Privacy Policy

Who is responsible for your information

Project Grow is responsible for deciding why and how personal information is used for the services described here. Data-protection questions and requests may be sent to contact@projectgrow.ng.

Information we may collect

Depending on the service you use, we may collect account and contact details; identity and organisation information; farm, production, market and financial information; application answers and supporting documents; communications, consent records, decisions and audit history; and technical security records such as timestamps and device or access information.

Do not upload passwords, card PINs, unrelated medical records or information that the application does not request.

Why we use it

• Create and secure your account.
• Assess eligibility, readiness and credit applications.
• Request corrections, communicate decisions and support approved activities.
• Prevent fraud, protect the service and maintain an audit trail.
• Meet legal, regulatory, safeguarding, monitoring and reporting duties.
• Produce aggregated or de-identified project statistics where appropriate.

Legal grounds

Processing may rely on your consent, steps taken at your request before entering an arrangement, performance of an arrangement, compliance with law, a task in the public interest, or a legitimate interest that does not override your rights. Where we ask for consent, you may withdraw it for future processing, although another lawful ground or a record-keeping duty may still apply.

Who may receive information

Access is limited to authorised Project Grow staff and approved service providers. Relevant application information may be shared with participating financial institutions, insurers, technical assessors, project delivery partners, regulators, auditors or law-enforcement authorities where necessary and lawful. Each recipient receives only the information required for its role.

International hosting and safeguards

Approved technology providers may process or store information outside Nigeria. Project Grow applies appropriate contractual, security and data-transfer safeguards and reviews higher-risk processing before it is introduced.

Retention and deletion

Information is retained only for an operational, legal, audit, dispute or reporting period that applies to the record. Account, application, decision and finance records may need to be kept after a case closes. Records that are no longer required are securely deleted or anonymised in accordance with the applicable retention schedule.

Security and incidents

Controls include verified accounts, row-level permissions, private document storage, encrypted connections and access logging. No internet service is risk-free. Suspected unauthorised access should be reported immediately to the contact below so it can be assessed, contained and notified where required.

Your rights

Subject to applicable law, you may ask for access, correction, deletion, restriction, objection, portability, withdrawal of consent or review of a decision that significantly affects you. You may also complain to Project Grow or the Nigeria Data Protection Commission. We may need to verify your identity before acting on a request.

Children and third-party information

The credit portal is intended for adults and authorised organisation representatives. An aggregator or other person uploading information about farmers, workers or representatives must have authority and provide the required privacy notice. Children’s information must not be entered unless an approved service expressly requires it and appropriate consent and safeguards are in place.