NDPR compliance

1. Our commitment

Compni is built with the Nigeria Data Protection Regulation (NDPR) and the Nigeria Data Protection Act in mind. We aim to handle personal data belonging to your business and your customers responsibly, transparently, and lawfully.

2. Lawful basis for processing

We process personal data based on your consent when you create an account, the necessity of processing to deliver the service you signed up for, and our legitimate interest in improving and securing Compni.

3. Your rights as a data subject

Under the NDPR, individuals whose data we process have the right to:

• Know what personal data is being collected and why.
• Request access to their personal data.
• Request correction of inaccurate data.
• Request deletion of their data, subject to legal retention requirements.
• Object to certain kinds of processing.

4. Data belonging to your customers

When your business uses Compni, you act as the data controller for your customers' information, and Compni acts as a data processor on your behalf. We only process that data to deliver the features you've enabled, such as automated replies and order tracking.

5. Data transfers

Where data is processed or stored outside Nigeria, we take steps to ensure it receives an adequate level of protection, consistent with NDPR requirements.

6. Reporting a concern

If you believe your data has been mishandled, please contact us directly so we can investigate. You may also have the right to lodge a complaint with the Nigeria Data Protection Commission.

7. Contact us

For any data protection questions, reach out to [email protected].