Mustard

Last updated: April 2026 - Effective date: Upon account creation or first use of the Mustard platform.

How we collect, use, protect, and handle your personal data.

Mustard Privacy Policy

This Privacy Policy describes how Mustard ('we', 'our', or 'us') collects, processes, stores, and shares personal data when you use the Mustard platform, website, and associated services. By accessing or using Mustard, you acknowledge that you have read and understood this policy.

Mustard is committed to protecting your privacy in compliance with the Nigerian Data Protection Regulation (NDPR), the General Data Protection Regulation (GDPR) where applicable, and all other applicable data protection laws.

1. Who We Are

Mustard is a technology company incorporated under the laws of the Federal Republic of Nigeria. We operate the Mustard platform, which provides access to payment infrastructure and financial services delivered by licensed third-party financial institutions. Mustard acts as a data controller with respect to the personal data you provide directly to us, and as a data processor in relation to data processed on behalf of our regulated partner institutions for the purpose of providing regulated financial services.

2. Data We Collect

2.1 Identity and Verification Data

  • Full legal name, date of birth, nationality
  • Government-issued identification documents (passport, national ID, driver's licence)
  • Biometric data collected during identity verification (facial recognition, liveness check)
  • Business registration documents, directors' details, and beneficial ownership information (for business accounts)

2.2 Contact and Account Data

  • Email address, phone number, residential address
  • Account credentials (email and encrypted password)
  • Notification preferences and communication settings

2.3 Transaction Data

  • Payment amounts, currency, and transaction dates
  • Sender and recipient account details
  • Transaction reference numbers and status history
  • Purpose of transfer, where required by applicable regulation

2.4 Technical and Usage Data

  • IP address, device type, browser type, and operating system
  • Session data, log data, and access timestamps
  • Cookies and similar tracking technologies (see Cookie Policy below)

3. How We Use Your Data

3.1 To Provide the Service

We process your data to operate your account, process transactions, issue virtual accounts, and facilitate settlements through our partner institutions. This processing is necessary for the performance of our contract with you.

3.2 For Compliance and Legal Obligations

We are required by applicable law and by our obligations to licensed partner institutions to conduct identity verification (KYC), business verification (KYB), anti-money laundering (AML) screening, sanctions screening, and transaction monitoring. This processing is a legal requirement and cannot be opted out of.

3.3 For Security and Fraud Prevention

We use your data to detect and prevent fraudulent activity, unauthorised account access, and suspicious transactions. This processing is in our legitimate interests and in the interests of all users of the platform.

3.4 For Communications

We use your contact information to send you transactional notifications (payment confirmations, status updates, security alerts) and, with your consent, product and marketing communications. You may opt out of marketing communications at any time.

4. Data Sharing

Mustard does not sell your personal data. We share your data only in the following circumstances:

  • With licensed partner financial institutions, as required to facilitate the financial services you access through our platform
  • With identity verification service providers, for the purpose of KYC/KYB compliance
  • With regulatory authorities, law enforcement, and governmental bodies, where required by applicable law or court order
  • With our technology infrastructure providers, under data processing agreements that require them to maintain appropriate security standards
  • In connection with a merger, acquisition, or sale of assets, subject to confidentiality obligations

5. Data Retention

We retain your personal data for as long as your account is active and for a minimum of seven (7) years after account closure, in compliance with applicable financial regulation and anti-money laundering requirements. Transaction data may be retained for longer periods where required by law.

6. Your Rights

Subject to applicable law, you have the following rights with respect to your personal data:

  • Right of access - to request a copy of the personal data we hold about you
  • Right to rectification - to request correction of inaccurate personal data
  • Right to erasure - to request deletion of your data, subject to legal retention obligations
  • Right to restrict processing - to request that we limit how we use your data
  • Right to data portability - to receive your data in a structured, machine-readable format
  • Right to object - to object to processing based on legitimate interests

Exercising your rights

To exercise any of these rights, contact us at compliance@mustard.trade. We will respond within 30 days.

7. Cookies

Mustard uses cookies and similar technologies to operate the platform, maintain your session, and analyse usage patterns. You can control non-essential cookies through your browser settings or our cookie preference centre. Disabling certain cookies may affect the functionality of the platform.

8. Security

We implement industry-standard technical and organisational security measures to protect your personal data, including encryption in transit and at rest, access controls, and regular security assessments. However, no system is entirely free from risk. You are responsible for maintaining the security of your account credentials.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via an in-platform notification at least 14 days before changes take effect. Continued use of the platform after the effective date constitutes acceptance of the updated policy.

10. Contact

For privacy-related queries, data subject requests, or complaints, contact our Data Protection Officer at:

Email: compliance@mustard.trade