Privacy Policy

This Privacy Policy explains how Ragotech Enterprise Solutions (“we”, “us”, or “our”) collects, uses, and protects information when you use the Rago Core Banking System (Rago CBS).

1. Information We Collect

We may collect the following types of information:

• Account Information – Staff identification details, name, email address, branch, role, and other information required for system access.
• Authentication Data – Securely stored credentials, one-time codes, and related security records.
• Device Information – A device identifier (browser fingerprint), device description, IP address, and browser information. This is used only to detect new or unusual devices and protect accounts.
• Usage & Log Data – Login activity, session records, and audit logs needed for security and compliance.

2. How We Use Your Information

We use the information we collect to:

• Authenticate users and control system access
• Detect and prevent unauthorized or suspicious activity
• Send important security notifications
• Maintain audit trails and meet regulatory requirements
• Improve the security and reliability of the system

3. Device Identification

When you log in, we may create a unique device identifier based on your browser and device characteristics. This helps us:

• Recognize devices you have previously used
• Require additional verification when a new device is detected
• Reduce the risk of unauthorized access

This information is collected only after you accept this Privacy Policy and is used exclusively for security purposes. It is not used for marketing or shared with third parties for commercial purposes.

4. Legal Basis & Compliance

We process personal data in accordance with applicable data protection laws in Nigeria, including the Nigeria Data Protection Act. Processing is based on:

• Performance of our service obligations
• Legitimate interests in maintaining system security
• Consent, where required (for example, device identification)

5. Data Sharing

We do not sell personal data. Information may be shared only with:

• Authorized internal personnel who need it to perform their duties
• Service providers who support system operations (under confidentiality obligations)
• Regulatory or law enforcement authorities when required by law

6. Data Retention

We keep personal data only for as long as necessary for the purposes described in this policy or as required by applicable laws and regulations. Security and audit records are retained for appropriate compliance periods.

7. Your Rights

Depending on applicable law, you may have the right to:

• Request access to your personal data
• Request correction of inaccurate information
• Request deletion of data (subject to legal retention requirements)
• Object to or restrict certain types of processing
• Withdraw consent where processing is based on consent

To exercise these rights, please contact your system administrator or the designated Data Protection Officer.

8. Security Measures

We apply appropriate technical and organizational measures to protect personal data. These include secure credential storage, multi-factor authentication, device verification, session controls, and regular security reviews.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page with an updated revision date. Continued use of the system after changes means you accept the revised policy.

10. Contact

If you have questions about this Privacy Policy or how your information is handled, please contact your system administrator or the Data Protection Officer through the official support channels.