Privacy
This notice explains how Quantum Microfinance Bank Limited collects and uses personal data on this website and across its banking channels, in line with the Nigeria Data Protection Act 2023.
Quantum Microfinance Bank Limited (“Quantum MFB” or “the Bank”) is the data controller. We are a CBN-licensed, NDIC-insured non-interest microfinance bank. Registered office: No. 8 Yola/Mubi Road Opposite Central Market/Motor Park Song, Song L.G.A, Adamawa State, Nigeria. This website is our public marketing site.
On this website we collect the name, phone number, email, topic and message you type into the contact form. If you opt in to marketing, we also keep a record of that choice. For security we record failed submissions and a rate-limit key based on your IP address. We do not store that IP with cookie-consent records.
As a bank we may also process identification data (name, date of birth, BVN, NIN and supporting documents), contact details, financial and card data, biometric data used for identity checks, device and usage data, and location data from the mobile app or POS terminals.
We process personal data only where a lawful basis exists under the NDPA:
| Purpose | Lawful basis |
|---|---|
| Customer onboarding and KYC verification | Legal obligation / contractual necessity |
| Account management and transaction processing | Contractual necessity |
| Agency banking and POS operations | Contractual necessity |
| Fraud detection and AML/CFT compliance | Legal obligation / legitimate interest |
| Regulatory reporting (CBN, NIBSS, NDPC) | Legal obligation |
| Credit risk assessment | Legitimate interest / contractual necessity |
| Service improvement and customer support | Legitimate interest |
| Marketing and product communications | Consent |
| Website enquiries through this site | Contractual necessity / legitimate interest |
We do not sell personal data. We share it only on a need-to-know basis, with appropriate safeguards, including:
Third-party processors work under a Data Processing Agreement and may use the data only on our documented instructions.
Some processing uses trusted third-party services that may be hosted outside Nigeria, for example for security, media delivery and email. Where a transfer is not covered by an NDPC adequacy finding, we rely on contractual safeguards recognised under the NDPA.
| Category | Retention |
|---|---|
| KYC and customer onboarding records | 5 years after account closure |
| Transaction records | 7 years |
| Loan and credit files | 7 years after the facility closes |
| Audit and compliance logs | 7 years |
| Employee HR records | 6 years after employment ends |
| Marketing consent records | Duration of consent plus 1 year |
| CCTV / surveillance | 30 days |
| Website contact enquiries | [To be confirmed by Compliance] |
We use industry-standard technical and organisational controls, including encryption in transit, access limited by role, monitoring of digital channels, and regular security reviews. Staff and vendors who handle personal data are bound by confidentiality and data-protection requirements.
Under the NDPA 2023 you can ask us to do the following. Write to dpo@quantummfb.com.ng or use the contact form.
| Right | What it means | Timeline |
|---|---|---|
| Access | Ask whether we process your data and receive a copy | 30 days |
| Rectification | Ask us to correct inaccurate or incomplete data | 30 days |
| Erasure | Ask us to delete data where no legal basis remains | 30 days |
| Withdraw consent | Stop processing that relies on your consent | 24 hours on digital channels |
| Object | Object to legitimate-interest processing, including marketing | 30 days |
| Portability | Receive your data in a structured, commonly used format | 30 days |
| Restriction | Ask us to pause processing while a dispute is resolved | 30 days |
You may also withdraw consent in the Quantum MFB mobile app, by emailing dpo@quantummfb.com.ng with the subject “Consent Withdrawal Request”, or by completing a Data Subject Request Form at any branch. Digital withdrawals are processed within 24 hours. Withdrawal does not undo processing that was lawful before you asked us to stop.
This website uses cookies for session security, remembering your preferences, and — only if you opt in — future measurement. We do not use tracking technologies for targeted advertising. See the cookie notice for the full list, or .
We do not process personal data of people under 18 without verifiable parental or guardian consent. We do not use a minor’s data for marketing, profiling, or any purpose beyond essential service delivery.
Data Protection Officer / Data Management Officer
Quantum Microfinance Bank Limited
No. 8 Yola/Mubi Road Opposite Central Market/Motor Park Song, Song L.G.A, Adamawa State, Nigeria.
Email: dpo@quantummfb.com.ng
You may also complain to the Nigeria Data Protection Commission at ndpc.gov.ng.
Public notice based on Data Privacy Policy version 2.0. Last updated June 2026.