Last updated: April 22, 2023
NDPR Compliance Statement for Credit Cliq Technologies LTD
Credit Cliq Technologies LTD ("we", "us", "our") is committed to protecting the privacy and personal data of our users in compliance with the Nigeria Data Protection Regulation (NDPR).
Legal Basis for Processing Personal Data
We only process personal data when we have a legal basis for doing so, such as:
When you have given us your consent to process your personal data.
When processing is necessary to provide our Services, such as processing loan applications.
When processing is necessary to comply with applicable laws, regulations, or legal requests.
Rights of Data Subjects
Under the NDPR, individuals have the following rights:
The right to be informed: Data subjects have the right to be informed about the collection and use of their personal data.
The right to access their personal data: Data subjects have the right to request access to their personal data and information about how it is being processed.
The right to rectify their personal data: Data subjects have the right to request that inaccurate or incomplete personal data be corrected.
The right to erasure of their personal data: Data subjects have the right to request the erasure of their personal data.
The right to restrict processing: Data subjects have the right to request that their personal data be restricted from processing.
The right to data portability: Data subjects have the right to request a copy of their personal data in a structured, commonly used, and machine-readable format.
The right to object to processing: Data subjects have the right to object to the processing of their personal data.
The right to withdraw consent: Data subjects have the right to withdraw their consent to the processing of their personal data.
Data Transfers
We may transfer personal data to third parties located outside Nigeria. When we do so, we take appropriate measures to ensure that the data is protected in accordance with NDPR requirements, such as by implementing standard contractual clauses or obtaining your explicit consent.
Security of Personal Data
We take appropriate technical and organizational measures to protect personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. We also limit access to personal data to employees and contractors who have a need to know the information.
Data Breach Notification
In the event of a data breach, we will notify affected individuals and the relevant supervisory authority within 72 hours of becoming aware of the breach, unless the breach is unlikely to result in a risk to the rights and freedoms of individuals.
Retention of Personal Data
We retain personal data for as long as necessary to provide our Services or for other essential purposes, such as complying with legal obligations or resolving disputes.
Updates to this Statement
We may update this NDPR compliance statement from time to time. If we make any material changes, we will notify you by posting the updated statement on our website or by sending you an email.