Trust and security are a significant part of what makes Rebble your preferred platform for international money
transfer. Your privacy is a priority to us, so this privacy and data collection policy outlines how we keep your data
safe and secure.
In this policy, we explain how Rebble collects, manages, uses and protects your data.
1.
Who are Rebble?
Rebble is an online money transfer platform with a mission to ensure safe, swift and simple international multi
currency transfer.
In this Privacy Policy, terms such as “we”, “us” and “Rebble” refer to Rebble Ltd. (Company Number 12613809)
with its registered head office located at House 1A, Alice Mews, Jasmine Road 3, Ikota GRA, Ikota Villa, Lekki
The term “Service” refers to money transfers enabled from our website or mobile app.
In the language of data protection regulation, Rebble is the “data controller” of your personal data and you, our
customer, are the “data subject”. This means that Rebble determines the purposes and means of processing
your personal data, while respecting rights concerning your privacy. Rebble is committed to conducting its
business in accordance with the Nigeria Data Protection Regulation (NDPA), and other international instruments
such as the General Data Protection Regulation (GDPR), concerning the protection of personal data and
privacy of individuals to ensure compliance with the Data Protection requirements. Noncompliance may expose
Rebble to complaints, regulatory actions, fines or/and reputational damage.
What data do we collect?
2.
Like most companies, we collect various types of data about our customers. Some of it may be considered
personal data, which means data that make you identifiable as an individual.
We may collect and use the following data:
Basic personal data, such as (but not limited to):
⌘
Date of birth
⌘
Address
⌘
Phone number
⌘
E-mail address
This data is necessary for Rebble to provide the Service to you. We will request this data when you sign up,
before the Service is provided.
Data for ‘Know Your Customer’ (KYC) regulations, such as (but not limited to):
⌘
Proof of your identity, like a passport, driving licence, national ID card or residence permit ⌘
Proof of your address, like a utility bill or bank statement
⌘
Additional details on the the source of funds being sent, like a payslip, credit card statement, tax rebate
receipt or bank loan agreement
As a regulated financial institution, we are bound by the legal requirement to collect, verify and record cer tain
data about you or recipients of your transactions. Any personal data received from the customer for the
purpose of preventing money laundering or terrorist financing will be used only for that purpose and nothing
more.
This data will be needed to conduct Know Your Customer (KYC), Customer Due Diligence (CDD) and security
checks, as required by local and international regulations. This helps us keep your money safe, and we will only
request these details when necessary.
Data about your recipient, such as (but not limited to):
⌘
Name ⌘
Date of birth
⌘
Occupation
⌘
Phone number
⌘
Proof of their identity, such as a passport, driving licence, national ID card or residence permit As a regulated
financial institution, we are bound by the legal requirement to collect, verify and record cer tain data about you
or recipients of your transactions. Any personal data received from the customer for the purpose of preventing
money laundering or terrorist financing will be used only for that purpose and nothing more.
This data will be needed to conduct Know Your Customer (KYC), Customer Due Diligence (CDD) and security
checks, as required by local and international regulations. This helps us keep your money safe, and we will only
request these details when necessary.
Data from other third party sources, such as (but not limited to):
⌘
Facebook, Twitter or Google profile images and names
⌘
Banks and payment service providers used to transfer money to us
⌘
Advertising networks
⌘
Search engines providers (such as Yahoo.com or Google)
⌘
Credit reference agencies
Rebble collects this data only when you provide the relevant permission to social media sites.
Technical data, such as (but not limited to):
⌘
Page views
⌘
App downloads
⌘
Operating system
⌘
Browser type
This data is used to help us to understand how you use our Service, so that we can improve it.
Call recording
We record all incoming and outgoing calls that are handled by Rebble Ltd.
Before establishing the connection with us, you will hear a pre-recorded welcome message. Part of this mes
sage states:
“Please note that your call may be recorded and monitored for training and quality purposes.” If we have called
you, our customer service agent will inform you about call monitoring and recording. We usually record
conversations with our customers to help improve our service. For a full list of reasons why we record calls and
how we process data, please review section 3 in our privacy policy.
