Licensed by the Central Bank of Nigeria as a Payment Solution Service Provider

Talk to Sales

Privacy Policy

Last updated: November 11, 2025

Introduction

This privacy policy describes the information we collect from you when you use our website. In collecting this information, we are acting as a data controller and, by law, we are required to provide you with information about us, about why and how we use your data, and about the rights you have over your data.

Acceptance of the Policy

You accept this Privacy Policy by using our website (referred to herein as the "Site"), placing an order for Services with us or joining our email list. IF YOU DO NOT AGREE TO THE TERMS OF THIS PRIVACY POLICY, PLEASE STOP USING THE SERVICES IMMEDIATELY.

Who We Are

Ercas Integrated Solutions Limited ("Ercas" "the Company", "We", "Us" or "Our") offers an online payment gateway that makes it easy for Merchants to accept electronic payments from Customers. Ercas values the Privacy of Merchants who use our website and all related sites, applications, services and tools (collectively, our "Services").

Our Role

The services are primarily intended for and provided to businesses and other organizations ("Merchants"), and not individual consumers. Thus, we generally process personal data at the direction of and on behalf of Merchants. When we do, we do so as a Service Provider or a "data processor" to those Merchants, but we do not control and are not responsible for the privacy practices of those Merchants.

Merchant Customers

If you are a Customer of an Ercas Merchant, you should read that Merchant's Privacy Policy and direct any privacy policy questions to that Merchant.

Data Protection Officer

We have a qualified Data Protection Officer(s) (DPO) responsible for overseeing the Company's data protection strategy and implementation to ensure compliance with the NDPA requirements. The DPO is knowledgeable on data privacy and protection principles and is familiar with the provisions of the NDPA.

How We Use Your Information

When You Use Our Website

When you use our website to browse our products and services and view the information we make available, a number of cookies are used by us and by third parties to allow the website to function, to collect useful information about visitors and to help to make your user experience better. Some of the cookies we use are strictly necessary for our website to function, and we do not ask for your consent to place these on your computer.

Using Your Personal Information

We use your information in order to provide you with the Service and to comply with our legal requirements and internal guidelines. This means that we will use the information to set up your account, provide you with support regarding the Service, communicate with you for updates, marketing offers or concerns you may have and conduct statistical and analytical research to improve the Service.

Data Confidentiality Rights

Your information is regarded as confidential and will not be divulged to any third party except under legal and/or regulatory conditions. You have the right to request sight of, and copies of any and all information we keep on you, if such requests are made in compliance with the Freedom of Information Act and other relevant enactments.

Disclosure of Information

We may disclose your personal information with agencies for fraud prevention and law enforcement, or other companies/entities where you have not objected to such sharing. We may also disclose your information where we have a duty or a right to disclose in terms of law or industry codes, or where we believe it is necessary to protect our rights.

Deleting Personal Information

You may request that we delete your personal information, and we shall attempt to accommodate such requests. However, we may retain and use personal information for such periods of time as required or permitted by law or best business practices.

Data Retention

We will retain your personal data for as long as is required to provide our services to you and comply with our legal and statutory obligations. Even after discontinuance of our services, we may retain certain personal data and transaction data to comply with legal and statutory obligations. All personal data shall be destroyed by us where possible.

Security

We have implemented technical, physical and administrative safeguards designed to protect personal information against loss and against unauthorized access, use, and disclosure. Passwords are stored on our server in encrypted form. Unless this Privacy Policy states otherwise, our employees are required to keep the information set out here confidential.

Transfer of Personal Data

As part of our service provision, we may rely on third-party servers, databases co-located with hosting providers, resident in foreign jurisdictions, which constitutes the transfer of your personal data to computers or servers in foreign countries. We take steps designed to ensure that the data we collect under this Privacy Policy is processed and protected according to the provisions of this Policy and applicable law wherever the data is located.

Your Rights as a Data Subject

By law, you can ask us what information we hold about you, and you can ask us to correct it if it is inaccurate. If we have asked for your consent to process your personal data, you may withdraw that consent at any time. You have the right to request a copy of your information in a machine-readable format, request erasure of your data, and ask us to stop using your information if you believe we are not doing so lawfully.

Your Right To Complain

If you have a complaint about our use of your information, we would prefer you to contact us directly in the first instance so that we can address your complaint.

Contact ERCAS

  • Phone: +2348132515543
  • Email: support@ercas.com.ng
  • Address: House 5, Plot 265, S.E. Asebe Street, Dantata Estate, Opposite Emadeb Energy Filling Station, Beside Ga247-Kingfem Plaza, Mabushi, Abuja

Contact NDPC

Nigerian Data Protection Commission (NDPC)

Address: 12 Clement Isong Street, Asokoro, Abuja, Nigeria

Website: https://ndpc.gov.ng/

Governing Law

This Privacy Policy is made pursuant to the Nigeria Data Protection Act (2023) and other relevant Nigerian laws, regulations or international conventions applicable to Nigeria. Where any provision of this Policy is deemed inconsistent with a law, regulation or convention, such provision shall be subject to the overriding law, regulation or convention.

Updates to This Privacy Policy

We regularly review and, if appropriate, update this privacy policy from time to time, and as our services and use of personal data evolves. If we want to make use of your personal data in a way that we have not previously identified, we will contact you to provide information about this and, if necessary, to ask for your consent. This policy was last reviewed on 11th November 2025.