1. Introduction

This Privacy Policy applies to the website(s) and mobile applications (together, the ‘Sites’) provided by AG Mortgage Bank Plc., a company incorporated in Nigeria, authorized and regulated by the Central Bank of Nigeria and the Federal Mortgage Bank of Nigeria and registered office at 96 Opebi Road, Ikeja, Lagos State, Nigeria, and/or the other Products of AG Mortgage Bank Plc. (‘AG Mortgage Bank’, “we”, “us”) who act as data controllers with respect to the personal data you share with AG Mortgage Bank under this Policy.

AG Mortgage Bank Plc. knows that your privacy is important to you and takes user privacy very seriously. We are committed to protecting your personal data (i.e., any information you provide to us from which you can be identified) in accordance with this Privacy Policy and in compliance with the Nigeria Data Protection Act (NDPA) 2023.

AG Mortgage Bank Plc. reserves the right, at its sole discretion, to alter and update this Privacy Policy from time to time. We therefore invite you to review the current version of the Privacy Policy each time you return to our Sites.

2. What information do we hold about you?

By “information,” we mean all the personal and financial information about you that we collect, use, share, and store. The information we hold will vary according to the account and relationship you have with us.

AG Mortgage Bank Plc may need to collect information about you and your computer to allow you to use some of our services. This personal information may include:

• Identity data: First name, middle name, last name, marital status, title, date of birth, and gender.
• Contact data: billing address and telephone numbers, email address.
• Financial data: bank account, BVN, and payment card details.
• Transaction data: details about payments to and from you and other details of products and services you have subscribed to.
• Technical data: internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
• Profile data: your username and password, your interests, preferences, feedback and survey responses.
• Usage data: information about how you use our website, products and services.
• Marketing and communications data: your preferences in receiving marketing from us and our third parties and your communication preferences.

3.  How We Collect Your Personal Information:

• Direct Engagement: when you register or log on to the website or when you choose to use an available AG Mortgage Bank service via the website, mobile app, including when you fill out forms, transfer any policies into our agency, upload any documentation, send AG Mortgage Bank any communication by email, phone or post, make an enquiry, or any other communication that AG Mortgage Bank receives directly or indirectly from you.
• When you browse the AG Mortgage Bank website, information relating to your browsing patterns and technical data about the equipment you are using to access the website is automatically collected using cookies, server logs, and other similar technologies. You can select your preference from the cookie settings on any of our websites.
• Automatically: As you browse our websites, certain information relating to your browsing patterns and technical data about the equipment you are using to access the website is automatically collected using cookies, server logs, and other similar technologies. Please see our Cookie preference for further information.
• From third parties/public sources:

• Technical data may be obtained from the following parties:

• analytics providers
• advertising networks
• search information providers

• Contact, financial, and transaction data may be obtained from providers of technical, payment, and credit referencing.
• We utilize third-party service providers to secure information related to financial crime, fraud, sanctions, and Politically Exposed Persons.

• From recorded images and calls. We’ll record or monitor phone calls with you for regulatory purposes, for training and to ensure and improve the quality of service delivery, to ensure the safety of our staff and customers, and to resolve queries or issues. We also use CCTV on our premises to ensure the safety and security of our staff and customers.

4.  Why do we need the information, and whatdo  we use it for?

The Nigerian Data Protection Act requires us to have one or more of the following reasons for using your information:

1. ‘Consent’ – In some cases, we may obtain your consent to use information in a particular way or where the law requires consent to be obtained.
2. ‘Contract performance’ – the information needed to deliver your account, product or service, e.g. we’ll need to hold your transaction history to give you an account statement.
3. ‘Legal obligation’ – we are required by law to process your information, e.g. to verify your identity.
4. ‘Legitimate interest’ – we’re allowed to use your information where, on balance, the benefits of us doing so are legitimate and not outweighed by your interests or legal rights e.g., we have an interest in knowing what our customers do and don’t like so we can offer better products and services.

These are the main ways we’ll use your information (and the reasons for doing so):

• Check your identity and eligibility for an account
• Manage your account and relationships with us
• Assess risk and carry out credit scoring
• Recover the money that is owed to us
• Improve our services and computer systems
• Identify other products and services from us and our partners that you may find useful
• Manage and organize our business
• To manage relationships with third parties who introduce customers to us
• To advise on the suitability of our mortgage

5. How long do we hold information?

How long we keep your information depends on the products and services we deliver to you.

We’ll retain information for no longer than is necessary to manage your relationship with us and this will mean that we’ll continue to hold some information for some time after your account has closed or our relationship has ended, for example where required by a regulator, for active or potential legal proceedings, to resolve or defend claims, or for making remediation payments.

If you would like any further information about how long we hold your information, please contact our DPO by email at dpo@agmortgagebankplc.com or by post at Data Protection Officer, 96 Opebi Road, Ikeja, Lagos State.

6. Accuracy of Your Data

It is important that the personal data AG Mortgage Bank holds about you is accurate and up-to-date. Please keep AG Mortgage Bank informed if your personal data changes during your relationship with us. With our customer facing products, you can update your personal data or contact our Data Protection Officer when you want to exercise your right to Rectification.

7.  Security of Your Data

In order to protect your personal data, AG Mortgage Bank has appropriate organizational and technical security measures. These measures include storing data on a dedicated and secure server, restricting access to your personal data to certain employees, ensuring the AG Mortgage Bank internal IT systems are suitably secure, and implementing procedures to deal with any suspected data breach.

