At HEREL, we are committed to protecting the privacy and security of our users’ personal data. This Privacy Policy explains how we collect, use, and safeguard your information in compliance with the Nigeria Data Protection Act (NDPA) 2023 and other applicable Nigerian data protection laws.

1.⁠ ⁠Consent
By using our website, you signify that you have read this policy and voluntarily consent to the collection and use of your personal information as described herein. You have the right to withdraw your consent at any time, though this will not affect the lawfulness of any processing carried out before the withdrawal.

2.⁠ ⁠Information We Collect
We only collect information that is necessary for the provision of our services:

Direct Information: Name, email address, phone number, and physical address provided during account registration or through contact forms.

Technical Data: IP address, browser type, and usage patterns collected via standard server logs to ensure site security and performance.

Cookies: We use cookies to remember your preferences and improve your browsing experience. You can manage cookie settings through your browser.

3.⁠ ⁠Lawful Basis for Processing
In line with Section 25 of the NDPA 2023, we process your data based on:

Your explicit Consent.

The necessity to perform a Contract with you (e.g., providing our services).

Compliance with a Legal Obligation under Nigerian law.

Our Legitimate Interests, provided they do not override your fundamental rights.

4.⁠ ⁠Your Rights as a Nigerian Data Subject
Under the NDPA 2023, you have the following rights regarding your personal data:

Right to be Informed: To know exactly how your data is being used.

Right of Access: To request a copy of the personal data we hold about you.

Right to Rectification: To request the correction of inaccurate or incomplete information.

Right to Erasure (Right to be Forgotten): To request the deletion of your data where there is no legal ground for its continued processing.

Right to Data Portability: To receive your data in a structured, commonly used, and machine-readable format.

Right to Object: To stop your data from being used for direct marketing purposes.

Note: If you wish to exercise any of these rights, please contact us. We are required by law to respond to your request within 30 days.

5.⁠ ⁠Data Security and Retention
We implement robust technical and organizational measures to protect your data against unauthorized access, loss, or alteration. We retain your personal information only for as long as is necessary to fulfill the purposes for which it was collected or to comply with Nigerian statutory retention periods.

6.⁠ ⁠Children’s Privacy
In accordance with the NDPA and the Child’s Rights Act, HEREL defines a child as anyone under the age of 18. We do not knowingly collect personal data from children without verifiable parental or guardian consent. If we discover such data has been collected inadvertently, we will delete it immediately.

7.⁠ ⁠Contact Us
For any questions regarding this Privacy Policy or to lodge a complaint, please contact our Data Protection team at [email protected]