Privacy policy

Last reviewed: 02 Jul 2026 · Data controller: Lukeport Nigeria Limited

1. Who we are

Lukeport Nigeria Limited (“Lukeport”, “we”) operates an agent banking network in Nigeria. We are the data controller for the personal data described in this policy. Our registered office is at 19 Town Planning Way, Ilupeju, Lagos State, Nigeria and our data protection contact is info@lukeport.com.

2. What we collect, and why

We collect different data depending on how you interact with us. We do not collect data we have no use for.

If you apply to become an agent or aggregator

• Name, phone number and email address, to identify and contact you about the application
• Trading location: state, local government area and premises type, to assess the application
• Identification type and Bank Verification Number, to verify your identity, as required of a regulated agent network
• Settlement bank details, to establish the account your counter will trade against

If you use our help channel

• The content of your messages, including anything you choose to type into them
• Where you continue on WhatsApp, your phone number and the conversation you carry over

If you transact at an agent counter

The account, identity and biometric data required to complete the service is collected on behalf of, and processed by, the partner financial institution providing it. Their privacy policy governs that processing. Lukeport processes what is necessary to operate, monitor and support the agent network.

If you simply browse this website

• Essential technical data required to serve the site securely
• Analytics only where you have consented, declining does not reduce what the site does

3. Lawful basis

We rely on the following bases under the NDPA 2023:

• Contract, to assess and administer an agent or aggregator relationship
• Legal obligation, identity verification and record keeping required of a regulated agent network
• Consent, non-essential analytics, and marketing communications you opt into
• Legitimate interest, operating, securing and improving the network, balanced against your rights

4. How long we keep it

Applications and the identity data supporting them are retained for seven years after the relationship ends, or as long as regulation requires, whichever is longer. Help channel conversations are retained for twelve months. Unsuccessful applications are retained for twelve months and then deleted.

5. Who we share it with

• Partner financial institutions and licensed service providers, where necessary to deliver a service you requested
• Identity verification providers, for BVN and identification checks
• Regulators and law enforcement, where we are legally required to
• Technology suppliers who process data on our instructions under a written agreement

We do not sell personal data, and we do not share it for third-party marketing.

6. Where it is stored

Personal data is stored on infrastructure located in Nigeria. Where data is transferred outside Nigeria, we do so only on a basis permitted by the NDPA and with appropriate safeguards in place.

7. How we protect it

• Access is restricted by role, staff can reach only the data their role requires
• Data is encrypted in transit and at rest
• Agents are trained on, and bound by, the agent data-handling standard
• Access is logged and reviewed

8. Your rights

You may request access to your data, correction of it, deletion of it, restriction of its processing, or object to processing carried out on the basis of legitimate interest. You may also withdraw consent at any time where consent is the basis we rely on.

To exercise a right, contact info@lukeport.com stating which right you are exercising. We will acknowledge your request and respond within the period the NDPA requires. If you are not satisfied, you may complain to the Nigeria Data Protection Commission.

9. Cookies

We use cookies that are strictly necessary to serve the site securely. Non-essential cookies, including analytics, are set only where you consent, and you can decline without losing any functionality. You can withdraw consent at any time.

10. Children

Our services are not directed at children. We do not knowingly collect data from anyone under 18 except where an account is opened for a minor through a partner institution, in which case that institution’s requirements and consents apply.

11. Changes to this policy

We will update this page when our practices change and revise the review date at the top. Where a change materially affects your rights, we will say so instead of relying on you noticing.

12. Contact

Questions about this policy, or about how we handle your data, go to info@lukeport.com. Our compliance documents and certification are published on the compliance page.