Why do we collect your data?
3.
We collect your data to personalise and improve our Service for you. The specific purposes for which we col
lect your data include:
Transactional purposes
We need to collect data in order to process your transactions. Without data such as you and your beneficiaries
bank account details or full name and address, we would be unable to transfer money for you.
Regulatory purposes
As regulated financial institutions, both Rebble and our partners are required to conduct Know Your Customer
(KYC) and Customer Due Diligence (CDD) checks to comply with our legal and regulatory requirements. These
include our requirements under Anti Money Laundering (AML) and Counter Terrorist Financing (CTF) legislation.
All of this helps us keep our Service safe and secure. Any personal data received from the customer for the
purpose of preventing money laundering or terrorist financing will be used only for that purpose and nothing more.
Marketing purposes
We may process your personal data to provide you with certain types of marketing communication that we
believe will be relevant and of interest to you. This helps us provide you with a more personalised Service. This
kind of activity is permitted by our ‘legitimate interest’ (for more information on legitimate interest, please see Section 8 of this Policy). We will always endeavour to make these communications relevant and unintrusive, and
you are able to object to marketing communication from us at any time.
Analytical purposes
We may collect and analyse data such as website or app visit logs in order to improve the quality of our Ser
vice.
You do not have to disclose any of the above data to us. However, if you choose to withhold certain data, we
may not be able to provide you with our Service.
How do we keep your data safe and secure?
4.
All the data that you provide to us is encrypted on our secure servers. We restrict access to your data to spe cific
employees of Rebble who have an important business-related reason for handling it. Our communications are
encrypted using the TLS (Transport Layer Security) technology protocol.
All of the data we collect from you or from other sources will always be stored in accordance with this Privacy
Policy.
How long do we keep your data?
5.
Depending on what purpose your data is used for, the length of time we keep it may vary. Either way, we will
only hold your data as long as necessary to serve the purpose it is used for.
Regulatory
We are legally required to keep the data obtained for Know Your Customer (KYC), Customer Due Diligence
(CDD) and security purposes (including transaction records and our communications with you) for at least five
years after the most recent transaction.
Legitimate Interest
When the five years’ retention period and/or legitimate interest no longer apply, we will remove your data from
our system. For more information on legitimate interest, please see Section 8 of this Policy.
Consent
In situations where you give us specific consent to process certain kinds of data, you are able to withdraw that
consent at any time. We will then stop processing your data and, if the five years’ retention period and/or
legitimate interest retention period does not apply, we will also erase your data from our system.
We may retain any data mentioned above for a longer period, if required to protect the rights, property or
safety of Rebble or of the Service provided by us or our partners.
6.
Who do we share your data with?
We share your personal data with third parties only when it is necessary for the fulfilment of the Service or to
comply with applicable laws.
We will never sell your personal data to other organisations.
We work with partners who help us to complete your transactions. If they are based outside the EEA, we will
share your personal data with them only when they apply essential safeguards, or if it has been established by
EU institutions that the relevant country has an appropriate data protection regime in place, or when we other
wise ensure that the appropriate level of protection is applied for data processing.
The following are some purposes for which we may share your data with third parties:
To fulfil the contract between you and Rebble
We may share your data with third parties, such as our partners and intermediaries, when they are necessary for the fulfilment of the Service.
When required by law
We may share your data when required by law, for example for the purposes of security, taxation and criminal
investigations.
For marketing and communication
7.
We may share your data with third parties such as providers of customer service tools, marketing campaign
tools, email communication tools, analytics software (for marketing purposes) and data visualisation tools (for
analytical purposes).
If we sell or buy any business or assets, we may be obliged to share your personal data with the prospective
seller or buyer.
What are your rights?
The law gives you a number of important rights in relation to your personal data, which are listed below.
There are certain exceptions where these rights may be superseded by laws and other requirements applica ble
to regulated financial institutions like Rebble. An example of this would be the obligatory retention period (seen
Section 5), which supersedes the right to data erasure.
