01
Scope and responsibility
Vetsark Limited (“Vetsark”, “we”, “us” or “our”) is responsible for personal information processed through our websites, mobile applications, financing and agricultural services, customer support channels, and related products (together, the “Services”).
This policy applies to applicants, customers, website and app users, guarantors, business representatives, farmers, vendors, and other people whose information is provided to us. If you give us information about another person, you must have authority to do so and should direct them to this policy.
02
Information we collect
We collect information you provide, information created when you use the Services, and information received from authorised verification, financial, credit, public-record, business, and service partners.
Identity and verification information
What this includes: Full name, date of birth, gender, signature, Bank Verification Number (BVN), National Identification Number (NIN), Corporate Affairs Commission (CAC) or registration details, tax identifiers, government-issued identification, proof of address, next-of-kin and guarantor information.
Why we use it: To identify you, verify your eligibility, perform know-your-customer and anti-fraud checks, meet legal obligations, and protect our services.
Selfies, photographs and images
What this includes: Profile images, identity-document images, selfies, farm or business photographs, collateral photographs, and signatures you capture or upload.
Why we use it: To verify identity and liveness where applicable, document a farm, business or collateral, prevent impersonation, and maintain your account. If a verification service creates a facial template or other biometric result, we treat it as sensitive personal data and use it only with explicit consent or another lawful authorisation.
Location information
What this includes: Approximate or precise location, farm or business address, delivery or inspection location, and location metadata associated with a submission.
Why we use it: To confirm service availability, verify a farm or business, arrange visits or delivery, assess an application, prevent fraud, and comply with legal requirements. Device location is collected only after permission is requested. We do not collect precise location in the background unless that separate use is clearly disclosed and permitted.
Contact, profile and business details
What this includes: Telephone number, email address, residential and business address, occupation, business type, farm type and size, livestock or production details, employees, ownership, directors, references, guarantors, and communications with us.
Why we use it: To create and support your account, communicate with you, assess and provide services, conduct due diligence, and maintain business records. We do not access or upload your phone address book for lending or debt-recovery purposes.
Financial and loan information
What this includes: Bank account details, bank statements, transaction information, income, expenses, assets, liabilities, credit history, requested and approved amounts, purpose of financing, repayment schedule, repayment activity, arrears, collateral, guarantor details, and loan communications.
Why we use it: To assess affordability and creditworthiness, process and service financing, disburse funds, receive repayments, manage risk, prevent fraud, recover amounts lawfully due, report where legally permitted, and comply with financial-record obligations.
Device identifiers, push tokens and diagnostics
What this includes: Device or installation identifiers, push-notification token, device model, operating system and app version, IP address, language, time zone, browser type, activity logs, timestamps, crash reports, security events and performance diagnostics.
Why we use it: To operate and secure the service, remember your session, deliver requested notifications, troubleshoot faults, measure reliability, prevent abuse and maintain audit records. Push notifications can be disabled in your device settings.
Documents, audio and video
What this includes: Applications, agreements, bank statements, invoices, receipts, farm or company records, licences, certificates, identity documents, signatures, voice notes, customer-support recordings and video acknowledgements that you record, upload or send to us.
Why we use it: To review an application, verify information, execute and evidence agreements, provide support, resolve disputes, prevent fraud and comply with legal requirements. Camera and microphone access is requested only when you choose a capture or recording feature.
Please provide only information that is accurate and necessary. You may decline optional device permissions, but a feature that depends on that permission—such as capturing a photograph, recording a video, confirming a location, or receiving a push notification—may not work.
03
How we use information
Depending on the Service you use, we process personal information to:
- register, authenticate and manage accounts;
- verify identity, business ownership and submitted information;
- review applications and assess eligibility, affordability and credit risk;
- prepare, sign, administer and enforce agreements;
- disburse financing, collect repayments and reconcile transactions;
- arrange farm visits, input delivery and service support;
- send service, security, repayment and application notifications;
- detect fraud, misuse, security incidents and prohibited activity;
- improve reliability, diagnose faults and develop our Services;
- respond to requests, complaints, disputes and legal claims;
- keep required accounting, audit and regulatory records; and
- send marketing only where permitted, with an option to unsubscribe.
