- INTRODUCTION: BCI: (“us”, “we”, or “our”) understands the criticality of privacy in handling your personal data. Hence, we want you to engage with us knowing that we value your Personal Data and that we protect it. Here you will find details of how we process your Personal Data, the purposes for which we process it, your rights regarding the data we process, and how you can contact us.
- COLLECTABLE PERSONAL DATA: Personal information refers to data that could identify a specific individual such as names, addresses, e-mail addresses, and telephone numbers. Depending on your medium of interaction with BCI (online, offline, mobile phone, etc.), we collect various types of information from you, as described below.
- Contact information: This includes any information you provide to BCI that would allow us to contact you personally, such as your name, residential address, e-mail address, phone number, or next-of-kin information
- Payment and Financial information: Any information that we need to make payments to you, including bank details such as bank name and branch, account name and number, etc.
- Demographic information & interests: Any information that describes your demographic or behavioral characteristics. Examples include your date of birth, age or age range, gender, geographic location (e.g., postcode/zip code), hobbies and interests, and or lifestyle information. We use such information for improving the quality of our service offerings.
- Sensitive Personal Data: We do not seek to collect or otherwise process sensitive personal data in the ordinary course of our business. Sensitive information includes several types of data relating to race, ethnicity, political opinions, religious or other similar beliefs, trade union membership, physical or mental health, sexual tendencies, or criminal records. Where it becomes necessary to process your sensitive personal data for any reason, we rely on your prior express consent for any processing which is voluntary. We may enhance personal information we collect from you with information we obtain from third parties that are entitled to share that information; for example, information from other agencies, search information providers, or public sources, but in each case as permitted by applicable laws.
- CONDITION FOR PROCESSING PERSONAL DATA: BCI Personnel or any third party acting on its behalf shall only process your personal data if at least one of these conditions is met.
- Consent: this refers to any freely given, specific, informed, and unambiguous indication through a statement or a clear affirmative action that signifies your agreement to the processing of your Personal Data by BCI.
- Contract: the processing is necessary for the performance of a contract or entering into a contract at the request of the Data Subject only.
- Legal obligation: the processing is necessary for compliance with a legal obligation to which BCI is subject.
- Vital interest: the processing is necessary to protect the vital interests of the Individual or of another natural person.
- Public interest: the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in BCI
- Proper Motives: BCI shall not seek consent that may engender direct or indirect propagation of atrocities, hate, child rights violation, criminal acts, and anti-social conduct.
- HOW WE USE YOUR PERSONAL DATA: To the extent permissible under applicable law, we may use your information for the following legitimate actions:
- Provide any information and services that you have requested.
- Compare information for accuracy and to verify it with third parties
- Manage our relationships with you
- Processing of employee benefit plan
- to monitor, and carry out statistical analysis and benchmarking, provided that in such circumstances it is on an aggregated basis which will not be linked back to you or any living individual.
- USER RIGHTS: You have rights when it comes to our handling of your Personal Data. Those rights include:
- the right to request access to their Personal Data where those requests are reasonable and permitted by law or regulation. BCI shall provide reasonable and accessible means for Individuals to submit their requests, which do not have to take any specific form and can be submitted by any method.
- the right to request that BCI erase your Personal Data if it is no longer valid or necessary for the purposes for which it was collected or if it is incomplete or inaccurate.
- the right to rectify or amend inaccurate or incomplete Personal Data. — the right to withdraw their consent at any time. This can be initiated by contacting BCI.
- the right to object to BCI’s processing of their Personal Data if there are compelling legitimate grounds to do so and to the extent permitted by law or regulation. Individuals have the right to object to BCI’s processing of their Personal Data for direct marketing purposes.
- the right to receive your Personal Data in a commonly used and machine-readable format and the right to transmit these data to another Data Controller when the processing is based on (explicit) consent or when the processing is necessary for the performance of a contract.
- the right to lodge a complaint with the National IT Development Agency (NITDA) if you believe our processing of your data violates the requirements of the Nigeria Data Protection Regulation 2019 (NDPR).
- DATA COLLECTION METHODS: Electronic Messages: We keep a record of your interactions with us via electronic media (such as email, text messages, complaint forms, etc.) in a secure manner while maintaining accuracy. When necessitated by legal or vital obligations, we archive these communications. Hard Copy Forms: We maintain accurate records of the information that you provide to us via hard copy forms in a secure manner. When necessitated by legal or vital obligations, we archive these communications. Web Forms: We keep a record of your personal details provided via our website. Typically, such details are processed for recruitment purposes and are kept in a secure manner.
- TRANSFER OF PERSONAL DATA: Personal data collected by BCI may be transferred among its various divisions and affiliated companies, around the world, as well as transferred to select partners with your consent. The following describes the various scenarios in which we may share your Personal Data with a third party.
- Transfer for Service Provision: We employ other companies and individuals to perform functions on our behalf as service providers. Service providers, and their selected staff, are only allowed to access and use your Personal Data on Our behalf for the specific tasks that they have been requested to carry out, based on our instructions, and are required to keep your Personal Data confidential and secure.
- Transfer as a legal requirement: We may share your information with other parties when required by law or as necessary to protect our service. We may also share your information in connection with a transfer of assets, or if we are otherwise involved in a merger or transfer.
- Inter-Company transfers: Your Personal Data may be transferred to or accessible by other entities within the BCI. However, these entities will be bound by the terms of this Policy.
- Out-of-Country Transfer: Your Personal Data may be transferred to a foreign country for storage or processing where it is necessary to do so in line with the permissible conditions defined by the NDPR. We will ensure that appropriate safeguards are in place to ensure the protection of your Personal Data being stored or processed out of the country.
- HOW WE ENSURE PROTECTION OF YOUR PERSONAL DATA: We use appropriate measures (including physical access controls and secure software and operating environments) to keep your Personal Data confidential and secure. Please note, however, that these protections do not apply to information you choose to share in public areas such as third-party social networks. Data Retention Policy:
We ensure that your personal data are not retained for longer than necessary as determined by our data retention policy to reduce the likelihood/severity of a data breach.
Personal Data Breach Notification: BCI will inform relevant authorities and if necessarily affected individuals of a personal data breach within 72 hours of being aware of the breach where Personal Breach refers to a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data. This includes breaches that are the result of both accidental and deliberate causes.
- COOKIES AND HOW WE USE THEM: A cookie is a small file of letters and numbers that we put on your computer if you agree. Cookies allow us to distinguish you from other users of our website and mobile applications, which helps us to provide you with an enhanced browsing experience.
For example, we use cookies for the following purposes: – Recognizing and counting the number of visitors and to see how visitors move around the site when they are using it (this helps us to improve the way our website works, for example by ensuring that users can find what they are looking for).
- Identifying your preferences and e.g., language settings, saved items, browsing behavior, and
- Sending you newsletters and notification messages tailored to your interests. Our approved third parties may also set cookies when you use our website. Third parties include search engines, providers of measurement and analytics services, and social media networks.
10. CHANGES TO THIS NOTICE: If we change the way We handle your Personal Data, we will update this Notice. We reserve the right to make changes to our practices and this Notice at any time, please check back frequently to see any updates or changes to our Notice.
- DATA CONTROLLER & CONTACT Any question regarding this policy can be sent to us via info@bostocke.com
