1. INTRODUCTION

EnterpriseNGR has created this Privacy Policy to explain how EnterpriseNGR collects, uses, discloses and protects your Personal Data, including any other information.

You accept this Privacy Policy and hereby give EnterpriseNGR consent to save, process and use your Personal Data to the extent as allowed by law when you provide us with details of your Personal Data or by clicking on the “accept” button.

We may change this Privacy Policy from time to time. If we make changes, we will notify you by revising the date at the top of this Policy, and in some cases, we may provide you with additional notice (such as by adding a statement to the homepages of our website or by sending you an email notification).

We encourage you to review the Privacy Policy whenever you interact with us to stay informed about our information practices and the ways you can help protect your privacy. 

2. COLLECTION OF INFORMATION

We may collect and process the following information about you:

• Information that you provide to us, for example when you fill out a contact or web form, or if you register to receive alerts or updates.
• When you provide your Personal Data while signing up for a service or registering for any of our initiatives.
• Personal Data that we obtain or learn, such as information about the browser or device you use to access this site, how you use this site and the pages you visit, traffic and location data. 
• When you contact our customer support whether by phone, email, or chat.
• We may also ask you for information if you experience problems when using this site. We may also ask you to complete surveys for research purposes, although you don’t have to respond to these.

3. USE OF PERSONAL DATA

We may use your Personal Data, including non-public Personal Data as follows:

1. Provide, maintain, and improve our services.
2. Provide and deliver the services you request, process transactions and send you related information, including confirmations.
3. Verify your identity and prevent fraud.
4. Send you technical notices, updates, security alerts and support and administrative messages.
5. Respond to your comments, questions and requests and provide customer service.
6. Communicate with you about services, offers, and events offered by EnterpriseNGR and provide news and information we think will be of interest to you.
7. Monitor and analyse trends, usage and activities in connection with our services.
8. Personalize and improve the services and provide content or features that match user profiles or interests.
9. Link or combine with information we get from others to help understand your needs and provide you with better service.
10. Carry out any other purpose for which the Personal Data was collected.

EnterpriseNGR is based in Nigeria and the information we collect is governed by the Nigeria Data Protection Regulation (NDPR). By accessing or using the Services or otherwise providing information to us, you consent to the processing and transfer of information in and to Nigeria and other countries.

4. DISCLOSURE OF INFORMATION

EnterpriseNGR only discloses Personal Data with other companies or individuals in the following limited circumstances: 

• We may provide such Personal Data to affiliated companies or other trusted businesses or persons for the purpose of processing Personal Data on our behalf. We require that these parties agree to process such Personal Data based on our instructions and in compliance with the Nigeria Data Protection Regulation (NDPR) and any other appropriate confidentiality and security measures. When they no longer need your Personal Data to fulfil this service, they will dispose of the details in line with the NDPR.
• With other third parties such as email service providers that perform marketing services on EnterpriseNGR’s behalf.
• With other non-affiliated companies for our everyday business purposes, such as but not limited to process transactions, maintain accounts, respond to court orders and legal investigations.
• In response to a request for Personal Data, if we are required by, or we believe disclosure is in accordance with, any applicable law, regulation or legal process.
• With relevant law enforcement officials or other third parties, such as investigators or auditors, if we believe it is appropriate.
• In connection with, or during negotiations of, any merger, sale of assets, financing or acquisition of all or a portion of our business to another company; and
• With your consent or at your direction, including if we notify you that the Personal Data you provide will be shared in a particular manner and you provide such Personal Data.
• We may also share aggregated or de-identified or anonymized Information, which cannot reasonably be used to identify you. 

When EnterpriseNGR does not have a lawful basis for disclosure of your Personal Data, EnterpriseNGR will obtain consent from you before sharing your Personal Data with third parties. Where EnterpriseNGR needs to transfer your Personal Data to another country, such country must have adequate data protection laws. We will seek your consent where we need to send your Personal Data to a country without adequate data protection laws.

5. SECURITY

EnterpriseNGR takes reasonable measures to help protect all Personal Data about you from loss, theft, misuse and unauthorized access, disclosure, alteration and destruction. Additionally, EnterpriseNGR implements policies designed to protect the confidentiality and security of your Personal Data, including a Data Protection Policy. 

We have also taken measures to comply with provision of security facilities for the protection of your Personal Data through the set-up of firewalls, limited access to specified authorized individuals, encryption and continuous capacity building for relevant personnel. We therefore have digital and physical security measures to limit and eliminate possibilities of data privacy breach incidents.

6. HOW LONG WE KEEP YOUR PERSONAL DATA

We will hold your Personal Data on EnterpriseNGR’s systems for as long as it is necessary to fulfil the purpose for which it was collected or to comply with legal, regulatory or internal policy requirements.

7. WHERE WE STORE YOUR PERSONAL DATA

The Personal Data EnterpriseNGR collects from you may be transferred to and stored at a destination outside Nigeria. By submitting your Personal Data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your Personal Data is treated securely with an appropriate level of protection and that the transfer is lawful. 

8. YOUR RIGHTS AS A DATA SUBJECT

The law gives you certain rights in respect to your Personal Data in the possession of EnterpriseNGR. Below is a highlight of some of those rights. At any point while we are in possession of or processing your Personal Data, you, the Data Subject have the following rights:

i. RIGHT OF ACCESS – You have the right to request a copy of the information that we hold about you.

ii. RIGHT TO RECTIFY – You have the right to correct the Personal Data we hold about you that is inaccurate.

iii. RIGHT TO BE FORGOTTEN – In certain circumstances you may ask for the data we hold about you to be erased from our record.

iv. RIGHT TO RESTRICT PROCESSING – Where certain conditions apply, you have a right to restrict processing of your Personal Data.

v. RIGHT TO PORTABILITY – You have the right to have your Personal Data transferred to another organisation. 

vi. LODGE COMPLAINT – You have a right to lodge a complaint about the handling of your Personal Data with the Nigeria Data Protection Bureau (NDPB) at info@ndpb.gov.ng 

vii. RIGHT TO OBJECT – You have the right to object to the Processing of Personal Data.

NDPB’s website (https://ndpb.gov.ng/) has a wealth of useful information in respect of your rights over your Personal Data. If you wish to exercise your rights, you may contact our Data Protection Officer at uchechi.akinwale@enterprisengr.com or you may write to us at contactus@enterprisengr.com

9. BREACH/ PRIVACY VIOLATION

In the event of a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to Personal Data, EnterpriseNGR shall within 72 (Seventy-Two) hours of having knowledge of such breach report the details of the breach to NITDA.

Furthermore, where we ascertain that such breach is detrimental to your rights and freedoms in relation to your Personal Data, we shall within 7 (Seven) days of having knowledge of the occurrence of such breach take steps to inform you of the breach incident, the risk to your rights and freedoms resulting from such breach and any course of action to remedy said breach.

10. QUESTIONS OR CONCERNS

If you have any questions or concerns about this Privacy Policy or would like to contact us for any reason, you can contact us at contactus@enterprisengr.com