Privacy Policy Arbiter
Last updated: 28th August, 2025
1. Scope
This Privacy Policy explains how we collect, use, disclose, and protect personal data when you use our Site and services. By using Arbiter, you agree to the practices described here.
2. Information We Collect
2.1 Information you provide to us
- Account & Profile: name, email, phone, password, profile details, business info.
- Identity & Verification (KYC/KYB): government-issued ID details, selfie/biometric checks (if applicable), date of birth, address.
- Transaction & Dispute Data: order details, counterparties, invoices, delivery proofs, communications, dispute submissions, refunds/chargebacks.
- Payment Data: payment method tokens, billing address (card numbers handled by our payment processors).
- Support & Feedback: messages, tickets, survey responses, product reviews.
2.2 Information collected automatically
- Device/Usage: IP address, browser type, OS, referring URLs, pages viewed, timestamps, clickstream data.
- Cookies & Similar Tech: identifiers for session management, security, preferences, analytics.
2.3 Information from third parties
- Payment processors & banks for transaction status and fraud prevention.
- Identity verification partners for KYC/KYB checks.
- Logistics partners for shipping/delivery confirmations.
3. Sources of Personal Data
We collect personal data directly from you, automatically via your devices, and from service providers (e.g., payments, identity verification, logistics) and, where lawful, from public sources.
4. How We Use Personal Data
- Provide, operate, and improve the Site and services.
- Facilitate transactions, hold funds, release payments on delivery, and resolve disputes.
- Authenticate users, verify identities, and prevent fraud, abuse, or illegal activity.
- Provide customer support, send service and policy communications.
- Comply with legal, regulatory, and tax obligations.
- Conduct analytics to improve performance, security, and user experience.
- With your consent, send marketing communications (you can opt out anytime).
5. Legal Bases (EEA/UK)
Where GDPR/UK GDPR applies, we rely on:
- Contract (to provide services you request)
- Legitimate interests (security, fraud prevention, product improvement)
- Consent (for certain cookies/marketing where required)
- Legal obligation (KYC/AML, tax, accounting, regulatory)
8. Analytics & Advertising
We may use analytics services (e.g., aggregated traffic metrics). We do not conduct interest-based advertising using your transaction data. If we ever do cross-context behavioral advertising, we will provide required notices and opt-out mechanisms.
9. Security
We employ administrative, technical, and physical safeguards (e.g., TLS/HTTPS, access controls, encryption at rest where applicable). No method is 100% secure, but we continually work to protect your information.
10. Data Retention
We retain personal data as long as needed for the purposes described, including fulfilling contracts, complying with legal/AML requirements, resolving disputes, and enforcing agreements. Retention periods vary by data category and legal requirements.
11. Your Rights & Choices
Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing of your personal data, and to data portability and withdrawal of consent (where processing is based on consent).
To exercise rights, email privacy@thearbitergroup.com. We may need to verify your identity before fulfilling your request.
12. Region-Specific Disclosures
12.1 Nigeria
We process personal data in line with Nigerian laws, including the Nigeria Data Protection Act (NDPA) and guidance from the Nigeria Data Protection Commission (NDPC).
12.2 EEA/UK
Where GDPR/UK GDPR applies, you have the rights described in Section 11 and the right to lodge a complaint with your supervisory authority.
12.3 California (CPRA)
California residents may have rights to know, delete, correct, and to opt-out of “sale” or “sharing” of personal information. Arbiter does not sell personal information. If we “share” personal information in the CPRA sense, we will provide a “Do Not Sell or Share My Personal Information” link.
13. Children’s Privacy
Our services are not directed to individuals under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact us and we will take appropriate action.
14. International Transfers
We may transfer, store, and process your information outside your country (including the US, UK, EU/EEA, and Nigeria). Where required, we use appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.
15. Changes to This Policy
We may update this Policy periodically. We will post changes on this page and update the “Last updated” date above. Material changes may be notified by email or within the service.
16. Contact Us
The Arbiter Group274 Samuel Ademulegun Avenue, Abuja, FCT, Nigeria
Email: privacy@thearbitergroup.com
Phone: +234 814 227 5560
Website: thearbitergroup.com