Your rights are:
⌘
The right to be informed: the right to be informed about how we use your personal data ⌘
The right of access
and data portability: the right to request access to the data that we have about you, to obtain the data within a
month of asking for it, and to use it for your own purposes
⌘
The right to rectification: the right to correct, amend or update your personal data if it is wrong or has
changed (this can usually be done using the settings provided on your account)
⌘
The right to erasure: the right to ask us to remove the data we hold about you from our records ⌘
The right to
be forgotten: the right to request erasure of any links to your personal data, or of any copy or replication of any
public personal data
⌘
The right to restrict processing: the right to ask us to stop processing your personal data ⌘
The right to object:
the right to object to data processing, if you believe that our legitimate interest might infringe upon your rights
⌘
Rights related to automated decision-making and profiling: the right not be subject to individual decisions made
solely by automated means.
⌘
The right to notification in the event of breach: the right to be immediately informed if we identify a data
breach
⌘
The right to raise a complaint: the right to contact our Data Protection Officer if you are not happy with how
we have handled your personal data
⌘
The right to lodge a complaint with a supervisory authority: the right to submit a complaint to the Informa tion
Commissioner’s Office (ICO) if you are not satisfied with our Data Protection Officer’s response, or if you
believe that we are not processing your personal data in a lawful way
If you would like to read more about your rights in relation to your personal data, please refer to the Informa
tion Commissioner’s Office website.
8.
Legitimate interest
Legitimate interest is a specific legal justification for the collection and processing of your personal data. It
applies when we have reasonable grounds to collect and/or process your personal data to improve our Ser vice,
as long as this does not infringe on your rights.
We believe that if you are an active customer of Rebble, it is in your interest to receive occasional information
about our Service. We may therefore send you communications about offers or promotions that we believe are
relevant for you based on your previous use of the Service. If we notice that you are having problems using our Service, we may on our own initiative decide to contact you, in some cases by phone, to offer help.
We may also process your data to help develop new product features that we believe will improve the Service.
We may contact you occasionally to assess your satisfaction with the Service. We may also use your data to
determine the effectiveness of marketing or promotional campaigns. We may also contact you with information
about any changes in the Service, and/ or other important updates.
We will only share anonymised or encrypted data with the third parties. We may also provide our partners with
anonymous aggregated data about our customers for marketing and analytical purposes, to help optimise our
marketing communications.
You can object to data processing based on our legitimate interest at any time by contacting us at hello@syar
pa.com or by changing the settings on your Rebble account.
9.
Cookies Policy
Cookies are small text files which are stored on your device when you access Rebble. They allow us to recog
nise you and store data about your past activity and your preferences so that we can personalise and improve
the Service for you.
Cookies and other similar technologies may collect data such as language preference, country and previously
viewed pages.
We use the following cookies:
⌘
Necessary cookies: these cookies enable the basic use of our Service
e.g. enabling content reserved for registered users
⌘
Personalisation cookies: these cookies allow our Service to be personalised for you
e.g. remembering your preferred language or sending country
⌘
Analytical cookies: these cookies allow us to see how people use our Service so that we can understand
how to improve it
e.g. seeing how many people are logged in at a given time of day
By using our Service, you agree to place the cookies described above on your device. You have the right to
withdraw your consent at any time. If you would like to delete our cookies, you can do so by changing the
settings of your browser.
Blocking or deleting cookies may mean that some features of the Service may not be available to you.
List of used Online Tracking Services:
⌘
Segment.com
⌘
Google Ads
⌘
Google Analytics
⌘
Mixpanel
⌘
Facebook ads
⌘
Hotjar
⌘
Branch
⌘
Twitter Ads
⌘
Bugsnag
#
Name
Description
1 detectedCountry, language, location
Country, sendingCountry
Cookie used for inter-services communi
cation.
Internal usage
2
PHPSESSID
Session id cookie.
Internal usage3 access_token:WEB
Session token for web client.
