Privacy Policy

This Privacy Policy describes how Tiki, through its regulated entity CapitalSage Finance Limited in Nigeria, collects and processes your personal information through the Tiki websites and applications that reference this Privacy Notice.

This Privacy Policy applies to all platforms, websites, and departments of Tiki. By using Tiki Services, you are consenting to the collection, storage, processing and transfer of your personal information as described in this Privacy Policy.

CapitalSage Finance Limited is licensed by the Central Bank of Nigeria, registered business address at Lagos, Nigeria. CapitalSage Finance Limited is the Data Controller for personal information collected and processed in connection with the provision of Tiki Services in Nigeria.

Tiki collects your personal information in order to provide services and continually improve our products and services.

Here are the types of personal information we collect:

Information you give us: we receive and store any information you provide in relation to Tiki. You can choose not to provide certain information but then you might not be able to use some Tiki Services. Examples of information that you give us include:

email address

name

gender

date of birth

home address

nationality

country code

other information to help us identify you

Automatically collected information: we automatically collect and store certain types of information about your use of Tiki Services including your interaction with content and services available through Tiki Services. Like many websites, we use cookies and other unique identifiers and we obtain certain types of information when your web browser or device accesses Tiki Services. Examples of the information we collect and analyse include:

the Internet protocol (IP) address used to connect your computer to the Internet,

login, e-mail address, password and location of your device or computer;

Tiki Services metrics (e.g., the occurrences of technical errors, your interactions with service features and content, and your settings preferences);

version and time zone settings;

transaction history.

Information from other sources: we may receive information about you from other sources such as credit history information from credit bureaus, which we use to help prevent and detect fraud.

Tiki does not allow anyone under the age of 18 to use Tiki Services.

We process your personal information to operate, provide, and improve the Tiki Services that we offer our users. These purposes include:

Transaction services. We use your personal information to take and handle orders and to process payments, and communicate with you about orders, services, and promotional offers.

Provide, troubleshoot, and improve Tiki Services. We use your personal information to provide functionality, analyse performance, fix errors, and improve the usability and effectiveness of Tiki Services.

Recommendations and personalisation. We use your personal information to recommend features and services that might be of interest to you, identify your preferences, and personalise your experience with Tiki Services.

Comply with legal obligations. In certain cases, we collect and use your personal information to comply with laws and regulations. For instance, we collect ID information for identity verification and other purposes.

Communicate with you. We use your personal information to communicate with you in relation to Tiki Services.

Fraud prevention and credit risks. We process personal information to prevent and detect fraud and abuse in order to protect the security of our users, Tiki Services and others. We may also use scoring methods to assess and manage credit risks.

Purposes for which we seek your consent. We may also ask for your consent to process your personal information for a specific purpose that we communicate to you. When you consent to our processing your personal information for a specified purpose, you may withdraw your consent at any time and we will stop processing of your data for that purpose provided we are not required by law to continue processing that information.

We use cookies and similar tools to enhance your user experience, provide our services, and understand how customers use our services so we can make improvements. To enable our systems to recognise your browser or device and to provide Tiki Services to you, we use cookies.

We use operational cookies and similar tools (collectively, "cookies") to provide our services, for example:

Recognising you when you sign-in to use our services.

Providing customised features and services.

Displaying features and services which might be of interest to you, including ads on our services.

Preventing fraudulent activity.

Improving security.

Keeping track of your preferences such as currency and language.

We also use cookies to understand how users use our services so we can make improvements.

The settings on your browser will tell you how to prevent your browser from accepting new cookies, how to have the browser notify you when you receive a new cookie, how to disable and remove cookies, and when cookies will expire.

Operational cookies allow you to take advantage of some of Tiki's essential features. If you block or otherwise reject operational cookies through your browser settings some features and services may not work.

Information about our users is an important part of our business and we are not in the business of selling our users' personal information to others. Tiki shares users' personal information only as described below and with the subsidiaries or affiliates of Tiki that are either subject to this Privacy Notice or follow practices at least as protective as those described in this Privacy Notice.

Third party service providers: We employ other companies and individuals to perform functions on our behalf. Examples include analysing data, providing marketing assistance, processing payments, transmitting content, and assessing and managing credit risk. These third-party service providers have access to personal information needed to perform their functions, but may not use it for other purposes. Further, they must process the personal information in accordance with this Privacy Notice and as only permitted by applicable data protection laws.

Business transfers: As we continue to develop our business, we might sell or buy other businesses or services. In such transactions, user information generally is one of the transferred business assets but remains subject to the promises made in any pre-existing Privacy Notice (unless, of course, the user consents otherwise). Also, in the unlikely event that Tiki or substantially all of its assets are acquired, user information will be one of the transferred assets.

