NDPA Compliance

Nigeria Data Protection Act (NDPA) Compliance Policy

Last Updated: August 2, 2025

At BlockEX.Trade, we are committed to protecting the privacy and personal data of our users in full compliance with the Nigeria Data Protection Act (NDPA), 2023. This page outlines our responsibilities, your rights, and how we process your personal information when you use our P2P crypto trading platform, and other services we offer.

1. Our Commitment to Data Privacy

We recognize the importance of your personal data. As a Data Controller under the NDPA, we are responsible for collecting, using, storing, and safeguarding your information in a lawful, fair, and transparent manner.

2. What Data We Collect

When you use our platform, we may collect the following personal data:

  • Full name
  • Email address
  • Phone number
  • BVN or government-issued ID
  • Bank account details (for fiat transfers)
  • Transaction history
  • Device/IP address and geolocation data
  • Any additional KYC documentation submitted

3. Purpose of Data Collection

We collect personal data for the following lawful purposes:

  • To verify your identity and comply with KYC/AML regulations
  • To facilitate secure P2P crypto trading
  • To detect and prevent fraud and other illegal activities
  • To communicate with you about your account and trades
  • To meet regulatory reporting obligations
  • To improve our platform functionality and user experience

4. Legal Basis for Processing

Our data processing activities are based on the following NDPA-accepted grounds:

  • Consent (e.g., newsletter subscription, marketing preferences)
  • Legal obligation (e.g., AML/KYC compliance)
  • Contractual necessity (e.g., user account management)
  • Legitimate interest (e.g., fraud detection, platform security)

5. Your Rights as a Data Subject

Under the NDPA, you have the following rights:

✅Right to access your personal data
✏️Right to rectification of inaccurate data
🗑️Right to erasure ('right to be forgotten')
🛑Right to restrict processing
🔄Right to data portability
❌Right to object to processing
📩Right to lodge a complaint with NDPC

You may exercise any of these rights by contacting our Data Protection Officer (DPO) below.

6. Data Security Measures

We implement industry-standard technical and organizational security measures, including:

  • End-to-end data encryption
  • Two-factor authentication (2FA)
  • Role-based access control for staff
  • Regular audits and vulnerability assessments
  • Encrypted storage for sensitive user data

7. Data Retention Policy

We retain your personal data only for as long as necessary to fulfill the purposes outlined above or as required by applicable laws (e.g., for AML/financial audit requirements). After this period, data is securely deleted or anonymized.

8. Cross-Border Data Transfers

Where applicable, we ensure that any international transfer of your personal data meets the NDPA standards, and adequate safeguards (such as Data Processing Agreements) are in place.

9. Contact Our Data Protection Officer (DPO)

If you have any questions, concerns, or requests related to your personal data or this policy, please contact our DPO:

Data Protection Officer (DPO)

hello@blockex.trade
+234 812 249 49350
Lagos, Nigeria

10. Regulatory Authority

If you believe your data protection rights have been violated, you may lodge a complaint with:

Nigeria Data Protection Commission (NDPC)

https://ndpc.gov.ng

11. Updates to this Policy

We may revise this policy from time to time to reflect changes in law or platform operations. Any changes will be posted on this page with an updated revision date.