<?php

require_once __DIR__ . '/config/database.php';


$business = [
    'company_name'     => 'Complete Bliss Solutions',
    'support_phone'    => '',
    'support_email'    => '',
    'support_whatsapp' => ''
];


try {

    $statement = $pdo->query(
        "
        SELECT
            company_name,
            support_phone,
            support_email,
            support_whatsapp
        FROM settings
        LIMIT 1
        "
    );

    $settings = $statement->fetch(PDO::FETCH_ASSOC);

    if ($settings) {

        $business = array_merge(
            $business,
            $settings
        );

    }

} catch (PDOException $e) {

    /* Use fallback values */

}


$companyName =
    !empty($business['company_name'])
        ? $business['company_name']
        : 'Complete Bliss Solutions';

$pageTitle =
    'Privacy Policy | Complete Bliss Solutions';

$pageDescription =
    'Learn how Complete Bliss Solutions collects, uses, protects and manages personal information, payment records and member data.';

$pageKeywords =
    'Complete Bliss privacy policy, data protection, member privacy, payment data protection Nigeria';

$pageRobots =
    'index, follow';

    
require_once
    __DIR__ .
    '/public-site/includes/header.php';


require_once
    __DIR__ .
    '/public-site/includes/navbar.php';

?>


<main>


<section class="cbx-legal-hero">

    <div class="cbx-container">

        <div class="cbx-legal-hero-content">

            <span class="cbx-legal-eyebrow">

                <i class="fa-solid fa-user-shield"></i>

                PRIVACY & DATA PROTECTION

            </span>


            <h1>
                Privacy Policy
            </h1>


            <p>
                This Privacy Policy explains what personal
                information <?= htmlspecialchars($companyName) ?>
                collects, why we collect it, how we use it and
                the steps we take to protect it.
            </p>


            <div class="cbx-legal-meta">

                <span>

                    <i class="fa-regular fa-calendar"></i>

                    Effective:
                    24 August 2026

                </span>


                <span>

                    <i class="fa-solid fa-lock"></i>

                    Member Data Protection

                </span>

            </div>

        </div>

    </div>

</section>



<section class="cbx-legal-section">

    <div class="cbx-container">

        <div class="cbx-legal-layout">


            <!-- SIDEBAR -->

            <aside class="cbx-legal-sidebar">

                <div class="cbx-legal-sidebar-card">

                    <span>
                        ON THIS PAGE
                    </span>

                    <a href="#introduction">
                        1. Introduction
                    </a>

                    <a href="#information">
                        2. Information We Collect
                    </a>

                    <a href="#purpose">
                        3. How We Use Information
                    </a>

                    <a href="#payments">
                        4. Payments & KYC
                    </a>

                    <a href="#sharing">
                        5. Data Sharing
                    </a>

                    <a href="#security">
                        6. Data Security
                    </a>

                    <a href="#retention">
                        7. Data Retention
                    </a>

                    <a href="#cookies">
                        8. Cookies & Technology
                    </a>

                    <a href="#rights">
                        9. Your Rights
                    </a>

                    <a href="#third-parties">
                        10. Third Parties
                    </a>

                    <a href="#changes">
                        11. Policy Changes
                    </a>

                    <a href="#contact">
                        12. Contact Us
                    </a>

                </div>

            </aside>



            <div class="cbx-legal-content">


                <div class="cbx-legal-intro">

                    <div>

                        <i class="fa-solid fa-circle-info"></i>

                    </div>

                    <p>
                        By registering for or using Complete Bliss,
                        you acknowledge that your information may be
                        processed as described in this Privacy Policy
                        and as permitted by applicable law.
                    </p>

                </div>



                <!-- 1 -->

                <article
                    class="cbx-legal-block"
                    id="introduction"
                >

                    <span>
                        SECTION 01
                    </span>


                    <h2>
                        Introduction
                    </h2>


                    <p>
                        <?= htmlspecialchars($companyName) ?>
                        respects the privacy of its members and
                        visitors and is committed to handling
                        personal information responsibly.
                    </p>


                    <p>
                        We collect and process information that is
                        reasonably necessary to provide member
                        accounts, wallet services, contribution
                        schemes, payment processing, support,
                        security and related services.
                    </p>

                </article>



                <!-- 2 -->

                <article
                    class="cbx-legal-block"
                    id="information"
                >

                    <span>
                        SECTION 02
                    </span>


                    <h2>
                        Information We May Collect
                    </h2>


                    <p>
                        Depending on the services you use, Complete
                        Bliss may collect information including:
                    </p>


                    <ul>

                        <li>
                            Full name.
                        </li>

                        <li>
                            Phone number.
                        </li>

                        <li>
                            Email address where provided.
                        </li>

                        <li>
                            Account login and security information.
                        </li>

                        <li>
                            Wallet and contribution records.
                        </li>

                        <li>
                            Scheme participation and number of hands.
                        </li>

                        <li>
                            Payment references and transaction records.
                        </li>

                        <li>
                            Uploaded payment evidence where applicable.
                        </li>

                        <li>
                            Support communications and account requests.
                        </li>

