Data Policies & SLAs

1. Introduction

Nugi Technologies Ltd is committed to ensuring the privacy and security of all personal and sensitive data collected, processed and stored during its operations. This Data Protection Policy outlines the measures and procedures in place to safeguard data by relevant data protection laws and regulations.

2. Scope

This policy applies to all employees, contractors, third-party vendors, and other entities engaged in activities involving the collection, processing, or storage of personal data on behalf of Nugi Technologies.

3. Data Collection and Processing

3.1. Only personal data necessary for the performance of legitimate business activities will be collected and processed.

3.2. Personal data will be collected lawfully, fairly, and transparently, with individuals informed of the purposes for which their data is being collected and processed.

3.3. Data subjects will have the right to access, rectify, or erase their data by applicable data protection laws.

3.4. Data minimization: Personal data collected will be limited to what is necessary for the purposes for which it is processed.

4. Data Security

4.1. Appropriate technical and organizational measures will be implemented to ensure the confidentiality, integrity, and availability of personal data.

4.2. Access to personal data will be restricted to authorized personnel on a need-to-know basis, and all employees and contractors will receive training on data protection principles and best practices.

4.3. All data processing activities will be conducted in a secure environment, with regular monitoring, testing, and evaluation of security measures to identify and address vulnerabilities.

5. Data Retention and Disposal

5.1. Personal data will only be retained for as long as necessary to fulfill the purposes for which it was collected, or as required by law or contractual obligations.

5.2. Data that is no longer required will be securely disposed of by established procedures to prevent unauthorized access or disclosure.

6. Data Transfer

6.1. Personal data will only be transferred to third parties or external entities where necessary for the fulfillment of contractual obligations or with the explicit consent of the data subject.

6.2. Adequate safeguards will be implemented to ensure the protection of personal data during transfer, including the use of data processing agreements and compliance with relevant data protection laws.

7. Compliance and Accountability

7.1. Nugi Technologies is committed to complying with all applicable data protection laws and regulations, including but not limited to the General Data Protection Regulation (GDPR) and the Nigeria Data Protection Commission (NDPC).

7.2. The Data Protection Officer (DPO) is responsible for overseeing compliance with this policy and ensuring that all data protection obligations are met.

7.3. Employees and contractors are expected to report any data breaches or non-compliance with this policy to the DPO immediately.

8. Review and Amendment

This Data Protection Policy will be reviewed regularly and updated as necessary to reflect changes in legal or regulatory requirements, business operations, or technological advancements.

9. Contact Information

For inquiries or concerns regarding data protection practices at Nugi Technologies, please contact the Data Protection Officer at dpo@nugitech.com

10. Effective Date

This Data Protection Policy is effective as of April 2021.