Legal

Privacy Policy

This Privacy Policy explains how Urgent2k collects, uses, stores, and protects personal data for emergency support, contributions, and payouts.

Effective date: 1 February 2026 | Last updated: 5 February 2026

1. Data Controller

Urgent2k is the data controller for personal data processed through the platform. Contact our Data Protection Officer at dpo@urgent2k.com.

2. Personal Data We Collect

Identity data
  • Full name
  • National Identification Number (NIN)
  • Phone number
  • Email address
  • Date of birth when returned by identity verification
Financial data
  • Bank name and account number
  • Transaction records for contributions and payouts
  • Payment reference numbers
Usage and device data
  • Device type, OS, browser
  • Device fingerprint for fraud prevention
  • IP address and approximate location
  • App interaction logs and timestamps
Request context
  • Assistance request status and timestamps
  • Payout status and provider references

3. Why We Use Data

  • Identity verification - confirming identity via NIN checks.
  • Eligibility enforcement - checking the 30-day support cooldown and duplicate identities.
  • Payout execution - sending NGN 2,000 support to a saved bank account.
  • Fraud detection - using device and behavioural signals to block abuse.
  • Customer support - investigating and resolving issues.
  • Legal compliance - responding to lawful requests from regulators or law enforcement.

4. Who We Share Data With

Payment partners

We share the minimum account details needed by Flutterwave and partner banks to process payments and payouts.

Identity providers

NIN data is verified through approved identity verification providers. We do not store raw biometric data.

Infrastructure

Cloud hosting, database, and email providers process data on our behalf under data processing agreements.

Legal authorities

We may disclose data when required by court order, subpoena, or regulatory directive under Nigerian law.

5. Retention And Security

  • Active account data is retained while the account is active.
  • Deleted account data is anonymised or deleted within 90 days unless legal retention is required.
  • Financial records may be retained for at least 6 years.
  • Sensitive data is encrypted in transit and at rest. NIN values are stored as hashes where possible.

6. Your Rights

You may request access, correction, deletion, restriction, portability, objection, consent removal, or human review of automated decisions. Email dpo@urgent2k.com.

More policies

Understand how Urgent2k operates responsibly.