                        <li>
                            Device, browser, IP address and security
                            information where technically necessary.
                        </li>

                    </ul>


                    <div class="cbx-legal-highlight">

                        <i class="fa-solid fa-database"></i>

                        <p>
                            Complete Bliss should only request
                            personal information that is relevant
                            to operating, securing or supporting
                            the platform.
                        </p>

                    </div>

                </article>



                <!-- 3 -->

                <article
                    class="cbx-legal-block"
                    id="purpose"
                >

                    <span>
                        SECTION 03
                    </span>


                    <h2>
                        How We Use Your Information
                    </h2>


                    <p>
                        Personal information may be used for purposes
                        including:
                    </p>


                    <ul>

                        <li>
                            Creating and maintaining your member account.
                        </li>

                        <li>
                            Authenticating your identity and securing
                            your account.
                        </li>

                        <li>
                            Maintaining wallet and transaction records.
                        </li>

                        <li>
                            Processing scheduled contributions.
                        </li>

                        <li>
                            Managing schemes, defaults and clearance.
                        </li>

                        <li>
                            Processing and verifying payments.
                        </li>

                        <li>
                            Sending account and transaction notifications.
                        </li>

                        <li>
                            Providing customer support.
                        </li>

                        <li>
                            Detecting suspicious activity, misuse or fraud.
                        </li>

                        <li>
                            Meeting legitimate legal, regulatory,
                            accounting or payment-provider requirements.
                        </li>

                    </ul>

                </article>



                <!-- 4 -->

                <article
                    class="cbx-legal-block"
                    id="payments"
                >

                    <span>
                        SECTION 04
                    </span>


                    <h2>
                        Payments, Virtual Accounts and KYC
                    </h2>


                    <p>
                        Complete Bliss may use banks and third-party
                        payment providers to receive, verify and
                        reconcile member payments.
                    </p>


                    <p>
                        Where virtual accounts or automated payment
                        services are used, certain member information
                        may be shared with the relevant payment provider
                        for customer creation, payment verification,
                        account assignment, fraud prevention or
                        regulatory compliance.
                    </p>


                    <p>
                        Where required by an approved payment provider
                        or applicable regulation, additional identity
                        verification information may be requested.
                    </p>


                    <div class="cbx-legal-highlight warning">

                        <i class="fa-solid fa-id-card"></i>

                        <p>
                            Sensitive identity information such as BVN,
                            bank-account verification information or
                            similar KYC details should only be requested
                            where necessary for an approved service and
                            must be handled with additional security.
                        </p>

                    </div>


                    <p>
                        Complete Bliss should not request or store a
                        member's banking password, ATM PIN, card PIN
                        or one-time banking password.
                    </p>

                </article>



                <!-- 5 -->

                <article
                    class="cbx-legal-block"
                    id="sharing"
                >

                    <span>
                        SECTION 05
                    </span>


                    <h2>
                        When We May Share Information
                    </h2>


                    <p>
                        Complete Bliss does not sell member personal
                        information.
                    </p>


                    <p>
                        Information may be shared only where reasonably
                        necessary with categories of recipients such as:
                    </p>


                    <ul>

                        <li>
                            Banks and payment service providers.
                        </li>

                        <li>
                            Identity-verification or KYC providers
                            where required.
                        </li>

                        <li>
                            Hosting, infrastructure and security
                            service providers.
                        </li>

                        <li>
                            Professional advisers where appropriate.
                        </li>

                        <li>
                            Government, regulatory or law-enforcement
                            authorities where legally required.
                        </li>

                    </ul>


                    <p>
                        Service providers should only receive
                        information appropriate to the service
                        they are performing.
                    </p>

                </article>



                <!-- 6 -->

                <article
                    class="cbx-legal-block"
                    id="security"
                >

                    <span>
                        SECTION 06
                    </span>


                    <h2>
                        How We Protect Information
                    </h2>


                    <p>
                        Complete Bliss uses reasonable administrative,
                        technical and organizational measures designed
                        to protect personal and financial records.
                    </p>


                    <ul>

                        <li>
                            Passwords are stored using secure hashing
                            rather than plain-text passwords.
                        </li>

                        <li>
                            Access to administrative functions is
                            restricted.
                        </li>

                        <li>
                            Payment confirmations should be verified
                            through trusted payment channels.
                        </li>

                        <li>
                            Sensitive API credentials are kept
                            server-side.
                        </li>

                        <li>
                            Important financial transactions are
                            recorded for audit and reconciliation.
                        </li>

                        <li>
                            Production services should operate over
                            secure HTTPS connections.
                        </li>

                    </ul>


                    <p>
                        No internet-based system can guarantee absolute
                        security, but reasonable measures will be
                        maintained and improved as the platform grows.
                    </p>

                </article>



                <!-- 7 -->

                <article
                    class="cbx-legal-block"
                    id="retention"
                >

                    <span>
                        SECTION 07
                    </span>


                    <h2>
                        How Long We Keep Information
                    </h2>


