1. Who we are
Carcelerate Nigeria Limited, RC 1892044, of 9 Kudirat Abiola Way, Oregun, Ikeja, Lagos. We are the data controller for everything described here. Our data protection officer can be reached on 0700 227 2000 or at [email protected].
2. What we collect
Identity: your name, date of birth, photograph, BVN, NIN and driver's licence.
Financial: three months of bank or mobile money statements, your bank account details, your credit bureau record, and every payment you make to us.
Documents: the photographs you send us, and the results of the automated checks run on them.
Location: where the vehicle is, while it is financed. Positions are kept for 90 days and then deleted.
Guarantors: the names and phone numbers you give us, and their answers to us.
3. Why we collect it, and our lawful basis
To decide on your application — this is necessary to take steps at your request before entering a contract.
To confirm your identity and to prevent fraud — this is a legal obligation and our legitimate interest.
To collect payment — this is necessary to perform the contract.
To locate the vehicle, which is our asset until the last payment — this is our legitimate interest, and you consent to it separately before we begin.
To contact your guarantors if you fall behind — this is our legitimate interest, and you consent to it separately.
4. Who we share it with
CRC Credit Bureau, to check your credit record and to report your payment behaviour.
NIBSS and NIMC, to confirm your BVN and NIN.
Paystack, to set up and collect your monthly payment.
Our insurer, to cover the vehicle.
Our tracking provider, which holds the vehicle's positions on our behalf.
Your two guarantors, who are told only that you have fallen behind and are never shown your figures.
We do not sell your data. We do not share it for marketing. Ever.
5. How long we keep it
Your application and payment record: seven years after the lease ends, which is the retention period we are subject to as a lender.
Vehicle positions: 90 days.
An abandoned draft application: 30 days, then deleted.
Your face photograph and identity documents: seven years after the lease ends.
6. Your rights under the NDPR
You may ask for a copy of everything we hold about you. We answer within 30 days and we do not charge for it.
You may ask us to correct anything that is wrong.
You may ask us to delete your data, and we will, except where we are required by law to keep it.
You may withdraw a consent you gave — for tracking, or for contacting your guarantors — but doing so may mean we cannot continue the lease. We will tell you plainly what the consequence is before you decide.
You may object to a decision made about you by automated means and ask a person to look at it instead.
7. How to use those rights
Call 0700 227 2000, message us on WhatsApp on 0803 900 4417, email [email protected], or come to the office. You do not need to write a formal letter and you do not need a lawyer.
8. Complaining to the regulator
If you are not satisfied with how we have handled your data, you may complain to the Nigeria Data Protection Commission. You do not have to come to us first, although we would rather you did so we can fix it.
9. Changes to this notice
If we change how we use your data we will tell you by text message before the change takes effect, not by quietly updating this page.