Back to Home

Privacy Policy

We Value Your Privacy

Fisi treats personal information as private and confidential, dedicated to protecting privacy and providing security. The policy describes what personal data is collected, its use, and protection methods.

This policy (with Terms and Conditions) outlines how personal data collection and processing occurs. By visiting www.fisi.ng and Fisi touchpoints, you accept and consent to the described practices.

Information We Collect and Use

The company gathers information from multiple sources including website visits, applications, identification documents, resumes, manager interactions, third parties (credit bureaus, payment gateways, financial institutions), and electronic communications containing details like name, address, passport information, identification numbers, biometric data, telephone numbers, occupation, and assets.

Information may come from family members, solicitors, friends, employers, public social media pages, government agencies, regulators, and credit agencies. Additional data collected includes video footage from branches, telephone conversations with contact centers, and geographic information from website visits.

Non-Personal Information Collected by Us

The organization collects certain information during website visits to provide optimal service, grant access to site sections, and research user behavior for service improvement. Information is not disclosed outside the organization except as described in this policy.

Protocol Data

Website visits result in collection of personal data transmitted by servers:

  • IP address
  • Date and time of request
  • Time zone difference from GMT
  • Content of request (specific site)
  • Access status/HTTP status code
  • Volume of data transmitted
  • Website origin of request
  • Browser software (language and version)
  • Operating system and interface
  • Visitor country of origin

Cookies

Cookies are small text files stored on computers or mobile devices during website visits. They memorize preferences, tailor experiences, and help analyze traffic.

Fisi uses cookies to improve user experience. Some cookies are essential for accessing certain site areas; others are analytics cookies helping understand site usage and discover useful content.

Use of Your Personal Information

Personal data collection and use follows principles stating data should be processed fairly, lawfully, and transparently; obtained for specified lawful purposes; adequate, relevant, and necessary; accurate and current; not retained longer than necessary; processed per data subject rights; and kept safe from unauthorized processing and accidental loss.

Personal information provided by users is used with consent or under these instances:

  • Processing required for contractual obligation fulfillment
  • Processing required for legal/regulatory compliance
  • Processing required to protect vital interests
  • Processing required for significant public interest activities
  • Processing required for Fisi or third-party legitimate interests

Personal information is used for:

  • Updating and enhancing records
  • Executing user instructions
  • Establishing identity and assessing applications
  • Pricing and designing products and services
  • Administering products and services
  • Managing relationships
  • Managing risks
  • Identifying and investigating illegal activity (fraud)
  • Contacting regarding suspected fraud or significant events
  • Conducting and improving businesses
  • Reviewing credit or loan eligibility
  • Preventing money laundering or terrorism financing
  • Complying with legal obligations and assisting authorities
  • Informing about potentially interesting products or services
  • Processing job applications

Automated Processing

Automated systems and software help reach decisions about users, including credit decisions, security checks, fraud and money laundering reviews, and processing applications. This processing occurs under lawful basis; users can contact the company to request human review if inaccuracies are detected.

Information We Share

Information is shared with the following, to the extent permitted by law:

  • Fisi branches
  • Regulators, supervisors, government agencies, courts (when legally required)
  • External auditors
  • Fisi staff
  • Credit agencies
  • Correspondent banks
  • Strategic partners/service providers (for improving and providing products and services; personal information is not shared for third-party marketing)

Information may be disclosed if necessary to enforce terms and conditions or protect operations or users. In reorganizations, mergers, or sales, personal information may be transferred to relevant third parties.

Customer and website usage information is not shared with third parties for marketing. Information about website usage is not disclosed except in specific cases and not to unaffiliated third parties for marketing unless explicit permission is given.

How We Protect Your Information

Appropriate technical and organizational measures prevent loss, unauthorized access, misuse, modification, or disclosure. This includes encryption, access controls, and other security forms ensuring data protection. All parties, including staff and third-party data processors, must comply with relevant policies and guidelines ensuring confidentiality and information protection during use, storage, and transmission. Security controls and processes are regularly updated to meet and exceed industry standards.

Users with passwords granting access to specific site areas are responsible for confidentiality. Passwords and authentication details (like token-generated codes) should not be shared.

Where We Store Your Information

Personal information is stored on secure servers, secure physical locations, and cloud infrastructure (where applicable). Collected data may be transferred to and stored outside Nigeria. When information transfers to another location, necessary steps ensure secure handling in accordance with this policy.

How Long We Store Your Information

Data retention occurs as long as necessary for collection purposes and is determined by legal, regulatory, administrative, or operational requirements. Only information allowing legal and regulatory compliance, meeting business and audit requirements, responding to complaints and queries, or addressing disputes and claims is retained. Unneeded data is securely destroyed when identified as no longer necessary.

Your Rights

Available rights include:

  • Accessing personal information (by emailing info@fisi.ng)
  • Rectifying inaccurate or incomplete information
  • Withdrawing consent for processing
  • Lodging complaints with NDPR
  • Restricting or objecting to personal data processing
  • Requesting personal data in common electronic format or third-party transmission
  • Requesting information erasure

Applicability of This Privacy Policy

Fisi refers to Fisi and its worldwide branches.

Third-Party Sites and Services

Fisi websites, products, applications, and services contain links to third-party websites, products, and services. Information collected by third parties is governed by their privacy practices; Fisi is not liable for confidentiality or privacy breaches on such sites. Users are encouraged to learn about third-party privacy practices.

Social Media Platforms

Fisi may interact with registered users of various social media platforms including Facebook, Twitter, Google+, LinkedIn, and Instagram. Content posted to such platforms and personal information made available is subject to applicable platform terms and privacy policies. Users are recommended to review this information carefully.

Maintaining Accurate Information

Keeping account information accurate and current is important. Users have access through application portals. Discovered inaccuracies should be promptly reported via email or Contact Centre with required documentary evidence enabling necessary updates or changes.

Privacy of Children

"Fisi respects children's privacy. The organization does not knowingly collect names, email addresses, or personally identifiable information from children. Marketing to children is not conducted, nor are accounts opened for those under 18."

Promotional Messages

Fisi may contact users with potentially interesting products or services. Users can opt out anytime by emailing info@fisi.ng.

Privacy Policy Changes

This policy may be revised ad-hoc reflecting legal, regulatory, and operating environments; revised versions become automatically applicable. Revisions are posted on this page and become effective upon posting. Users are encouraged to check periodically for updates.

Contact

Questions, comments, and requests regarding this privacy policy should be addressed to:

Email: dpo@fisi.ng, info@fisi.ng

For contacting the Data Protection Officer, address requests to "The Data Protection Officer" at Seth House, 5 Stella Sholanke Street, Ajao Estate Muritala Muhammed International Airport Road, Lagos.

Email: dpo@fisi.ng