Cookie Policy
Effective Date: January 1, 2026 | Last Updated: January 7, 2026
This Cookie Policy explains how Utopie Pay Concierge uses cookies and similar tracking technologies in compliance with NDPR 2019, GDPR, ePrivacy Directive, and international data protection standards governing cross-border trade and payment processing.
1. What Are Cookies and Tracking Technologies
Cookies are small text files stored on your device when you access our platform. We use them to authenticate users, remember preferences, analyze usage patterns, and ensure platform security - all critical for international trade operations.
1.1 Types of Technologies
- HTTP Cookies: Standard browser cookies for session management
- Authentication Tokens: Secure JWT tokens for user authentication
- Local Storage: Browser storage for offline capabilities
- Web Beacons: Tracking pixels for email delivery confirmation
- Device Fingerprinting: Security measure to detect fraudulent access
2. Categories of Cookies We Use
2.1 Strictly Necessary Cookies (Cannot Be Disabled)
Essential for platform functionality under contractual necessity:
| Cookie | Purpose | Duration |
|---|---|---|
| auth_token | User authentication and session management | 7 days |
| csrf_token | Security protection against cross-site attacks | Session |
| session_id | Maintain continuous session across platform | Session |
| user_role | Store user role (CLIENT, ADMIN, SUPER_ADMIN) | 7 days |
2.2 Security and Fraud Prevention Cookies
Required for CBN AML/CFT compliance and customs security:
- Device Fingerprinting: Detect suspicious login attempts from unknown devices
- Rate Limiting Tokens: Prevent API abuse and DDoS attacks
- Transaction Monitoring: Track patterns for anti-money laundering as required by CBN Regulations 2022
- Bot Detection: Distinguish legitimate users from automated bots
- 2FA State: Two-factor authentication session management
2.3 Functional Cookies (Consent-Based)
Enhance user experience and remember preferences:
- Currency Preference: NGN, USD, EUR, CNY, GBP selection
- Language: English or other supported languages
- Dashboard Layout: Widget positions and preferences
- Notification Settings: Email, SMS, push notification preferences
- Recent Activity: Quick access to recent shipments
2.4 Analytics and Performance Cookies (Legitimate Interest)
Help us improve platform performance:
- Page Load Times: Monitor and optimize performance
- Feature Usage: Understand which features are most valuable
- Error Tracking: Identify and fix technical issues
- Navigation Patterns: Improve user interface and workflows
- A/B Testing: Test improvements before full deployment
3. Third-Party Cookies and Service Providers
3.1 Payment Processing (PCI-DSS Compliant)
Stripe: International card payments, fraud detection - Privacy Policy
Paystack: Nigerian payment gateway - Privacy Policy
Flutterwave: African payment methods - Privacy Policy
3.2 Infrastructure and Hosting
Vercel: Platform hosting and edge network - Privacy Policy
Supabase: Database and authentication - Privacy Policy
Cloudflare: Security and CDN - Privacy Policy
3.3 Communication Services
WhatsApp Business API: Customer support messaging
Twilio: SMS and voice communications
SendGrid: Transactional email delivery
4. Managing Your Cookie Preferences
4.1 Browser-Level Controls
All major browsers allow cookie management:
- Google Chrome: Settings → Privacy and Security → Cookies
- Mozilla Firefox: Options → Privacy & Security → Cookies
- Safari: Preferences → Privacy → Manage Website Data
- Microsoft Edge: Settings → Privacy → Cookies
Note: Blocking essential cookies will prevent you from using our customs clearance services.
4.2 Platform Cookie Settings
Manage cookie preferences directly in your account settings at any time. You can:
- Enable/disable analytics cookies
- Opt out of marketing cookies
- Clear all non-essential cookies
- Download your cookie data under NDPR data portability rights
5. Data Retention and Cookie Lifespan
Session Cookies: Automatically deleted when you close your browser
Short-term Persistent: 7-30 days for authentication and preferences
Long-term Persistent: Up to 1 year for user preferences (with consent)
Maximum Retention: No cookie stored longer than 2 years (NDPR compliance)
6. International Data Transfers via Cookies
Some cookies may transfer data internationally to service providers in USA, EU, and Canada. We ensure adequate safeguards through:
- Standard Contractual Clauses (SCCs) approved by NITDA
- Binding Corporate Rules for multinational providers
- Privacy Shield Framework compliance where applicable
- Encryption in transit using TLS 1.3
7. Your Rights Under NDPR and GDPR
You have the following rights regarding cookies and tracking:
- Right to Object: Opt-out of non-essential cookies at any time
- Right to Access: Request information about cookies placed on your device
- Right to Erasure: Request deletion of cookie data (except where legally required)
- Right to Withdraw Consent: Change cookie preferences in account settings
- Right to Lodge Complaint: Contact NITDA or your local data protection authority
8. Updates to This Cookie Policy
We may update this Cookie Policy to reflect changes in technology, regulations, or our services. Material changes will be communicated via:
- Prominent notice on our platform homepage
- Email notification to registered users
- In-app notification upon next login
Continued use after notification constitutes acceptance of updated terms.
9. Contact Information
Data Protection Officer:
Email: dpo@utopiepay.com
Phone: +234 816 919 6841
Privacy Inquiries:
Email: privacy@utopiepay.com
Address: No. 7 Awofeso Street, Lagos, Nigeria
Regulatory Authority:
National Information Technology Development Agency (NITDA)
Email: info@nitda.gov.ng