Internal usage
4 Rebble-utdm
Cookie used for identifying a unique
visitor of our platform.
Internal usage
5 SERVERID
Used for maintaining SSL sessions of user.
Internal usage
6 snapcall
Used by 3rd party phone support solution.
3rd party - SnapCall
7 _hjIncludedInSample
Cookie used to generate Heatmaps,
Fun nels, Recordings, etc.
3rd party - Hotjar
8 _hjid
This cookie ensures that behaviour in
subsequent visits to the same site will
be attributed to the same user ID.
3rd party - Hotjar
9 __zlcmid
Live chat widget on Slack contact
page (ZopIM).
3rd party - Zendesk
1
0
fbsr_SOME_ID (e.g.
fbsr_368165616583442),
fbm_SOME_ ID (e.g.
fbm_368165616583442), fr
Cookie set by Facebook for
application integration.
3rd party - Facebook
1
1
_fbp
Cookie delivers our advertising to people
who have already visited our website
when they are on Facebook or a digital
platform powered by Facebook
Advertising
3rd party - Facebook
1
2
mp_9a53f678fdbf6f2267977f
a 60c35a4b4_mixpanel
Cookie used by Mixpanel tool (user
be havioral analytics).
3rd party - Mixpanel
1
3
ab.storage.sessionId.{GENERATED_I
D},
ab.storage.deviceId.{GENERATED_ID
},
ab.storage.userId.{GENERATED_ID}
Cookie set by Google Ads.
3rd party - Google
1
4
_ga, _gid
Cookie set by Google Analytics and
used for identifying page visitor.
3rd party - Google
1
5
1P_JAR, CONSENT, NID
Set by Google. Unique ID to remember
your preferences and other information
such as website statistics and track
con version rates. Google’s policies
can be viewed at
https://policies.google.com/
technologies/types
3rd party - Google
1
6
G_ENABLED_IDPS
Required by the third-party Google+ ser
vices
3rd party - Google
1
7
_gaexp
This cookie is used to determine a user’s
inclusion and to enhance user
experience on our website1
8
ajs_group_id, ajs_anonymous_id,
ajs_user_id
Used by segment.com, customer data
collection infrastructure. Used to collect
information about user behaviour.
3rd party - Segment
1
9
intercom-id-{SOME_ID}
This cookie is used by Intercom as a ses
sion so that users can continue a chat
as they move through the site.
10.
Automated decision making
We may use automated decision making only if:
⌘
It is necessary to fulfill a contract between us and a customer (e.g. for the estimated delivery time soft ware,
which we use to determine the time it takes for a transfer to reach a recipient).
⌘
The automated decision-making process is authorised by the laws to which Rebble is subject. ⌘
The processing is based on the customer’s explicit consent.
None of our automated decision-making processes will have a legal/significant effect on you.
Logging in to Rebble with your Facebook and Google account
11.
You can log in to Rebble with your Facebook or Google profiles. This allows us to authenticate your identity by
obtaining access to:
⌘
Your e-mail address associated with your Facebook and Google profile
⌘
Your Facebook public profile
⌘
Your Google basic profile
⌘
Your Google contacts
Any of your personal data that we receive from third parties will be subject to this Privacy Policy and the priva cy
policies of those third parties.
By using your Facebook or Google login credentials, your personal data may be processed by Facebook or
Google marketing tools. An example of this is the Facebook tool called ‘Lookalike Audiences’ or a similar tool
used by Google called ‘Customer Match’. These help us to identify people who have similar interests or be
haviours to those of our customers. We may use similar tools provided by Facebook or Google in the future.
12.
Changes in Privacy Policy
Rebble may change this Privacy Policy from time to time. Any changes will be effective immediately unless
stated otherwise. The date of the most recent update is displayed at the top of the page. Any dispute or claim
arising in connection with this Privacy Policy will be considered in relation to the English version only.
13.
Contact details
Rebble has a Data Protection Officer who is responsible for matters related to privacy, data protection and data
security. Our Data Protection Officer can be contacted at hello@Rebble.com www.Rebble.com