SCOPE
This policy applies to all personal data processed by SPI Consulting Limited in the context of our consulting services, including data collected from clients, employees, prospective employees, vendors, partners, and website users
Legal Basis for Processing
We process personal data in accordance with the principles and legal bases set out under the NDPA, including:
– Consent of the data subject
– Necessity for the performance of a contract
– Compliance with a legal obligation
– Legitimate interests pursued by SPI Consulting Limited or a third party
– Protection of vital interests
– Public interest or official authority (where applicable)
Types of Personal Data We Collect
We may collect the following categories of personal data:
– Identification Data: Name, gender, date of birth, national ID, passport number
– Contact Data: Email address, phone number, mailing address
– Professional Data: Employer, job title, qualifications, and work history
– Financial Data: Bank details (for payments), invoice records
– Technical Data: IP address, browser type, login data, device identifiers
How We Collect Personal Data
We collect personal data through:
– Direct interactions
– Employment processes
– Third parties
– Automated technologies
Data Sharing and Disclosure
We may share your data with employees, third-party service providers, professional advisors, regulators, or with your consent. All processors are contractually bound under the NDPA.
Data Transfer Outside Nigeria
We ensure adequate safeguards for international data transfers, including adequacy decisions or standard contractual clauses, and notify data subjects accordingly.
Data Security
We implement measures including encryption, firewalls, access controls, and regular audits to protect personal data.
Data Retention
We retain data only as long as necessary and securely dispose of it after the retention period.
Your Rights Under the NDPA
You have the right to:
– Be informed
– Access data
– Rectify data
– Erase data
– Data portability
– Object to processing
– Withdraw consent
– Lodge a complaint with the NDPC
Use of Cookies and Tracking Technologies
Our website may use cookies to enhance user experience. You can manage cookies via browser settings.We are not responsible for the privacy practices of third-party websites linked through our services.
Data Breach Notification
In the event of a breach, we will notify the NDPC within 72 hours and affected individuals as required.
Changes to This Privacy Policy
We may update this policy and notify you of significant changes.
Contact Us
Data Protection Officer
SPI Consulting Limited
info@spiconsulting.africa
16, Abiodun Odeseye Street, Gbagada, Lagos