1. INTRODUCTION
Welcome to The Privacy Academy (TPA) (“TPA” “We” “Our” “Us”) Privacy Notice. TPA understands that you care much about your privacy, and is committed to protecting your personal data. This Privacy Notice describes how TPA processes personal data and the rights available to you. Please read the entire Privacy Notice to understand how we process your personal data and the rights available to you.
2. DATA PROTECTION OFFICER (DPO)
TPA has in compliance with the relevant laws designated a data protection officer for you to contact if you have any questions concerning this Notice or our privacy practices. Our DPO can be reached via dpo@privacyacademy.ng
3. INFORMATION WE COLLECT ABOUT YOU
For the services we render and our events, we may collect personal data including names, contact address, telephone numbers, social media accounts, payment information, still and motion images, communication data such as email content and call logs, technical data such IP address, location data, log files and other relevant personal data.
Information About other People
If you provide information to us about any person other than yourself, your employees, counterparties, your advisers or your suppliers, you must ensure that they understand how their information will be used, and that they have given their consent for you to disclose it to us and for you to allow us, and our outsourced service providers to use it.
4. SOURCES WE COLLECT YOUR PERSONAL DATA FROM
TPA collects data directly from you when you correspond with us, fill physical or online form on our website, register for our events or enroll into our institute. We may also receive data from third party such as employer, service providers like Google, Zoom or social media or public registry.
5. HOW WE USE YOUR PERSONAL DATA
We process your personal data in order to achieve the following:
- Register you as a member of TPA and provide membership services to you such as training, certification, events, publication and content.
- To register and grant you access to our live events, communicate with you about TPA future events, publications and other services.
- To tailor our services to better suit your need.
- To perform contractual obligations between you and us or us and your company or firm.
- To comply with legal obligations
- To investigate, defend and exercise our legal rights.
FURTHER PURPOSE
We will only process your personal data for the particular purposes for which we collected it. We will notify you and obtain your consent before using it for any further purpose that is not compatible with the original purpose.
6. LEGAL BASES FOR PROCESSING YOUR PERSONAL DATA
We may process your personal data on one or more lawful grounds depending on the specific purpose for which we are using your personal data. Kindly contact us if you need further details or clarity about the specific legal ground, we are relying on to process your personal data where more than one ground has been stated. We will rely on any of the legal bases listed below depending on the processing activities:
- We will ask you for your consent in certain processing activities especially where it involves collection of sensitive personal data. Where we obtain your consent, kindly note that you can withdraw the consent at any time and we will comply by not further processing your personal data.
- We may process your personal data in order to perform contract you have entered with us or with your company or take pre-contractual steps at your instruction.
- We may rely on our legitimate interest to process your personal data in order to tailor our services to suit your need.
- We may process your personal data where the law mandates us to do so.
7. WHAT CONSTITUTE CONSENT
We rely on consent in certain circumstances to process some of your personal data. Where we require your consent, ticking a yes/no box, endorsing your signature in a form or document, clicking accept button will constitute consent.
8. WHOM DO WE SHARE YOUR PERSONAL DATA WITH?
We may disclose your personal information to third parties such as online payment solutions, regulators, experts and consultants, third party service providers such data storage infrastructure provider, Google, Zoom, amongst others.
9. DATA RETENTION
We will only retain your personal data for as long as reasonably necessary to fulfill the purposes they were collected and where we are required to assert or defend against legal claims, pending the final adjudication of the claim. In some circumstances we will anonymise your personal data so that it can no longer be associated with you for research or statistical purposes, in which case we may use this information indefinitely without further notice to you. To learn more about our retention periods as established in our retention policy, please contact us.
10. PRINCIPLES OF DATA PROTECTION
We are obligated to comply with data protection principles whenever we process your personal data and to inform you about these principles. These principles are:
- We will inform you about the personal data we have about you, and the lawful basis for processing it.
- We must use your personal data in a way you reasonably expect and in a manner that ensures transparency, lawfulness, and fairness.
- We will not use your personal data for any other reason that is not compatible with the reason we collected it except we have informed you and relied on an appropriate lawful basis.
- We will only collect personal data about you that is only necessary to meet the required purpose and nothing more.
- We will only use your correct personal data in the course of our processing activities.
- We will not store or keep your personal data in our custody beyond the period necessary to fulfil the purpose for which it is collected.
- We will ensure that your personal data in our custody is protected from unauthorized use, alteration or corruption.
11. YOUR LEGAL RIGHTS
You have certain rights under the law which we respect and adhere to and which can be exercised by you at any time. However, note that these rights are not absolute and may only apply in certain circumstances. Your rights are as itemized:
- right to access your personal data
- right to request correction of your personal
- right to request the erasure of your personal data
- right to object to the processing of your personal data especially with regards to direct marketing
- right to request the restriction of processing of your personal data pending the rectification of accuracy of your personal data
- right to request transfer of your personal data to another controller or to you.
- right to withdraw consent
12. RIGHT TO COMPLAINT
Kindly note that you have the right to make a complaint at any time to the Nigeria Data Protection Bureau (NDPB), the Regulator for data protection issues (https://ndpb.gov.ng/) or approach competent court of law to enforce your data protection rights. We would, however, appreciate the chance to deal with your concerns before you approach the NDPB, so please contact us in the first instance @ (.) or send a letter to our physical office @ (.)
13. CHANGES TO OUR PRIVACY NOTICE
This privacy notice will be updated from time to time to reflect our processing activities and we will aim to notify you when this happens.
14. CONTACT DETAILS
Please address questions, comments and requests regarding this Notice to our DPO @ (.)or send a letter to our physical office @ (.)