Privacy Statement
1.0 INTRODUCTION
This policy outlines New Energy Services Company Limited (the “Company”) and its affiliates process concerning data privacy and compliance with applicable legislations and regulations.
2.0 OBJECTIVE
The Company has created this Privacy Policy to explain how the Company collects, uses, discloses, and protects your Personal Data, including any other information.
You accept this Privacy Policy and hereby give the Company consent to save, process and use your Personal Data to the extent as allowed by law when you provide us with details of your Personal Data or by clicking on the “accept” button. You have the right to withdraw your consent at any time, provided that we do not have another legal basis to keep processing your Personal Data.
We may change this Privacy Policy from time to time. If we make changes, we will notify you by revising the date at the top of this policy, and in some cases, we may provide you with additional notice (such as by adding a statement to the homepages of our website or by sending you an email notification).
We encourage you to review the Privacy Policy whenever you interact with us to stay informed about our information practices and the ways you can help protect your privacy.
3.0 SCOPE
This policy applies to all directors, employees, officers, management, clients, and vendors of the Company and any third party that accesses the Company’s online or digital platforms.
4.0 COLLECTION OF INFORMATION
We may collect and process the following information about you:
Information that you provide to us, for example when you fill out a contact or web form.
When you contact our customer support whether by phone, email.
5.0 USE OF PERSONAL DATA
We may use your Personal Data, including non-public Personal Data as follows:
Provide, maintain, and improve our services
Provide and deliver the products and services you request, process transactions, and send you related information, including confirmations.
Verify your identity and prevent fraud.
Send you technical notices, updates, security alerts and support and administrative messages.
Respond to your comments, questions and requests and provide customer service.
Carry out any other purpose for which the Personal Data was collected.
The Company is based in Nigeria and the information we collect is governed by the Nigeria Data Protection Regulation (NDPR). By accessing or using the Services or otherwise providing information to us, you consent to the processing and transfer of information in and to Nigeria and other countries, if applicable.
6.0 DISCLOSURE OF INFORMATION
The Company only discloses Personal Data with other companies or individuals in the following limited circumstances:
We may provide such Personal Data to affiliated companies or other trusted businesses or persons for the purpose of processing Personal Data on our behalf. We require that these parties agree to process such Personal Data based on our instructions and in compliance with the Nigeria Data Protection Regulation (NDPR) and any other appropriate confidentiality and security measures. When they no longer need your Personal Data to fulfil this service, they will dispose of the details in line with the NDPR.
With other non-affiliated companies for our everyday business purposes, such as to process transactions, maintain accounts, respond to court orders and legal investigations.
In response to a request for Personal Data, if we are required by, or we believe disclosure is in accordance with, any applicable law, regulation, or legal process.
With relevant law enforcement officials or other third parties, such as investigators or auditors, if we believe it is appropriate.
In connection with, or during negotiations of, any merger, sale of the Company’s assets, financing or acquisition of all or a portion of our business to another company.
With your consent or at your direction, including if we notify you that the Personal Data you provide will be shared in a particular manner and you provide such Personal Data.
We may also share aggregated or de-identified or anonymized Information, which cannot reasonably be used to identify you.
When the Company does not have a lawful basis for disclosure of your Personal Data, the Company will obtain consent from you before sharing your Personal Data with third parties. Where the Company needs to transfer your Personal Data to another country, such country must have an adequate data protection law. We will seek your consent where we need to send your Personal Data to a country without an adequate data protection law.
7.0 SECURITY
The Company takes reasonable measures to help protect all Personal Data about you from loss, theft, misuse and unauthorized access, disclosure, alteration, and destruction. Additionally, the Company implements policies designed to protect the confidentiality and security of your Personal Data, including a Data Protection Policy.
8.0 HOW LONG WE KEEP YOUR PERSONAL DATA
We will hold your Personal Data on the Company’s systems for as long as it is necessary to fulfil the purpose for which it was collected or to comply with legal, regulatory, or internal policy requirements.
9.0 WHERE WE STORE YOUR PERSONAL DATA
The Personal Data the Company collects from you may be transferred to and stored at a destination outside Nigeria. By submitting your Personal Data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your Personal Data is treated securely with an appropriate level of protection and that the transfer is lawful.
10.0 YOUR RIGHTS AS A DATA SUBJECT
The law gives you certain rights in respect to your Personal Data the Company holds about you. Below is a highlight of some of those rights. At any point while we are in possession of or processing your Personal Data, you, the Data Subject has the following rights:
RIGHT OF ACCESS – You have the right to request a copy of the information that we hold about you. We will respond to your access request within one month of receiving your request. Where we are not able to provide this personal data to you within the One-Month timeline provided by law, we will communicate same to you, and may request an additional time within which we will provide the information to you. Your Personal Data shall be provided to you in a structured, commonly used, and machine-readable format.
RIGHT TO RECTIFY – You have the right to correct the Personal Data we hold about you that is inaccurate.
RIGHT TO BE FORGOTTEN – In certain circumstances you may ask for the data we hold about you to be erased from our records.
RIGHT TO RESTRICT PROCESSING – Where certain conditions apply, you have a right to restrict the processing of your Personal Data.
RIGHT TO PORTABILITY – You have the right to have your Personal Data transferred to another organisation.
LODGE COMPLAINT – You have a right to lodge a complaint about the handling of your Personal Data with the Nigeria Data Protection Bureau (NDBP) at info@ndpb.gov.ng
RIGHT TO OBJECT – You have the right to object to the Processing of Personal Data.
NDPB’s website (https://ndpb.gov.ng/) has a wealth of useful information in respect of your rights over your Personal Data. If you wish to exercise your rights, you may contact our Data Protection Officer at dataprotection@nesscong.org or you may write to us at Plot 292 H Ajose Adeogun Street, Victoria Island Lagos, Nigeria.
11.0 BREACH/ PRIVACY VIOLATION
In the event of a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to Personal Data, the Company shall within 72 (Seventy-Two) hours of having knowledge of such breach report the details of the breach to NDPB.
Furthermore, where we ascertain that such breach is detrimental to your rights and freedoms in relation to your Personal Data, we shall within 7 (Seven) days of having knowledge of the occurrence of such breach take steps to inform you of the breach incident, the risk to your rights and freedoms resulting from such breach and any course of action to remedy said breach.
12.0 QUESTIONS OR CONCERNS
If you have any questions or concerns about this Privacy Policy or would like to contact us for any reason, you can contact us at dataprotection@nesscong.org
13.0 REVIEW
The IT department and Data Protection Officer shall periodically conduct a review to verify that the processes contemplated by this Privacy Policy are in place and, following each such review, shall make recommendations on that subject to management of the Company.
