Privacy policy

This policy explains how Echo Systems Network Ltd ("we") collects and uses personal data when you use EchoGateway, in line with the Nigeria Data Protection Act 2023.

What we collect

• Merchants: business details, details of owners and directors (including BVN and NIN), settlement bank details and KYC documents.
• Payers: name, email, phone number and payment details needed to process a payment. Card numbers are handled by the processors and are never stored by us.
• Technical data such as IP address and device information, used for security and fraud prevention.

Why we use it

To verify merchants (KYC/AML obligations), process and settle payments, send receipts, prevent fraud, meet legal and regulatory requirements, and support you.

Identity verification

With your consent we verify identity and business details through our KYC partner EchoVerify, which checks them against official sources (such as NIBSS, NIMC and CAC) and screening lists. Results are kept with your application.

Sharing

We share data only with payment processors, banks, our KYC partner, and regulators or law enforcement where the law requires. We do not sell personal data.

Security and retention

Sensitive data such as BVN, NIN and credentials is encrypted at rest; KYC documents are stored outside the public web folder and only visible to authorised compliance staff. We keep records for as long as the law requires (generally at least five years after the relationship ends).

Your rights

You may ask to access, correct or delete your data, or object to its use, by emailing support@echosystems.ng.

Questions: support@echosystems.ng