Privacy policy

Data / Privacy Policy

1. Purpose

Valuedity is committed to protecting the privacy and security of personal data entrusted to us by our community members, clients, partners, employees, and website visitors. This Data/Privacy Policy explains how we collect, use, store, and protect that data, and the rights you have over it. It reflects our commitment to the Nigeria Data Protection Act 2023 and to handling personal data lawfully, fairly, and transparently.

2. Scope

This policy applies to all personal information we process during our operations, whether collected online, in person, or through our services. It applies to all team members, contractors, interns, volunteers, members, clients, and partners who handle personal data on behalf of Valuedity.

3. What Data We Collect

We may collect the following types of personal data:

• Contact Information: Name, email address, phone number, postal address.
• Identity Data: Names, usernames, profile information, dates of birth.
• Professional Data: Employment details and business information for recruitment and Premium members.
• Financial Data: Payment details and information necessary for processing transactions (e.g., for Premium membership or professional services).
• Technical Data: IP addresses, browser types, device information, and usage patterns when interacting with our website or digital platforms.
• Interaction Data: Records of your participation in our community, programs, or events.

4. How We Collect Data

We collect data:

• Directly when you provide it to us (e.g., when you register for an account, apply for a program, or contact our customer service team).
• Through our digital platforms (e.g., website analytics and cookies).
• From third-party sources when you have permitted them to share their data with us.

5. How We Use Data

We use your personal data to:

• Provide you with access to our services, community, and programs.
• Manage your account and provide customer support.
• Communicate with you about updates, services, and marketing (where you have consented).
• Process transactions and manage our business records.
• Comply with legal and regulatory requirements.
• Conduct research and analytics to improve our offerings.
• Verify your identity and prevent fraud.

6. Lawful Basis for Processing

We process personal data only where we have a lawful basis to do so. These include:

• Your consent, for example for marketing communications.
• Performance of a contract, for example to deliver a service you have paid for.
• Compliance with a legal obligation, for example keeping financial records.
• Our legitimate interests, for example improving our services and preventing fraud, where those interests are not outweighed by your rights.

You may withdraw your consent at any time, without affecting processing carried out before withdrawal.

7. Data Sharing and Disclosure

We will not sell, rent, or trade your personal data. We may share your data with:

• Service Providers: Third parties that assist us in delivering services (e.g., payment processors, hosting providers, marketing platforms) who are bound by strict contractual obligations to protect your data.
• Legal and Regulatory Bodies: When required by law or in response to legal process (e.g., a court order or government request).
• Organisational Transactions: In the event of a merger, acquisition, or asset sale, your data may be transferred to the new owner.

Where we transfer personal data outside Nigeria, we do so only where the receiving party is subject to protections that are at least equivalent to those under Nigerian data protection law, or where another lawful transfer mechanism applies.

8. Data Storage and Security

• Location: Data is stored securely on servers. We take reasonable technical and organisational measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction.
• Data Retention: We retain your personal data only for as long as necessary to fulfil the purposes it was collected for, and to comply with legal, accounting, or reporting requirements. Our retention periods by data type are set out in section 9.

9. Data Retention Schedule

We keep personal data only for as long as necessary for the purpose it was collected, and to meet legal, accounting, or reporting requirements. The retention periods are:

• Member records: Retained for the duration of membership and for 6 years after membership ends.
• Financial records: Retained for 6 years after the end of the financial year in which the transaction occurred.
• Technical logs: Retained for 12 months.
• Interaction data: Retained for 3 years after the last interaction.
• Professional data: Retained for 3 years after the application or engagement ends.
• Identity data: Retained for the duration of the relationship and for 6 years afterwards.

10. Your Data Protection Rights

In accordance with the Nigeria Data Protection Act 2023 and other applicable laws, you have rights regarding your personal data, including:

• Access: The right to request a copy of the data we hold on you.
• Rectification: The right to correct inaccurate or incomplete data.
• Erasure: The right to request the deletion of your data (the "right to be forgotten").
• Restriction: The right to ask us to limit how we use your data.
• Portability: The right to receive your data in a structured, commonly used format.
• Objection: The right to object to certain types of processing (e.g., direct marketing).
• Withdrawal of Consent: The right to withdraw your consent to marketing communications at any time.

These rights are not absolute. We will explain if a request cannot be granted in full.

11. How to Exercise Your Rights

To exercise any of these rights, or for any questions about this policy, please contact us at info@valuedity.com or +234 704 775 3322.

We will respond to all access, rectification, and erasure requests within 30 days of receipt. If we need more time to respond, we will inform you within that period and explain why. We will not charge a fee unless a request is clearly unfounded or excessive.

12. Breach Notification

If we become aware of a personal data breach, we will:

• Notify affected individuals within 72 hours of becoming aware of the breach, where the breach poses a risk to their rights and freedoms.
• Notify the relevant regulatory body (the Nigeria Data Protection Commission) within 72 hours of becoming aware of the breach, where required by law.
• Take immediate steps to contain the breach and prevent further unauthorised access.
• Investigate the cause of the breach and take steps to prevent a similar breach in the future.

If a breach is unlikely to result in a risk to individuals' rights and freedoms, we may not need to notify affected individuals, but we will keep an internal record of it.

13. Cookies and Similar Technologies

Our website may use cookies and similar technologies to remember your preferences, understand how the site is used, and improve your experience. You can control cookies through your browser settings. Disabling cookies may affect how parts of our website work.

14. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or the law. The current version will always be available on our website, and we will take reasonable steps to bring significant changes to your attention.

15. Contact Us

If you have questions or concerns about this policy or how we handle your personal data, please contact us at info@valuedity.com or +234 704 775 3322. You also have the right to lodge a complaint with the Nigeria Data Protection Commission.