In the unlikely event of a data breach, AG Mortgage Bank will take steps to mitigate any loss or destruction of data and, if appropriate, will notify you and any applicable authority of such a breach.

8.  Data Transfers and Sharing

AG Mortgage Bank may need to pass your information to third party service providers which maintain, administer or develop the website on our behalf and the information will only be provided for such limited purposes and as detailed below. In addition, AG Mortgage Bank may provide aggregate statistics about its customers, sales, traffic patterns and related website information to reputable third-parties, but these statistics will include no personally identifiable information.

AG Mortgage Bank may transfer your personal data to third parties of the following types:

• companies providing identity or financial validation services;
• financial product providers;
• Payment services companies acting on your, or our behalf;
• banks;
• companies providing analytics services;
• data, service and software providers;
• marketing services companies;
• Regulatory and law enforcement bodies.

The security of your data is important to us and AG Mortgage Bank will therefore, only transfer your data to such third parties if one or more of the following apply:

• you have expressly consented to your data being shared with specific third parties;
• the third party needs to access the personal data for the purposes of providing any contracted services to you;
• the third party has agreed to comply with AG Mortgage Bank’s instructions, NDPA 2023, required data security standards, policies, and procedures and put adequate security measures in place;

As at the last update to this Privacy Policy, AG Mortgage Bank does not share data with any Organization(s) outside Nigeria.

9.  Your Rights as a Data Subject

Your personal data is protected by legal rights as stated in the Nigeria Data Protection Act (NDPA) 2023. These rights include:

• Right to rectification: you have the right to require us to correct any inaccuracies in your data.
• Right to erasure: you have the right to require us to delete your data, subject to certain legal requirements.
• Right to restriction of processing: you have the right to require us to restrict the way in which we process your personal data. You may wish to restrict processing if, for example:

• You contest the accuracy of the data and wish to have it corrected;
• You object to processing but we are required to retain the data for reasons of public interest; or
• as a customer, you do not wish to receive marketing communication.

• Right to data portability: you have the right to obtain from us easily and securely the personal data we hold on you for any purpose you see fit.
• Right to object to processing: you have the right to require us to stop processing your personal data should you wish the data to be retained but no longer processed. Please be aware that this may prevent us from continuing to provide services to you.
• Right of access: you have the right to request access to personal data that we may process about you.
• Right to withdraw consent: you have the right at any time to withdraw consent allowing us to process your personal data. This will not affect the legality of any processing prior to the date of such withdrawal.

If you would like to exercise any of the above rights, please:

• Put your request in writing and send it to us through your usual registered channel (e.g. registered e-mail);
• Specify the ‘Right’ you wish to exercise.

For more information or to exercise your data protection rights please, please contact our Data Protection Officer at: dpo@agmortgagebankplc.com

AG Mortgage Bank will endeavor to process all subject access requests within 30 days and if any further extension is required, we will communicate same through existing consented channels – at no cost.

However, please note that you may continue to receive existing communications for a transitional period whilst we update your preferences.

10.  Job Applicants

If you apply for a job at AG Mortgage Bank, you will be asked to submit information to AG Mortgage Bank such as your name, contact details, information about your education and work history and any other background information that might be relevant for your application or that you choose to share with AG Mortgage Bank. If you do not provide this information to us, we might not be able to process your application.

AG Mortgage Bank will use this information to assess your application and candidacy for the position to which you have applied. Without limiting the generality of the foregoing, this may include:

• Evaluating your skills and experience in relation to the qualification required for the job to which you have applied; and
• Tracking feedback and interactions we have with you throughout the recruiting process. We may also use your information when analyzing our internal recruiting processes to determine:

• Which recruit sources to focus on;
• How to improve integration and training programs for new hires with different educational backgrounds and work experience; and
• How to enhance our interview model to improve hiring quality.

The information you provide may also be used to communicate with you about AG Mortgage Bank events and to send you publications that we think may be of interest to you.

We might share your personal data with other companies affiliated to AG Mortgage Bank as well as with third parties such as recruitment service providers, background check providers and IT system providers. These AG Mortgage Bank companies and third parties might be located in a different country than your country of residence.

We will keep your application data for up to 1 year. If you no longer wish for AG Mortgage Bank to process your data or if you wish to exercise your rights, please contact dpo@agmortgagebankplc.com

11.   Updates to the Privacy Policy

We are constantly trying to improve our Websites and Services, so we may need to change this Privacy Policy from time to time as well. We will alert you to material changes by, for example, placing a notice on our Websites and/or by sending you an email (if you have registered your e-mail details with us) when we are required to do so by applicable law. We reserve the right to update this Privacy Policy from time to time.

If you believe at any time that we have not handled your data in accordance with this Policy, you should contact the Data Protection Officer. You may also contact the Nigeria Data Protection Commission (NDPC) at: info@ndpc.gov.ng

We have appointed a data protection officer (DPO) who is responsible for dealing with any such concerns, in addition to overseeing questions in relation to this Privacy Policy and handling requests in relation to the exercise of your rights. If you have any concerns or questions, please contact the Data Protection Officer using the details set out below.

12.  Contact

Data Controller

AG Mortgage Bank Plc.

96 Opebi Road

Ikeja, Lagos

info@agmortgagebankplc.com

If you have any questions, comments and requests regarding your privacy and rights, please let us know how we can help:

Data Protection Officer

dpo@agmortgagebankplc.com

Published: August 8, 2023