Privacy Policy

1. Introduction

Heritage & Culture Africa ("we", "us", or "our") is committed to protecting the privacy and personal data of our users in compliance with the **Nigeria Data Protection Act (NDPA) 2023**. This Privacy Policy explains how we collect, use, and safeguard your information when you interact with our platform.

2. Lawful Basis for Processing

We process personal data based on the following lawful grounds established under Nigerian law:

  • Consent: Where you have provided explicit permission for specific processing activities.
  • Contractual Necessity: Where processing is required to fulfill our obligations under a contract with you.
  • Legal Obligation: Where processing is necessary to comply with relevant laws in the Federal Republic of Nigeria.
  • Legitimate Interests: For our internal business purposes, provided they do not override your fundamental privacy rights.

3. Data Subject Rights

As a data subject in Nigeria, you are entitled to specific rights under the NDPA 2023:

Access & Portability

You have the right to request a copy of your data and, where applicable, have it transferred to another controller.

Rectification & Deletion

You can request the correction of inaccurate data or the deletion of your data when it is no longer required.

Objection

You may object to the processing of your data for direct marketing or automated decision-making.

Withdrawal

You can withdraw your consent at any time for any processing activity based on consent.

4. Data Retention & Security

We employ industry-standard technical and organizational measures to protect your personal data against unauthorized access, loss, or alteration. We retain data only for the duration necessary to satisfy the purpose of collection or as mandated by Nigerian law.

5. Regulatory Oversight

Complaints regarding data privacy can be directed to our Data Protection Officer or escalated to the **Nigeria Data Protection Commission (NDPC)**.

Effective Date: March 31, 2026