Privacy Policy

This Privacy Policy explains how the company operating the Radok Pay platform (“Radok”, “we”, “us”, or “our”) collects, uses, shares, and protects personal information in connection with radokpay.com, the merchant dashboard, hosted checkout and payment links, APIs, webhooks, and related services (the “Services”).

We process personal information in line with applicable Nigerian data-protection law, including the Nigeria Data Protection Act and related rules (together, “NDPR”), and other laws that apply to a given processing activity.

By using the Services, you acknowledge this Policy. Where consent is required, we will ask for it. Our Terms of Service govern use of the platform; this Policy governs personal information.

• We collect personal information that is necessary to provide and secure the Services
• We aim to be transparent about what we collect and why
• We apply access controls and other safeguards appropriate to payments data
• We retain information as needed for the Services and for legal and regulatory obligations
• We do not sell personal information

Depending on how you interact with Radok, we may collect or receive:

We may also process aggregated or anonymised data that does not identify an individual. We do not seek to collect special-category (sensitive) personal data except where KYB/KYC law requires identity documents that may contain such data, in which case we process it only as needed for compliance.

We obtain personal information when you or your team:

• Create or administer a Radok account
• Complete KYB or run KYC checks
• Create collections, virtual accounts, payment links, or payouts
• Configure API keys, webhooks, or security settings
• Contact support or use the contact form
• Visit our marketing site (technical logs and cookies as described below)

We also receive information from payment partners and banks (for example settlement and name-enquiry results), identity-verification providers, fraud and security vendors, and publicly available corporate registries used for due diligence.

We process personal information where one or more of the following applies:

• Contract: to create and manage your account and provide the Services you request
• Legal obligation: KYB/KYC, AML/CFT, record-keeping, sanctions screening, and responses to lawful requests
• Legitimate interests: securing the platform, preventing fraud, improving reliability, and communicating service notices — balanced against your rights
• Consent: where we ask for it (for example certain cookies or optional marketing), which you may withdraw

We use personal information to:

• Provide, operate, and improve the Services
• Authenticate users and protect accounts (including 2FA and step-up checks)
• Process collections, payouts, and related ledger entries
• Complete KYB and optional KYC features
• Detect, investigate, and prevent fraud, abuse, and security incidents
• Comply with law, regulation, and partner requirements
• Send transactional notices (receipts, security alerts, downtime, policy updates)
• Respond to support requests
• Analyse aggregated usage to improve product performance

We do not use personal information for third-party advertising networks. If we introduce optional product marketing emails, you will be able to opt out; transactional messages will continue as needed to run the account.

We do not sell personal information. We share it only as needed to operate the Services or as required by law, including with:

• Payment service providers, banks, and rails that clear or settle transfers
• Identity, KYC, and fraud-prevention providers
• Cloud hosting, email, and infrastructure vendors under contractual confidentiality and security obligations
• Professional advisers (legal, accounting) under confidentiality
• Regulators, courts, or law enforcement when we believe disclosure is legally required or necessary to protect rights, safety, or the integrity of the financial system
• A buyer or successor in a merger, acquisition, or asset sale, subject to this Policy or a successor notice we communicate to you

When you integrate Radok into your own products, you may instruct us to send webhooks and data to systems you control. Those systems are governed by your policies; configure them carefully.

We maintain administrative and technical safeguards designed to protect personal information against unauthorised access, loss, or alteration, including encryption in transit, access roles, secret hashing for API keys, webhook signing secrets, and environment separation. See also our Security page.

No system is perfectly secure. You must protect dashboard passwords, 2FA devices, API keys, and webhook endpoints. Notify us promptly of suspected compromise.

We retain personal information for as long as your account is active and as needed to provide the Services. After closure, we may retain records for as long as required for AML/CFT, tax, accounting, dispute resolution, and other legal obligations, or for a reasonable period for fraud prevention.

When retention is no longer required, we delete or irreversibly anonymise information, subject to backup cycles.

Subject to NDPR and other applicable law, you may have the right to request access to personal information we hold about you, correction of inaccurate data, deletion where legally permissible, restriction or objection to certain processing, and information about how we process your data.

Some rights are limited where we must keep data for regulatory, AML, or fraud reasons, or where fulfilling a request would reveal information about another person. We may need to verify your identity before responding.

To exercise rights, email support.team@radokpay.com or use the contact page. We aim to respond within the timeframes required by applicable law.

We use cookies and similar technologies that are necessary to operate authenticated sessions on the dashboard and to secure the Services. We may also use limited analytics cookies on marketing pages to understand traffic; where required, we will request consent before setting non-essential cookies.

You can control cookies through your browser settings. Blocking necessary cookies may prevent sign-in or checkout from working correctly.

Our sites may not respond to “Do Not Track” browser signals; there is no consistent industry standard for such signals. You can still manage cookies as described above.

We primarily serve Nigerian businesses and process payment data with partners that operate in Nigeria. Some infrastructure or support vendors may process data in other countries.

Where we transfer personal information internationally, we take steps designed to ensure appropriate safeguards consistent with NDPR and other applicable law, such as contractual protections with processors.

The Services are directed to businesses and authorised adult users. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided personal information, contact support.team@radokpay.com so we can investigate and delete it where appropriate.

When you use Radok to collect from or pay your customers, you typically determine the purposes of processing customer personal information (for example invoices or payouts you initiate). In those cases you are a controller (or equivalent) for that customer data, and Radok processes it to provide the Services on your instructions and to meet our own compliance obligations.

You must ensure you have a lawful basis to submit customer data to Radok and that your own privacy notice accurately describes the use of payment providers.

We may update this Policy by posting a revised version on this page with an updated date. For material changes, we will provide additional notice through the dashboard or email where practicable. Continued use after the effective date constitutes acknowledgment of the updated Policy.

Privacy questions, requests, or complaints: support.team@radokpay.com or the contact page. We will investigate and respond as required by applicable law.