Cookies Policy

Small files, stated plainly.

What we set in your browser, why we set it, how long it lasts and how to say no. Our financial service runs inside WhatsApp — this policy is about our website.

Effective 27 July 2026 · Version 1.0 · Issued under the Nigeria Data Protection Act 2023

01About this policy

This Cookies Policy explains how CredaFi Limited ("CredaFi", "we", "us") uses cookies and similar technologies on usecredafi.com.ng and any other CredaFi website or web experience that links to this policy. It forms part of, and should be read with, our Privacy Policy.

CredaFi's core financial service is delivered inside WhatsApp and does not rely on browser cookies. This policy therefore concerns our website and marketing pages.

02What cookies and similar technologies are

  • Cookies are small text files placed on your device by a website to store information such as a session identifier or a preference.
  • Local storage and session storage hold data in your browser, for example to remember that you dismissed a banner or to keep an in-progress chat session on the page.
  • Pixels, tags and SDKs are small pieces of code that report events such as a page view or a form submission.
  • First-party technologies are set by CredaFi. Third-party technologies are set by a provider we use, such as an analytics or advertising platform.

03Categories of cookies we use

CategoryPurpose and consent basis
Strictly necessaryRequired to deliver the site: security, load balancing, form and CSRF protection, remembering your cookie choice, and keeping the on-site Creda assistant session working. Cannot be disabled; no consent required because the site cannot function without them.
PreferenceRemember choices such as language, region and interface settings. Set only with your consent, and never used to profile you.
Analytics / performanceHelp us understand aggregate usage — pages viewed, referral source, errors and load times — so we can improve the site. Set only with your consent. Where possible we use IP truncation and aggregated reporting.
Marketing / advertisingMeasure campaign effectiveness and, where applicable, deliver relevant advertising on third-party platforms. Set only with your explicit, opt-in consent, and never used for automated decisions about your access to financial products.

04Typical retention periods

TechnologyLifetime
Session cookiesDeleted when you close your browser.
Consent recordUp to 6 months, then we ask again.
Analytics identifiersUp to 13 months maximum.
Marketing identifiersUp to 13 months, or until consent is withdrawn.
Local storage used by the on-site assistantUntil you clear it or your browser clears site data.

05Your consent and how to withdraw it

When you first visit our website, non-essential cookies are not set until you make a choice. You can accept all, reject non-essential cookies, or choose categories. Rejecting non-essential cookies does not restrict access to any part of the site.

  • You may change or withdraw your consent at any time by reopening the cookie preferences on the site or by clearing cookies in your browser.
  • Withdrawal of consent does not affect processing that lawfully took place before withdrawal.
  • You can also block or delete cookies through your browser settings, and use browser private modes. Blocking strictly necessary cookies may break parts of the site.
  • To ask a question about cookies or exercise a data right, contact our Data Protection Officer at privacy@usecredafi.com.ng.

06Third-party providers

Where analytics or advertising technologies are enabled, they are provided by processors bound by data processing agreements. Some of these providers are located outside Nigeria; those transfers are made under the safeguards described in our Privacy Policy, including adequacy assessments and standard contractual clauses recognised by the Nigeria Data Protection Commission (NDPC).

We do not sell personal data, and we do not use cookie data to make automated risk or eligibility decisions.

07Do Not Track and global privacy signals

Browser Do Not Track signals are not standardised. Where your browser or an extension sends a recognised opt-out or global privacy control signal, we treat it as a withdrawal of consent for analytics and marketing technologies.

08Legal framework and changes

This policy is issued in line with the Nigeria Data Protection Act (NDPA) 2023, the Nigeria Data Protection Regulation 2019, the NDPA General Application and Implementation Directive, and the Cybercrimes (Prohibition, Prevention, Etc.) Act 2015.

We may update this policy as our website and providers change. The revised version will be posted here with a new effective date, and material changes will be signalled in the cookie banner. Questions: privacy@usecredafi.com.ng.