Privacy Policy

1. Introduction/Scope

This document is prepared in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and the Nigerian Data Protection Act 2023 (NDPA 2023). It sets out how Oxdit Technology applies and complies with the principles of the regulations in processing the personal data of individuals, clients, vendors, and third parties that interact with Oxdit.

• Information we collect
• How we use the data we collect
• Who we share your data with
• Lawful grounds of processing
• Retention period
• Your data rights
• How to contact us
• How to contact the regulatory body (NDPC)
• Security of the personal data we hold

2. Policy Statement

2.1 Who We Are

Oxdit Technology (confirm registered legal name) ("Oxdit") is a tech advancement, investment, and service provider company delivering DevOps, cybersecurity, data streaming, tech training, medical records infrastructure, and outsourced engineering teams to startups and growing businesses.

2.2 What Personal Data Do We Need?

Personal Data Type	Sources
Bio-data: Names, Email address, mobile number	Directly from Data Subjects, website
Account Information	Directly from Data Subjects, website
General Location Information	Directly from Data Subjects, website
Device name and other technical information	Website
Health/medical record data (medical records platform)	Data subjects and/or healthcare provider clients — confirm exact flow

In certain instances, the personal data we need to collect may fall under a special category of personal data. In such instances, our lawful basis of processing will be the explicit consent of the data subject, compliance with a legal obligation, or for legal proceedings/advice.

2.3 Why Do We Need the Data?

Oxdit ensures that the personal data collected and processed is necessary for the purpose of collection, and does not collect or process more data than is reasonably required.

3. Consent

Oxdit requires your explicit consent to process collected personal data. You may withdraw consent at any time by contacting the DPO at info@oxdit.com.ng.

4. Disclosure

Oxdit will not pass on your personal data to third parties without first obtaining your consent, except where required by law or under a Data Processing Agreement with adequate technical and organisational safeguards in place.

5. Retention of Records

Oxdit will process your personal data for the minimum period necessary and as required by applicable law.

6. Data Subject Rights

• Request a copy of the information that we hold about you
• Correct data that is inaccurate or incomplete
• Ask for your data to be erased
• Restrict processing where certain conditions apply
• Have your data transferred to another organisation
• Object to certain types of processing, including direct marketing

7. Privacy Notice Changes

Oxdit may update this notice from time to time. The most recent version will always be available on this page.

8. Complaints

	Supervisory Authority	Data Protection Officer
Contact	Nigeria Data Protection Commission	[DPO NAME]
Address	No. 12 Clement Isong Street, Asokoro, Abuja, Nigeria	1st Floor, ASTA GALLERY, Plot 1185, Parkway Road, Cadastral Zone, Abuja, FCT, Nigeria
Email	info@ndpc.gov.ng	info@oxdit.com.ng