1. Introduction
Bizcase.ng (“we”, “us”, “our”) is committed to protecting your privacy and ensuring that your personal data is handled in accordance with the Nigeria Data Protection Act, 2023 (“NDP Act”) and relevant directives including the General Application and Implementation Directive (GAID). This Policy explains what personal data we collect, how we use it, how we protect it, and your rights in relation to it.
2. Definition
- Data Subject: Any natural person whose personal data is processed by us.
- Personal Data: Any information relating to an identified or identifiable natural person.
- Processing: Any operation performed on personal data (collection, storage, use, disclosure, deletion, etc.).
- Data Controller / Processor: As defined under the NDP Act. We are the data controller for most processing activities unless otherwise stated.
3. Legal Bases & Principles of Processing
In processing your personal data, we adhere to the principles set out in Section 24 of the NDP Act:
- Processing shall be fair, lawful, and transparent.
- Collected for specified, explicit and legitimate purposes, and not further processed in a manner incompatible with those purposes.
- Data collected shall be adequate, relevant, and limited to what is necessary.
- Retained no longer than necessary for the purposes for which it was collected.
- Accurate, complete, and kept up‐to‐date.
- Processed in a manner that ensures security, including protection against unauthorized or unlawful processing, accidental loss, destruction or damage.
We rely on lawful bases such as:
- Consent of the data subject, where required.
- Contractual necessity (if processing is necessary to fulfill a contract with you).
- Legal obligation (processing required by law).
- Legitimate interest, when your rights are not overridden.
4. Types of Data We Collect
Depending on your interactions with us, we may collect:
- Contact details (name, email address, telephone)
- Usage data (e.g. pages visited, time spent on site, device / browser type)
- Cookies and similar tracking technologies
- Any information you provide in inquiries, feedback, or forms
5. How We Use Your Data
We use your data to:
- Provide and improve our services, content, website functionality
- Respond to your requests, comments, questions
- Send you newsletters or updates, where you have opted in
- Carry out analyses to understand user behaviour and enhance user experience
- Maintain security, prevent fraud, detect abuse
- Comply with legal obligations
6. Cookies and Tracking
We use cookies or similar technologies to customize your experience, analyze site traffic, and detect potential site issues. You have the right to accept or reject cookies (where lawfully required), and to disable certain tracking through your browser settings.
7. Data Sharing, Third-Parties & Cross-Border Transfers
- We may share personal data with trusted service providers (e.g., hosting, analytics, payment processors) for specific tasks under contract, with duties of confidentiality.
- Where cross-border transfers are involved, we will ensure that such transfers comply with the NDP Act’s requirements (for example appropriate safeguards, or specific authorization).
- We will not sell your personal data.
8. Data Retention
We retain your personal data only as long as necessary to fulfill the purposes for which we collected it, including legal, accounting, or reporting requirements. After such time, data will be securely deleted or anonymized.
9. Data Subject Rights
Under the NDP Act, you have the following rights:
- Right to be Informed – to know what personal data we hold and why
- Right of Access – to obtain a copy of your personal data held by us
- Right to Rectification – to correct inaccurate or incomplete data
- Right to Erasure (“Right to be Forgotten”) – in certain circumstances
- Right to Object – where processing is based on consent or legitimate interest
- Right to Data Portability – to receive your data in a usable format and/or transfer it
- Right to Withdraw Consent – where processing depends on consent
- Right to Lodge Complaints – you can lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your data protection rights have been violated.
10. Data Protection Officer (DPO) & Contact
We have appointed a Data Protection Officer (or a responsible contact). You can contact our DPO for any questions about this Policy, to exercise your rights, or about any privacy concerns:
Data Protection Officer: Eleojo Joseph
Email: eleojo@bizcase.ng
Address: Plot 2, TPS 36, Army Signal, Lokoja
11. Privacy by Design & Default
In compliance with the NDP Act and GAID, we adopt technical and organizational measures to ensure privacy by design and by default. This means we integrate data protection in all our systems and processes from the start.
12. Security Measures
We implement reasonable security practices including encryption, access controls, secure storage, regular security audits, and staff training to mitigate risks of data breach, loss, or unauthorized access.
13. Children’s Data
If you are under 18, please get permission from a parent or guardian before submitting personal data. We do not knowingly collect personal data from children without parental consent.
14. Changes to This Policy
We may update this Privacy Policy from time to time. When required by law, we will notify you (for example via email or notice on the site). The revised policy will include an updated “Effective Date”.
15. Governing Law
This Policy is governed by the laws of the Federal Republic of Nigeria, including the Nigeria Data Protection Act, 2023.
16. Contact Us
If you have any questions, concerns, or wish to exercise your rights under this Policy, please contact us at:
Email: support@bizcase.ng
Address: Plot 2, TPS 36, Army Signal, Lokoja.