Privacy Policy

Africa Prudential Data Protection Policy

Introduction

Africa Prudential is dedicated to ensuring compliance with the Nigeria Data Protection Act (NDPA) 2023 and the European Union General Data Protection Regulation (GDPR). As a data controller, Africa Prudential safeguards personal data collected during its business operations to protect the rights and freedoms of individuals.

For inquiries or data protection concerns, contact our Data Protection Officer at dataprotectionofficer@africaprudential.com.

Policy Overview

Purpose

This policy outlines the obligations of employees, vendors, and third parties to secure personal data collected by Africa Prudential.

Scope

The policy applies to all employees, contractors, and third parties involved in processing personal data on behalf of Africa Prudential.

Statement

Africa Prudential is committed to compliance with the NDPA, GDPR, and all relevant data protection laws to maintain the confidentiality, integrity, and availability of personal data.

Data Protection Principles

Africa Prudential adheres to the following principles:

1. Lawfulness, Fairness, and Transparency: Processing of personal data is lawful and transparent, with clear communication of purposes.

2. Purpose Limitation: Data is collected for specific, explicit purposes.

3. Data Minimisation: Only data necessary for the stated purposes is collected.

4. Accuracy: Personal data is kept accurate and up-to-date.

5. Storage Limitation: Data is stored no longer than necessary.

6. Integrity and Confidentiality: Data is secured against unauthorized access, loss, or destruction.

7. Accountability: Compliance is demonstrated through documented policies and practices.

How We Use Personal Data

Personal data collected is used for:

• Providing and improving our services.

• Meeting contractual and legal obligations.

• Preventing fraud and ensuring security.

• Enhancing customer experience.

• Conducting internal research and analysis.

• Sending relevant updates and marketing materials (with consent).

We do not share personal data with third parties unless required by law or with explicit consent.

Changes to This Policy

This policy may be updated periodically to reflect legal or operational changes.
If significant updates occur, we will notify data subjects through appropriate channels such as email or website announcements.

Continued use of Africa Prudential’s services after an update signifies acceptance of the revised policy.

Legal Grounds for Processing

Africa Prudential processes personal data on the basis of lawful grounds, including:

• Consent: Where individuals have given clear permission for data to be processed for specific purposes.

• Contractual Necessity: When processing is required to fulfill a contract or pre-contractual obligations.

• Legal Obligation: Where data processing is necessary to comply with regulatory or legal requirements.

• Legitimate Interests: When processing is necessary for the legitimate interests of the organization, provided these do not override the rights and freedoms of individuals.

Data Subjects' Rights

Data subjects have the right to:

• Access, rectify, or erase their personal data.

• Object to processing or automated decision-making.

• Request data portability.

• File complaints or request a supervisory review.

To exercise these rights, contact dataprotectionofficer@africaprudential.com.

Consent

Consent must be:

• Freely given, specific, informed, and unambiguous.

• Withdrawable at any time by the data subject.

Parental consent is required for children under 18 under NDPA or 16 under GDPR.

Security Measures

Africa Prudential employs technical and organizational measures to secure personal data, including:

• Password protection and access controls.

• Encryption of sensitive data.

• Regular employee training on data security.

Data Retention and Disposal

Personal data is retained only as long as necessary for its intended purpose and securely disposed of afterward, following Africa Prudential's Secure Disposal Procedure.

Data Transfers

Personal data may only be transferred to countries with adequate protection levels or based on lawful conditions outlined in NDPA and GDPR.

Responsibilities

• Data Protection Officer (DPO): Ensures policy effectiveness, updates, and compliance.

• Employees: Must adhere to this policy and protect personal data within their control.

For further details, please email dataprotectionofficer@africaprudential.com.