Legal
Privacy Policy
QIFTS is a B2B platform. This policy explains how we handle data — both for the companies that use our infrastructure and the recipients they reward.
Who we are
QIFTS is a B2B rewards infrastructure platform for Africa. We provide the technology that enables companies — employers, banks, FMCG brands, and other enterprises — to issue and manage reward cards, vouchers, and incentives across African markets. We are not a consumer platform.
This Privacy Policy applies to (a) our corporate website at qifts.com, (b) the QIFTS platform and dashboard used by our business customers, and (c) any API integrations operated under a QIFTS platform agreement.
What data we collect
We collect data in two distinct contexts:
As a platform operator: When business customers and their teams use the QIFTS dashboard or API, we collect account registration details, usage logs, API credentials, and billing information necessary to operate the platform and fulfil our contractual obligations.
As a data processor: When our business customers issue rewards to their own end-recipients (employees, consumers, partners), QIFTS processes recipient data — such as phone numbers or delivery identifiers — strictly as a data processor on behalf of that business customer. The business customer is the data controller for their recipient data.
Website visitors: We collect standard analytics data (page views, referrers, device type) via privacy-respecting analytics tools. We do not use cross-site tracking or sell data to advertisers.
How we use data
We use data we collect to:
– Operate and improve the QIFTS platform
– Process reward issuance and delivery on behalf of business customers
– Provide customer support and account management
– Meet our legal, compliance, and contractual obligations
– Send transactional and operational communications to platform users
We do not sell personal data to third parties. We do not use recipient data for our own marketing purposes.
Data retention
We retain platform account data for as long as a customer relationship is active and for a reasonable period thereafter as required by our legal obligations. Recipient data processed on behalf of business customers is retained in accordance with the data processing terms agreed in each platform agreement.
You may request deletion of your data by contacting us at privacy@qifts.com.
Cookies
Our website uses essential cookies to function correctly. We may use analytics cookies to understand how the site is used and improve it. We do not use advertising or tracking cookies.
You can manage cookie preferences through your browser settings at any time.
Cross-border data transfers
QIFTS operates across multiple African markets. Data may be processed or stored in jurisdictions outside your home country where our infrastructure and service providers operate. We take appropriate contractual and technical measures to ensure data transferred across borders is protected in accordance with applicable law.
Your rights
Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict the processing of your personal data. Business customers also have rights as data controllers regarding the recipient data they process through our platform.
To exercise any data rights, contact us at privacy@qifts.com. We will respond within 30 days.
Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated to business customers via the platform or email. The date of the most recent version is shown below.
Last updated: May 2025
Questions about this policy? Contact us or email privacy@qifts.com