Credit assessment and human review
We may use rules, risk models, or scores to assist with identity, fraud, eligibility, affordability, and credit assessments. When a decision has a legal or similarly significant effect and is based solely on automated processing, we will provide the safeguards required by applicable law, including a way to ask for human review, express your view, and contest the decision.
04
Legal bases and consent
We process personal information only where we have a lawful basis under the Nigeria Data Protection Act 2023 and other applicable laws. The basis depends on the purpose and may be:
- Contract: to take steps you request before a contract or to provide and administer a Service.
- Legal obligation: for identity checks, financial records, regulatory reporting, fraud prevention, and lawful requests.
- Legitimate interests: to secure and improve the Services, manage risk, support customers, and protect legal rights, where those interests are not overridden by your rights.
- Consent: for optional device permissions, certain sensitive-data processing, direct marketing, or another purpose clearly presented to you.
- Legal claims or substantial public interest: where applicable to sensitive personal data and permitted by law.
Where we rely on consent, we request a clear, specific choice before collection or use. You may withdraw consent at any time through the relevant app or device setting, an unsubscribe link, or by contacting us. Withdrawal does not affect processing that was lawful before withdrawal, and we may continue processing where another lawful basis requires or permits it.
06
Retention and deletion
We keep personal information only as long as needed for the stated purposes, our relationship with you, and applicable legal, accounting, fraud-prevention, dispute, and regulatory duties. Our usual retention approach is:
- Account and service records: while the account or relationship is active.
- Identity, due-diligence, agreement and transaction records: at least 5 years after the relationship ends or the transaction is completed, and longer where another applicable rule, regulator, litigation hold, or lawful request requires it.
- Loan and repayment records: for the life of the loan and the legally required recordkeeping period afterward.
- Unfinished applications and temporary captures: deleted or de-identified when no longer needed, generally within 12 months, unless needed for fraud prevention, a complaint, or law.
- Support, security and diagnostic records: generally up to 24 months, unless an incident, dispute, or legal duty requires longer.
- Marketing preferences: until consent is withdrawn; we may retain a minimal suppression record so we honour an opt-out.
- Backups: removed on the ordinary backup rotation or securely isolated until deletion is possible.
When a retention period ends, we delete, destroy, anonymise, or securely isolate the information. Anonymised information that can no longer identify a person may be kept for statistics and service improvement.
Want to delete your account?
Follow the in-app steps or read our deletion instructions.
07
Your privacy rights
Subject to applicable law and limited exceptions, you may ask us to:
- confirm whether we process your information and provide access to it;
- correct incomplete or inaccurate information;
- delete information that we no longer have a lawful reason to keep;
- restrict or object to certain processing;
- provide portable information where the right applies;
- withdraw consent without disadvantage for optional processing;
- object to direct marketing at any time; and
- request human review of a qualifying automated decision.
To protect you, we may verify your identity before completing a request. We will respond within the period required by applicable law. We may retain information despite a deletion request where needed to complete a transaction, meet a legal obligation, prevent fraud, resolve disputes, or establish or defend legal claims. You may also complain to the Nigeria Data Protection Commission or another competent authority.
08
Security and international transfers
We use administrative, technical, and physical safeguards designed to protect personal information, including access controls, authentication, encryption where appropriate, logging, staff and vendor controls, backups, and incident-response procedures. No storage or transmission method is completely secure; please keep your credentials confidential and report suspected misuse.
Our providers may process information outside Nigeria. Where a cross-border transfer occurs, we use a transfer mechanism and safeguards recognised by applicable law, such as an adequacy decision, approved contractual protections, consent where valid, or another lawful exception.
09
Children, changes and contact
Our financing Services are not intended for people under 18. We do not knowingly open financing accounts for children. If you believe a child has provided personal information without proper authority, please contact us.
We may update this policy when our Services, processors, or legal obligations change. We will post the revised policy here, change the “Last updated” date, and provide additional notice where a material change or applicable law requires it.
Privacy requests
Contact Vetsark Limited
Email us with the subject “Privacy Request”. Describe your request and the Vetsark service or account involved. Please do not email your BVN, NIN, password, bank statement, or identity document unless we provide a secure channel and ask you to do so.
info@vetsark.com