1. Framework
Billturex complies with the Nigeria Data Protection Act 2023, the Nigeria Data Protection Regulation, and, where applicable, the EU General Data Protection Regulation. This policy sits alongside our Privacy Policy and applies to every business unit.
2. Principles
Personal data is processed lawfully, fairly, and transparently; collected for specified, legitimate purposes; kept accurate and up-to-date; minimised; retained only as long as necessary; and processed with appropriate security.
3. Data-subject rights
Access, rectification, erasure (subject to legal retention), restriction, objection, and portability. Requests are honoured within thirty (30) days.
4. Data protection impact assessments
DPIAs are conducted before we launch new products or partnerships that materially change how we process personal data.
5. Breach management
We will notify affected users and the Nigeria Data Protection Commission of qualifying personal-data breaches within seventy-two (72) hours of becoming aware, in accordance with the NDPA.
This document is informational and does not constitute legal advice. In case of conflict, the version filed with regulators prevails.