Privacy Policy

Privacy Policy

We are committed to protecting your privacy and handling your personal data in a transparent, lawful, and secure manner in compliance with applicable data protection regulations.

Last updated: 07/01/2026

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use our website, mobile applications, and related services. We are committed to protecting your privacy and handling your personal data in a transparent, lawful, and secure manner.

By accessing or using our services, you agree to the practices described in this Privacy Policy.

1. Scope of This Policy

This Privacy Policy applies to all users who access or use our services, including our website, mobile applications, application programming interfaces, and customer support channels.

This policy covers personal data collected during registration, identity verification, transactions, communications, and general use of our platform.

2. Regulatory Context

We operate in compliance with applicable data protection and privacy laws, including but not limited to:

  • Nigeria Data Protection Regulation (NDPR)
  • Nigeria Data Protection Act where applicable
  • Applicable data protection laws in other African jurisdictions where our services are offered
  • International best practices for data protection and security

Where local laws impose additional requirements, we comply with those requirements within the relevant jurisdiction.

3. Information We Collect

3.1 Information You Provide Directly

We collect personal information you provide when you:

  • Create an account
  • Complete identity verification
  • Add bank account details
  • Initiate transactions
  • Contact customer support
  • Participate in promotions or referrals

This may include:

  • Full name
  • Email address
  • Phone number
  • Date of birth
  • Residential address
  • Government issued identification documents
  • Selfie or facial verification images
  • Bank account details provided by you
  • Wallet addresses you submit for transactions
  • Communications sent to our support team

3.2 Information Collected Automatically

When you use our platform, we may automatically collect:

  • Device information such as device type, operating system, and application version
  • IP address and general location data
  • Log data including access times, pages viewed, and actions performed
  • Transaction metadata such as timestamps, status, and reference identifiers

This information is used to ensure platform security, prevent fraud, and improve our services.

3.3 Blockchain and Transaction Data

Our platform facilitates crypto to fiat and fiat to crypto transactions but does not hold or custody user funds.

We may process and store:

  • Public blockchain transaction hashes
  • Wallet addresses involved in transactions
  • Confirmation status and network data
  • Fiat transaction references related to payouts or payments

Blockchain data is publicly available by nature and is processed solely for transaction verification, compliance, and record keeping.

4. How We Use Your Information

We use personal data for the following purposes:

  • To create and manage user accounts
  • To verify identity and comply with KYC and AML obligations
  • To process transactions and payouts
  • To determine applicable rates, thresholds, and transaction eligibility
  • To prevent fraud, abuse, and unauthorized access
  • To comply with legal and regulatory obligations
  • To communicate important updates, notifications, and service messages
  • To provide customer support and resolve disputes
  • To improve platform performance, reliability, and user experience

We do not sell or rent your personal data to third parties.

5. Legal Basis for Processing

We process personal data based on one or more of the following legal grounds:

  • Your consent, where explicitly provided
  • Performance of a contract when providing our services to you
  • Compliance with legal and regulatory obligations
  • Legitimate interests such as fraud prevention, security monitoring, and service improvement, provided such interests do not override your rights

6. Identity Verification and Compliance

To comply with financial regulations and prevent illicit activity, we are required to verify user identities before enabling certain services.

Identity verification data is used strictly for compliance, risk management, and security purposes. Access to this data is restricted to authorized personnel and trusted verification partners.

Failure to complete or pass identity verification may result in restricted access to some or all services.

7. Risk Monitoring and Fraud Prevention

We use automated and manual systems to detect suspicious activity, prevent fraud, and protect the platform.

This may include:

  • Transaction monitoring
  • Wallet risk assessments using reputable third party blockchain intelligence providers
  • Behavioral and device level analysis
  • Manual reviews by compliance personnel

These measures are designed to protect users, comply with regulations, and maintain platform integrity.

8. Data Sharing and Disclosure

We may share personal data only in the following circumstances:

  • With trusted service providers who perform services on our behalf, such as identity verification, payment processing, cloud infrastructure, analytics, and notifications
  • With financial institutions and payment partners for transaction processing
  • With blockchain intelligence and compliance providers for risk analysis
  • When required by law, regulation, court order, or lawful government request
  • To protect our legal rights, users, or the public from harm or illegal activity

All third parties are required to protect your data and use it only for specified purposes.

9. International Data Transfers

Your data may be processed or stored outside your country of residence where our service providers or infrastructure are located.

When transferring data internationally, we take reasonable steps to ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

10. Data Retention

We retain personal data only for as long as necessary to:

  • Provide our services
  • Comply with legal and regulatory requirements
  • Resolve disputes and enforce agreements
  • Maintain audit and compliance records

Retention periods may vary depending on the type of data and applicable legal obligations. When data is no longer required, it is securely deleted or anonymized.

11. Data Security

We implement technical, administrative, and organizational measures designed to protect personal data, including:

  • Encryption of sensitive data
  • Access controls and role based permissions
  • Secure infrastructure and network protections
  • Audit logs and monitoring
  • Regular security testing and reviews

While no system is completely secure, we take reasonable steps to safeguard your information against unauthorized access, loss, or misuse.

12. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access personal data we hold about you
  • Request correction of inaccurate or incomplete data
  • Request deletion of personal data, subject to legal requirements
  • Object to or restrict certain processing activities
  • Withdraw consent where processing is based on consent
  • Request data portability where applicable

Requests can be made through our support channels and will be handled in accordance with applicable laws.

13. Cookies and Tracking Technologies

We may use cookies and similar technologies to enhance functionality, analyze usage, and improve user experience.

You can manage cookie preferences through your device or browser settings, although disabling certain cookies may affect platform functionality.

14. Communications and Notifications

We may send you service related communications such as account updates, security alerts, transaction notifications, and compliance messages.

Marketing or promotional communications, where offered, will be subject to your preferences and applicable consent requirements.

15. Children's Privacy

Our services are not intended for individuals under the age required by applicable law. We do not knowingly collect personal data from minors.

If we become aware that personal data of a minor has been collected without proper authorization, we will take steps to delete it.

16. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or practices.

Updated versions will be made available on our platform, and significant changes may be communicated directly to users.

Continued use of our services after changes take effect constitutes acceptance of the updated policy.

17. Contact and Complaints

If you have questions, concerns, or complaints about this Privacy Policy or how your data is handled, you may contact us through our official support channels available on our platform.

Where applicable, you also have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

Download the ZealFlip App

Use Your Crypto & Gift Cards Like Cash

Convert your crypto and gift cards to local currency and get paid directly to your bank fast, transparent, and hassle-free.

Special Rate

Only coins more than 50k USD qualify for this rate