                    <p>
                        Complete Bliss retains information only for
                        as long as reasonably necessary for the
                        purpose for which it was collected, including
                        account administration, transaction records,
                        dispute resolution, compliance, accounting
                        and legal requirements.
                    </p>


                    <p>
                        Some financial or transaction records may need
                        to be retained even after a member stops using
                        the platform where there is a legitimate
                        business or legal reason to do so.
                    </p>

                </article>



                <!-- 8 -->

                <article
                    class="cbx-legal-block"
                    id="cookies"
                >

                    <span>
                        SECTION 08
                    </span>


                    <h2>
                        Cookies and Technical Information
                    </h2>


                    <p>
                        Complete Bliss may use cookies, sessions and
                        similar technologies that are necessary for
                        website functionality, authentication,
                        security and user experience.
                    </p>


                    <p>
                        Where optional analytics, advertising or
                        non-essential tracking technologies are added
                        in the future, appropriate notices or controls
                        may be provided where required.
                    </p>

                </article>



                <!-- 9 -->

                <article
                    class="cbx-legal-block"
                    id="rights"
                >

                    <span>
                        SECTION 09
                    </span>


                    <h2>
                        Your Privacy Rights
                    </h2>


                    <p>
                        Subject to applicable law and any legitimate
                        limitations, members may have rights concerning
                        their personal information.
                    </p>


                    <ul>

                        <li>
                            Ask what personal information is held
                            about you.
                        </li>

                        <li>
                            Request correction of inaccurate
                            information.
                        </li>

                        <li>
                            Object to certain processing.
                        </li>

                        <li>
                            Request restriction of certain processing.
                        </li>

                        <li>
                            Request portability of information where
                            applicable.
                        </li>

                        <li>
                            Withdraw consent where processing depends
                            on consent.
                        </li>

                        <li>
                            Request deletion where applicable and where
                            there is no overriding lawful reason to
                            retain the information.
                        </li>

                        <li>
                            Raise concerns or complaints concerning the
                            handling of your personal information.
                        </li>

                    </ul>


                    <p>
                        Complete Bliss may need to verify the identity
                        of a person making a privacy request before
                        releasing or modifying account information.
                    </p>

                </article>



                <!-- 10 -->

                <article
                    class="cbx-legal-block"
                    id="third-parties"
                >

                    <span>
                        SECTION 10
                    </span>


                    <h2>
                        Third-Party Services
                    </h2>


                    <p>
                        The Complete Bliss website or platform may
                        interact with third-party services such as
                        payment gateways, banks, email services,
                        hosting providers or communication providers.
                    </p>


                    <p>
                        Those organizations may process information
                        according to their own privacy policies and
                        applicable legal obligations.
                    </p>


                    <p>
                        Complete Bliss will endeavour to use reputable
                        providers appropriate to the services being
                        offered.
                    </p>

                </article>



                <!-- 11 -->

                <article
                    class="cbx-legal-block"
                    id="changes"
                >

                    <span>
                        SECTION 11
                    </span>


                    <h2>
                        Changes to this Privacy Policy
                    </h2>


                    <p>
                        This Privacy Policy may be updated as Complete
                        Bliss introduces new features, payment
                        providers, identity-verification processes,
                        legal requirements or operational practices.
                    </p>


                    <p>
                        The effective date shown at the top of this
                        page should be updated whenever a material
                        revision is made.
                    </p>

                </article>



                <!-- 12 -->

                <article
                    class="cbx-legal-block"
                    id="contact"
                >

                    <span>
                        SECTION 12
                    </span>


                    <h2>
                        Privacy Questions and Requests
                    </h2>


                    <p>
                        Members may contact Complete Bliss concerning
                        personal-data questions, corrections, access
                        requests or other privacy concerns.
                    </p>


                    <div class="cbx-legal-contact-grid">


                        <?php if (!empty($business['support_phone'])): ?>

                            <div>

                                <i class="fa-solid fa-phone"></i>

                                <span>

                                    <small>
                                        PHONE
                                    </small>

                                    <strong>

                                        <?= htmlspecialchars(
                                            $business['support_phone']
                                        ) ?>

                                    </strong>

                                </span>

                            </div>

                        <?php endif; ?>


                        <?php if (!empty($business['support_email'])): ?>

                            <div>

                                <i class="fa-solid fa-envelope"></i>

                                <span>

                                    <small>
                                        EMAIL
                                    </small>

                                    <strong>

                                        <?= htmlspecialchars(
                                            $business['support_email']
                                        ) ?>

                                    </strong>

                                </span>

                            </div>

                        <?php endif; ?>


                    </div>

                </article>



                <div class="cbx-legal-final">

                    <i class="fa-solid fa-user-shield"></i>


                    <div>

                        <h3>
                            Your information matters
                        </h3>


                        <p>
                            Complete Bliss is committed to using
                            personal information responsibly and only
                            for legitimate platform, security,
                            payment and compliance purposes.
                        </p>

                    </div>

                </div>


            </div>

        </div>

    </div>

</section>


</main>


<?php

require_once
    __DIR__ .
    '/public-site/includes/footer.php';

?>