Protection of Tiki and others: We release account and other personal information when we believe release is appropriate to comply with the law or with our regulatory obligations; enforce or apply our Terms of Use and other agreements; or protect the rights, property or safety of Tiki, our users or others. This includes exchanging information with other companies and organisations for fraud protection and credit risk reduction.

Tiki may transfer your data outside of the United Kingdom and Canada respectively. Tiki puts in place suitable safeguards to ensure that such transfer is carried out in compliance with applicable data protection rules, except where the country to which the data is transferred has already been determined by local regulations peculiar to the specific data controllers to provide an adequate level of protection.

Where Tiki transfers personal data to affiliates or service providers, Tiki relies on the standard contractual clauses approved by the European Commission.

We design our systems with your security and privacy in mind. We work to protect the security of your personal information during transmission by using encryption protocols and software.

We maintain physical, electronic and procedural safeguards in connection with the collection, storage and disclosure of your personal information. Our security procedures mean that we may ask you to verify your identity before we disclose personal information to you.

It is important for you to protect against unauthorised access to your account password. We recommend using a unique password for your Tiki account that is not utilised for other online accounts. Be sure to sign off when you finish using a shared computer.

We may share your personal information with our marketing partners for the purposes of targeting, modelling, and/or analytics as well as marketing and advertising.

You can access your information, including your name, address, payment options, profile information, and transaction history in the "Your Account" section of the website.

If you have any questions or objection as to how we collect and process your personal information, please contact support@tikibycapitalsage.com.

When you consent to our processing your personal information for a specified purpose, you may withdraw your consent at any time and we will stop any further processing of your data for that purpose.

In addition, subject to applicable law, you have the right to request access to, correct, and delete your personal data, and to ask for data portability. You may also object to our processing of your personal data or ask that we restrict the processing of your personal data in certain instances. If you wish to do any of these things, please contact the data protection officer at the Email addresses referenced above.

We keep your personal information to enable your continued use of Tiki Services, for as long as it is required in order to fulfil the relevant purposes described in this Privacy Notice, as may be required by law such as for tax and accounting purposes, or as otherwise communicated to you.

We comply with data protection laws of our various jurisdictions in handling and processing customer data. The UK Data Protection Act 2018, EU GDPR, PPCDA (Protecting Privacy and Consumer Data Act) and regional legislation in Canada require a legal basis for our use of personal information. Our basis varies depending on the specific purpose for which we use personal information. We rely on:

Performance of a contract when we provide you with products or services or communicate with you about them. This includes when we use your personal information to take and handle orders and process payments.

Our legitimate business interests and the interests of our users when we detect and prevent fraud and abuse in order to protect the security of our users, ourselves, or others.

Your consent when we ask for your consent to process your personal information for a specific purpose that we communicate to you. When you consent to our processing your personal information for a specified purpose, you may withdraw your consent at any time and we will stop processing of your data for that purpose.

Compliance with a legal obligation when we use your personal information to comply with laws. For instance, we collect bank account information for identity verification purposes.

These and other legal basis depending on the purpose for which we use personal information.

Under certain circumstances, by law you have the right to:

Request access to your personal information (commonly known as a "data subject access request"). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.

Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.

Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).

Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.

Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.

Request the transfer of your personal information to another party.

If you want to review, verify, correct or request erasure of your personal information, object to the processing of your personal data, or request that we transfer a copy of your personal information to another party, please contact our Data Protection Officer at support@tikibycapitalsage.com in writing.

You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.

In the limited circumstances where you may have provided your consent to the collection, processing and transfer of your personal information for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please contact our Data Protection Officer as stated above. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law. We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.

If you choose to use Tiki Services, your use and any dispute over privacy is subject to this Notice and our Terms of Use. If you have any concerns about privacy at Tiki, please contact us with a thorough description, and we will try to resolve it. You also have the right to contact your local Data Protection Authority.

Our business changes constantly, and our Privacy Notice will change also. You should check our websites frequently to see recent changes. If you do not agree with the revised content, you shall stop accessing Tiki immediately. When an updated version of the Privacy Policy is released, your continued access to Tiki means that you agree to the updated content and agree to abide by the updated Privacy Policy. Unless stated otherwise, our current Privacy Notice applies to all information that we have about you and your account.

Questions about this policy, or any request to exercise your rights over your personal information, should be sent to support@tikibycapitalsage.com.

CapitalSage Finance Limited, Lagos, Nigeria.