Privacy Policy


HeptaPay is bound by the African Union convention, regional & local regulations and international standard practices relating to personal data protection and will protect your non-public personal information against unauthorised disclosure, misuse, reuse or use in unrestricted manner in accordance with the relevant laws. Respecting and maintaining your online privacy and the security of your personal information is extremely important to us. These principles govern how we can collect, use, hold and disclose your personal information. This Privacy Policy is designed to inform you of our online information privacy practices, the types of information we may collect, how the information is used, and to assure you that we maintain strict security procedures to protect your information.  

This Privacy Policy is applicable to all of the Website, software applications (“Apps”) and/or payment platforms (“Platforms”) offered by Hepta Pay or its affiliated companies collectively referred to as Hepta Pay “services”.  

1. Objective of the Privacy Policy

This privacy policy statement is to provide all persons whose personal data we hold with description of the types of Personal Information we collect, the purposes for which we collect that Personal Information, the other parties with whom we may share it and the measures we take to protect the security of the data. Accordingly, we have developed this privacy policy in order for you to understand how we may collect, use, communicate, disclose and otherwise make use of personal information.  

We are committed to protecting your privacy and developing technology to give you a powerful and safe online experience. This Statement of Privacy applies to the Hepta Pay website and our mobile application, and governs data collection and usage. By using the Hepta Pay website, you consent to the data practices described in this statement. It also describes your choices regarding use, access, and collection of your personal information.  

2. Guiding Principles of Personal Data Processing

  1. The principle of consent and legitimacy of personal data processing:
  2. Processing of personal data shall be deemed to be legitimate where the data subject has given his or her consent. This requirement of consent may, however, be waived where processing is necessary for:
    1. Compliance with legal obligation to which controller is the subject;
    2. Protect the vital interests or fundamental rights and freedoms of data subject.

  3. The principle of purpose, relevance and storage of processed personal data:
    1. Data collection shall be undertaken for specific, explicit and legitimate purposes, and not further processed in a way incomputable with those purposes;
    2. Data protection shall be adequate, relevant, and not excessive in relation to the purpose for which they are collected and further processed;
    3. Data shall be kept where need be for no longer than the necessary for the purposes of which the data were collected or further processed.

  4. The principle of accuracy of personal data:
  5. Data we may collect shall be accurate and where necessary, kept up to date. Every reasonable step must be taken to ensure that data which are inaccurate or incomplete, having regard to the purpose for which they were collected or for which they are further processed, are erased or rectified.

  6. The principle of lawfulness and fairness of personal data processing:
  7. The collection, recording, processing, storage, and transmission of personal data shall be undertaken lawfully, fairly, and non-fraudulently.

  8. The principle of transparency of personal data processing:
  9. The principle of transparency requires mandatory disclosure of information on personal data by data controller. The data subject should know what personal information is, how the personal information is collected, for what purpose and how personal information is secured.

  10. The principle of confidentiality and security of personal data processing:
    1. Personal data shall be processed confidentially and protected, in particular where processing involves transmission of the data over network.
    2. Where processing is undertaken on behalf of the controller.

3. Privacy

Hepta Pay strictly prohibits you from using the Services to collect, track or record any Personally Identifiable Information. Without limiting your obligations pursuant to this section, Hepta Pay may implement, at any time, certain processes, features, functionalities or technologies to limit your ability to record Personally Identifiable Information, including, without limitation, by disabling and/or limiting any recording of keystrokes entered on your Website and/or adding certain controls, terms or processes in cases where keystroke recording is permitted. In any event if keystroke recording is activated for your account, you hereby acknowledge and agree that you shall only enable the recording of keystrokes from fields or areas that do not contain Personally Identifiable Information.  

This site uses the Hepta Pay customer experience analytics service. The Hepta Pay service web helps us analyse how visitors use our platform. We do not collect through the Hepta Pay service or transfer to Hepta Pay any sensitive personally identifiable information. We only use the Hepta Pay service to record, on a completely anonymous basis, information such as phone number, as well as non-Personally Identifiable Information text you type in this website for transactional purposes. Hepta Pay does not create a user profile for the purpose of tracking a user across unrelated web sites and will only use such information pursuant to its Privacy.  

4. Account and Details Provision

To access and use the services, you must choose an appropriate service. When entering the details for your bill payment, you must provide current, complete and accurate information. While Hepta Pay takes reasonable efforts to safeguard information based on common industry standards, you agree to be responsible for maintaining the security of your Account at all times. You shall take all necessary steps to protect your Account details from disclosure. You are fully responsible for your own and third party use of your Account. Hepta Pay will not be liable for any loss and/or damage resulting from your failure to comply with this section. You agree to notify Hepta Pay immediately upon learning of any unauthorized use of your Account or any other breach of security.  

5.  Customer Data

You hereby allow Hepta Pay to collect, store and process your Customer Data. Hepta Pay shall use and maintain your Customer Data only as set forth in this Privacy Policy available, as may be updated from time to time.  

