1. Scope

This Policy applies to all visitors and users of “Bank Sort Codes” and covers processing of personal data collected via the Site, including forms, cookies, analytics and emails.

2. What data we collect

2.1 Data you provide directly

When you contact us, submit corrections, subscribe, or use forms we may collect:

• Full name (optional)
• Email address
• Message content, subject and attachments or links you provide
• Any other information you choose to send us

2.2 Automatically collected data

When you browse the Site we may automatically collect:

• IP address and approximate location (country/city)
• Device type, operating system and browser
• Referring URL and pages visited
• Time, date and engagement metrics (page views, session length)

2.3 Cookies & tracking

We use cookies and analytics tools to understand traffic, improve the Site and remember preferences. You can control cookies in your browser settings; disabling some cookies may affect Site functionality.

3. Why we collect data & legal basis

We collect and process personal data for the following purposes:

• To respond to enquiries and corrections: process messages you send via contact forms or email.
• To provide and improve the Site: analytics, debugging, content improvements.
• To send optional updates: when you subscribe, with your consent.
• To detect and prevent fraud or abuse: security monitoring and abuse prevention.

Our lawful bases typically include your consent (for subscriptions), our legitimate interests (site operation, security, analytics) and compliance with legal obligations where required.

4. Who we share data with

We do not sell personal data. We may share data with:

• Service providers who help run the Site (hosting, analytics, email delivery).
• Legal or regulatory bodies when required by law.
• Partners or advertisers only with your explicit consent.

Third-party services operate under their own privacy policies; you should review those providers’ policies for details.

5. International transfers

Some service providers may process data outside Nigeria. When personal data is transferred internationally we require appropriate safeguards (contracts, standard contractual clauses or equivalent protections) to protect your data.

6. Data retention

We retain personal data only for as long as needed for the purposes set out in this policy or to comply with legal obligations. Typical retention examples:

• Contact form messages: retained for up to 2 years unless you request deletion.
• Analytics data: aggregated and retained for up to 24 months.
• Account or subscription data: retained while the account is active or until you request deletion.

If you need a specific retention period for a record, contact us (see section 12).

7. Security

We use industry-standard technical and organizational measures to protect data, such as HTTPS, encrypted backups, access controls and periodic security reviews. While we work to protect data, no method is 100% secure — report security concerns to banksortcodes@gmail.com.

8. Your rights & how to exercise them

Under data protection laws (including the Nigeria Data Protection Regulation — NDPR) you may have the right to:

• Be informed about processing of your personal data
• Access the personal data we hold about you
• Request correction (rectification) of inaccurate data
• Request deletion (erasure) where processing is no longer necessary
• Object to or restrict certain processing activities
• Request portability of personal data you provided in a structured, machine-readable format

To exercise any right, email banksortcodes@gmail.com with “Data Request” in the subject and provide enough information for us to locate your records. We will respond within a reasonable time and in accordance with applicable law.

9. Complaints

If you are unhappy with our response you may lodge a complaint with the National Information Technology Development Agency (NITDA) — the regulator that issued the Nigeria Data Protection Regulation (NDPR).

Contact NITDA via their official channels; search for “NITDA NDPR” for current contact details and complaint procedures.

10. Children

Our Site is not intended for children under 13. We do not knowingly collect personal data from children. If you believe we have collected data from a child, contact us and we will promptly delete it where required.

11. Changes to this policy

We may update this Privacy Policy. When we do we will post the revised policy with a new “Last updated” date. Continued use after changes will constitute acceptance of the updated policy.

12. Contact & data requests

If you have questions about this Privacy Policy or want to exercise your rights, contact:

Email: banksortcodes@gmail.com

Address: 117 Oron Road, Uyo (optional)

For urgent security issues or suspected breaches: email banksortcodes@gmail.com.