NDPR / NDPA Notice 

1. Scope

This notice explains how Pickpadi Global Ltd complies with the Nigeria Data Protection Act 2023 (NDPA), the Nigeria Data Protection Regulation (NDPR) and guidance from the Nigeria Data Protection Commission (NDPC).

2. Principles

• Lawfulness, fairness and transparency
• Purpose limitation
• Data minimisation
• Accuracy
• Storage limitation
• Integrity, confidentiality and accountability

3. Lawful basis

We process personal data on the basis of consent, contract, legal obligation, vital interest, public interest or legitimate interest, as applicable.

4. Data subject rights

Data subjects may access, rectify, erase, restrict, port or object to processing of their data, and withdraw consent. Requests are handled within 30 days.

5. Security and breach

We maintain technical and organisational measures appropriate to the risk. Personal data breaches likely to cause risk are notified to the NDPC within 72 hours and to affected individuals without undue delay.

6. Cross-border transfers

Transfers outside Nigeria take place only where the destination provides adequate protection or appropriate safeguards are in place.

7. Data Protection Officer

We have designated a Data Protection Officer who oversees compliance. Contact the DPO via the form on this page.