Data Privacy Policy

At Tavia Technologies Limited, your privacy is important to us. This Data Privacy Policy explains how we collect, use, share, and protect your personal data in accordance with the Nigeria Data Protection Regulation (NDPR). This policy applies to our website, APIs, and all software we develop and provide to financial services institutions (FSIs) for purposes such as Know Your Customer (KYC) processing and identity verification.

  1. Data We Collect
    We collect and process personal data necessary for identity verification and financial compliance. This includes:
    • Personal Information: Full name, date of birth, contact address, email, phone number.
    • Identification Data: National Identification Number (NIN), passport number, driver’s license, voter’s card, etc.
    • Biometric and Image Data: Photographs, facial scans, and other biometric identifiers used for KYC.
    • Supporting Documents: Utility bills, bank statements, or other documents submitted for address or identity verification.
    We do not collect unnecessary data or track users beyond the scope of our services.
  2. Legal Basis for Processing
    We process personal data under the following legal grounds:
    • Contractual Necessity: To deliver services that you or our client (e.g., a bank or fintech) request.
    • Legal Obligation: To comply with financial and anti-money laundering (AML) regulations.
    • Consent: Where applicable, we obtain your informed and explicit consent to process your personal data.
    We ensure all data collected is for a specific, lawful, and clearly defined purpose, as required by the NDPR.
  3. Use of Personal Data
    We use personal data for the following purposes:
    • To verify identity for KYC and AML compliance.
    • To authenticate documents and reduce fraud.
    • To fulfill legal and regulatory obligations.
    • To operate and improve the performance of our verification software.
    We do not use your data for advertising or profiling.
  4. Cookies and Tracking
    We do not use cookies, web beacons, or other tracking tools on our website or in our software. All data is directly provided by users or institutional clients.
  5. Data Sharing and Third Parties
    We do not sell or share your personal data for marketing. However, we may share data with:
    • Authorized Clients: Such as banks, fintechs, and financial institutions that contract our software for verification services.
    • Service Providers: Including secure cloud platforms, document validators, or payment processors under strict contractual obligations to protect data.
    • Regulatory Authorities: Where required by law, court order, or regulatory mandate.
    All third parties are bound by data protection agreements that ensure compliance with the NDPR.
  6. Data Security
    We employ robust security measures to protect your data, including:
    • Encryption during transmission and storage.
    • Access controls limited to authorized personnel.
    • Regular security audits and updates.
    • Staff training on data privacy and confidentiality.
    • Incident response protocols for any data breach.
    We take appropriate technical and organizational steps to ensure the confidentiality, integrity, and availability of your data.
  7. Data Retention
    We retain personal data only for as long as necessary:
    • Typically at least 5 years, in line with Nigerian AML regulations.
    • After the retention period or upon lawful request, we delete or anonymize data securely.
  8. Your Rights Under NDPR
    As a data subject in Nigeria, you have the right to:
    • Access your personal data.
    • Correct inaccurate or incomplete data.
    • Request Deletion when data is no longer needed.
    • Withdraw Consent where consent was the basis for processing.
    • Object to processing where appropriate.
    • Lodge a Complaint with the Nigeria Data Protection Commission (NDPC) if you believe your rights are violated.
    To exercise your rights, contact us at the address below.
  9. International Transfers
    Tavia Technologies does not routinely transfer data outside Nigeria. If a transfer is required, we will only do so in accordance with the NDPR, ensuring the recipient provides adequate data protection or with the data subject’s consent.
  10. Contact Us
    If you have questions about this policy, or wish to exercise your rights, contact: Email: info@taviatech.com.ng Company: Tavia Technologies Limited Location: Wing B, 2nd Floor, Motorways Centre, No. 1, Motorways Avenue, Alausa, Ikeja
  11. Updates to This Policy
    We may update this Privacy Policy from time to time to reflect legal, technical, or business developments. We will notify users of significant changes by posting the updated policy on our website and updating the “Effective Date” above.