Privacy Policy

JemaBill Technologies Limited ("JemaBill", "we", "our", or "us") is dedicated to safeguarding your personal data and maintaining full transparency in our data processing practices. This Privacy Policy describes how we collect, use, disclose, and protect your information when you access our bill payment services, website, mobile application, or developer APIs.

1. Information We Collect

In order to provide seamless and verified utility bill payment services, we collect the following categories of information:

• Account Information: Name, verified email address, Nigerian mobile phone number, and account credentials.
• Utility & Transaction Identifiers: Electricity meter numbers, customer addresses retrieved from DisCo registries, cable TV smartcard / IUC numbers, candidate exam identifiers, and transaction amounts.
• Technical & Device Data: IP address, device model, operating system, and unique session tokens to protect against unauthorized access and account takeovers.

2. Legal Basis & NDPR Compliance

In accordance with the Nigeria Data Protection Act (NDPA) and NDPR, our processing of your personal information is grounded in the following legal bases:

• Contractual Necessity: To process your bill payment, communicate with billing registries (e.g. IKEDC, EKEDC, DSTV, WAEC), and deliver your purchased prepaid tokens or service renewals.
• Legal & Regulatory Obligations: Compliance with anti-fraud guidelines, tax regulations, and digital service accounting requirements.
• Legitimate Interests: Securing our infrastructure, monitoring service latency, and preventing fraudulent billing attempts.

3. How We Use Your Information

Your data is strictly utilized for the following functional purposes:

• Validating customer details prior to payment authorization to prevent erroneous billing.
• Issuing, delivering, and archiving official digital payment receipts, prepaid tokens, and examination PINs.
• Providing 24/7 automated transaction reconciliation and delivery recovery.
• Sending security notifications (e.g., password reset OTPs, session alerts).

4. Data Sharing & Third-Party Providers

We do not sell, rent, or trade your personal data. We only transmit the minimum required metadata to authorized biller aggregators and utility gateways (such as licensed distribution companies, telecommunications carriers, and examination councils) strictly to fulfill the payment requests you initiate.

5. Data Retention & Security Standards

We employ AES-256 encryption at rest and TLS 1.3 encryption in transit for all communications. Your transaction records are maintained in compliance with Nigerian financial record retention standards to allow you to re-retrieve tokens or download official receipts at any time.

6. Your Data Rights

As a data subject under Nigerian law, you possess the right to:

• Request access to your stored personal data and transaction history.
• Request rectification of incorrect contact information.
• Request deletion of your profile, subject to statutory transaction retention obligations.
• Withdraw consent for marketing communications at any time.

7. Contact Our Data Protection Officer

For inquiries, data access requests, or privacy compliance questions, please contact our Data Protection Office at:

Email: privacy@jemabills.com / customersupport@jemabills.com
Address: JemaBill Technologies, 5, Anekwe Crescent by Cutix Junction, Abub5 Anekwe Crescent by Cutix Junction, Nnewi, Anambra State, Nigeria.