The lawful basis that Hepta Pay relies on for processing your Personal Information are:

  • Your consent: Where you agree to us collecting your Personal Information by using our Services.
  • We have a contractual obligation: Without your Personal Information, we cannot provide our Services to you.
  • We have a legal obligation: To ensure we are fully compliant with all applicable financial legislations such as Anti-Money Laundering and Counter Terrorist Financing Laws, we must collect and store your Personal Information. We protect against fraud by checking your identity with your Personal Information.
  • Compliance with Know Your Customer (KYC) norms: to ensure that we comply with relevant applicable laws and regulations in our chosen markets of operation.

Hepta Pay may disclose or share your Personal Information with third parties which include its affiliates, employees, officers, service providers, contractors as may be reasonably necessary for the purposes set out in this policy. Hepta Pay only shares personal information with External Third parties in the following limited circumstances:  

  1. When we have customer's consent. We require opt-in consent for the sharing of any personal information; We share Personal Information with third parties directly authorized by you to receive Personal Information, such as when you authorize a third-party application provider to access your account. The use of your Personal Information by an authorized third party is subject to the third party's privacy policy and Hepta pay shall bear no liability for any breach which may arise from such authorization by you.

    We provide such information to our subsidiaries, affiliated companies or other trusted businesses or persons for the purpose of processing personal information on our behalf. We require that these parties agree to process such information based on our instructions and in compliance with this Privacy Policy and any other appropriate confidentiality and security measures.

  2. When we have a good faith belief that access, use, preservation or disclosure of such information is reasonably necessary to:
    1. satisfy any applicable law, regulation, legal process or enforceable governmental request,
    2. when complying with legal requirements, preventing fraud or imminent harm, and ensuring the security of our network and services,
    3. enforce applicable Terms of Service, including investigation of potential violations thereof;
    4. detect, prevent, or otherwise address fraud, security or technical issues, or;
    5. if it is part of aggregated, non-personal information, such as average page load time, or the number of pages processed by our system per day;
    6. protect against imminent harm to the rights, property or safety of Hepta Pay, its users or the public as required or permitted by law.

  3. If Hepta Pay becomes involved in a merger, acquisition, or any form of sale of some or all of its assets, we will provide notice before personal information is transferred and becomes subject to a different privacy policy.

6.  Protecting Children's Privacy

The same policy applies to minor account holders or users of our online pay services.  

7.  Other Information we may Collect

  1. Cookies: Hepta Pay use cookies to help you personalize your online experience and to distinguish you from other users and to customize and improve our services. We may read cookies to collect information such as browser type, date and time spent on our website, and pages visited. Information collected through cookies may be used for security purposes, to facilitate navigation, to display information more effectively, to personalize and enrich your experience, to recognize your device and gather statistical information about the usage of the website. You have the ability to accept or decline cookies.
  2. Note that the use of third-party cookies is not covered by our privacy statement.

8.  Data Transfers

Our business is regional with affiliates and service providers located around the region. As such, Personal Information may be stored and processed in any country where we have operations. Also, your Personal Data may be transferred to countries which may not have the same data protection laws as the country you initially provided your Personal Information, but whenever we transfer or transmit your Personal Information internationally, we will ensure or take reasonable steps to ensure your Personal Information is handled securely in line with the applicable data protection laws and standard contractual clauses.  

9.  Marketing

Hepta Pay may process your Personal Information to offer you products and services we believe may interest you. The products and services may be offered by various means, including by mail, telephone, email, SMS or other electronic means, such as through social media. You may exercise your right to object to such contact from us or opt out from the marketing content. Please note however, that if you opt-out of marketing content, we may still send you messages relating to transactions and our Services related to our ongoing business relationship.  

We may ask you for permission to send notifications to you. Our Services will still work if you do not grant us consent to send you notifications.  

10.  Social Media Features and Widgets

We are social and for all the latest from our day-to-day activities on our different social media platforms that include; LinkedIn, Twitter and Facebook etc. These features may collect your IP address, which page you are visiting on our site, and may set a cookie to enable the feature to function properly.  

11.  Links to Third Party Websites

Within our websites, there may be links to third-party sites that may offer you goods, services, or information. When you click on one of these applications, plug-ins, widgets, or links, you will leave our site and will no longer be subject to Hepta Privacy Policy. Hepta is not responsible for the content of those third-party websites. Please refer to our disclaimer (section 14).  

12.  Updates to our Privacy Policy

This policy is subject to change, and it may be reviewed, amended from time to time to reflect changes in new services or align with the changes in applicable laws. Any changes and the reviewed policy will become effective when published and it will come into effect immediately.  

13.  Disclaimer

You might have provided the same non-public information to other entities without the knowledge or permission of Hepta Pay. Hepta Pay will not be held liable for disclosure or sharing of such information from these sources.  

14.  Contact Us

If you have any questions regarding our online products and service, kindly contact Hepta Pay on the following contact addresses for support: [email protected]