Policy Overview

Purpose

This policy outlines the obligations of employees, vendors, and third parties to secure personal data collected by Redtech Limited.

Scope

The policy is applicable to all employees, contractors, and third parties engaged in the processing of personal data on behalf of Redtech Limited.

Statement

Redtech Limited is committed to compliance with the NDPA and all relevant data protection laws to maintain the confidentiality, integrity, and availability of personal data.

Data Protection Principles

Redtech Limited is committed to adhering to the following principles:

1. Lawfulness, Fairness, and Transparency: The processing of personal data is conducted in a lawful and transparent manner, ensuring clear communication regarding its purpose.

1. Purpose Limitation: Personal data is collected solely for specific and explicit purposes.

1. Data Minimization: Only the data necessary for the stated purposes is gathered.

1. Accuracy: Personal data is maintained with a focus on accuracy and is kept up to date.

1. Storage Limitation: Personal data is retained only for as long as necessary.

1. Integrity and Confidentiality: Personal data is protected against unauthorized access, loss, or destruction.

1. Accountability: Compliance is evidenced through documented policies and practices.

Legal Grounds for Processing

Redtech Limited processes personal data based on lawful grounds, including: 

• Consent: Where individuals have provided explicit permission for data to be processed for specific purposes.

• Contractual Necessity: When processing is essential to fulfill a contract or pre-contractual obligations.

• Legal Obligation: Where data processing is requisite to comply with regulatory or legal requirements.

• Legitimate Interests: When processing is necessary for the legitimate interests of the organization, provided that these do not infringe upon the rights and freedoms of individuals.

Data Subjects’ Rights

Data subjects possess the right to: 

• Access, rectify, or erase their data.

• Object to processing or automated decision-making.

• Request data portability.

• File complaints or request a supervisory review.

To exercise these rights, kindly contact dataprotectionoffice@redtechlimited.com.

Consent

The consent must be:

• Freely given, specific, informed, and unambiguous.

• Withdrawable at any time by the data subject.

Parental consent is required for children under 18 in Nigeria under the NDPA.

Security Measures

Redtech Limited employs technical and organizational measures to secure personal data, including:

• Password protection and access controls.

• Encryption of sensitive data.

• Regular employee training on data security.

Data Retention and Disposal

Personal data is retained solely for the duration required to fulfill its intended purpose and is subsequently disposed of securely, in accordance with Redtech Limited’s Secure Disposal Policy and Procedure.

Data Transfers

Personal data may solely be transferred to countries that provide adequate protection levels or pursuant to the lawful conditions delineated in the NDPA.

Responsibilities

• Data Protection Officer (DPO): Ensures the effectiveness, updates, and compliance of policies.

• Employees: Are required to adhere to this policy and safeguard personal data under their control.

For additional information, please contact dataprotectionoffice@redtechlimited.com.