and cookie identifiers. Their processing may also be governed by their privacy policies. We configure optional analytics and marketing technologies to operate only after consent where required by applicable law.
Some of these providers may process information outside Nigeria. Where this involves a transfer of personal data outside Nigeria, we will only make the transfer in accordance with the safeguards required by the Nigeria Data Protection Act 2023, including an applicable adequacy decision, contractual safeguards, consent, or another lawful transfer mechanism recognised under that Act.
6. Retention
Cookie duration depends on purpose. Some cookies expire when your browser session ends. Others remain for a defined period unless deleted earlier.
Our typical retention periods are:
1. Strictly necessary session cookies
Typical examples: Authentication, session security, fraud prevention
Retention period: Until the browser session ends
2. Strictly necessary persistent cookies
Typical examples: Security, consent and service preferences
Retention period: Up to 12 months, or until deleted or replaced
3. Functional cookies
Typical examples: Language, region and interface preferences
Retention period: Up to 12 months
4. Analytics cookies
Typical examples: Google Analytics, Microsoft Clarity
Retention period: Up to 14 months, unless deleted earlier or a shorter period is configured
5. Marketing cookies
Typical examples: Meta Pixel and similar campaign technologies
Retention period: Up to 90 days, unless deleted earlier or a shorter period is configured
6. Local storage, SDKs and device identifiers
Typical examples: Application security, preferences and analytics
Retention period: For the period necessary for the relevant purpose, generally up to 12 months after last activity
The periods above are typical maximum periods and may vary by product, provider, browser, device, consent status and applicable legal requirements. Information collected through cookies may also be retained in accordance with the retention periods described in our Privacy Policy.
7. Changes
We may update this Cookie Policy when our use of cookies or applicable law changes.
8. Contact
Questions about cookies or privacy may be sent to:
support@bpayex.com
You may also contact our Data Protection Officer at:
dpo@bpayex.com
If you are dissatisfied with our response, you may complain to the Nigeria Data Protection Commission:
Nigeria Data Protection Commission (NDPC)
Website: https://ndpc.gov.ng
Email: info@ndpc.gov.ng
Address: No. 12 Clement Isong Street, Asokoro, Abuja, Nigeria
You may also contact the data-protection authority in the country where you live or work, or where you believe an infringement occurred, where applicable.