Privacy Policy

Norex ("Norex", "we", "us" or "our") provides a buy-now-pay-later service that lets customers in Sierra Leone own devices today and pay in installments. We are the data controller responsible for the personal information you share with us.

This policy applies to all applicants, customers, guarantors and agents who interact with our platform. Where a specific product or promotion has its own notice, that notice applies in addition to this policy.

We collect the following categories of information so we can verify your identity, assess your application and service your plan:

• Identity data: full name, date of birth, gender, photograph/selfie and your Sierra Leone national ID (NIN) number.
• Contact data: phone number, email address, digital (GPS) address and residential address.
• Financial data: employment status, income, deposit and repayment history, and mobile money details used for payment.
• Guarantor data: the name, relationship and phone number of the guarantor you provide.
• Device & usage data: the device you finance, IMEI/serial number, and how you use our website and app.
• Technical data: IP address, browser type, device identifiers and cookies.

To meet Know-Your-Customer (KYC) obligations, we verify your identity using your Sierra Leone national ID (NIN) and a live selfie. We may confirm your details against the the national identity authority records through an authorised verification partner.

We use your personal information to:

• Verify your identity and assess your eligibility for a plan.
• Create and manage your account, deposit and repayments.
• Communicate with you about your application, payments and support requests.
• Detect, prevent and investigate fraud, default or misuse of our service.
• Improve our products, pricing and customer experience.
• Comply with legal, regulatory and tax obligations in Sierra Leone.

We rely on one or more of the following legal bases to process your data: performance of the contract between you and Norex; compliance with a legal obligation; our legitimate business interests (such as preventing fraud); and your consent, which you may withdraw at any time.

We do not sell your personal information. We share it only where necessary with:

• Verification partners: to confirm your identity against national identity records.
• Payment providers: mobile money operators and processors that handle your deposit and repayments.
• Verified agents: limited details needed to fulfil pickup and device setup.
• Service providers: hosting, analytics and communications vendors bound by confidentiality obligations.
• Authorities: regulators, courts or law-enforcement where required by law.

We keep your information only for as long as needed to provide our service and to meet legal, regulatory and accounting requirements. Where the law requires us to retain certain records after your plan ends, we will keep only what is necessary and securely delete the rest.

We use technical and organisational measures — including encryption in transit, access controls and monitoring — to protect your data against loss, misuse and unauthorised access.

Subject to Sierra Leone’s data protection laws, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data where we are not required to keep it.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us using the details in the “Contact Us” section. You also have the right to lodge a complaint with the data protection authority of Sierra Leone.

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how our site is used. You can control cookies through your browser settings; disabling some cookies may affect how the site works.

Our service is intended for adults aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has provided us with data, please contact us so we can remove it.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date and, where appropriate, notify you in the app or by message. Please review this page periodically.

If you have questions about this Privacy Policy or how we handle your data, reach our team:

• Email: privacy@norex.com
• Phone: TODO
• Support: via the in-app chat or the Support page.