CIIX SERVICES — PRIVACY POLICY

CIIX Ideal Global Resources Limited — Protection of personal information for users of CIIX Services.

Last Updated: [Insert Last Updated Date]

This Privacy Policy belongs to CIIX Ideal Global Resources Limited demonstrating the commitment of CIIX and its affiliated companies to the protection of personal information of its users. The Policy explains how and why CIIX collects, uses, and shares personal information when you interact or use our site or Service. Please read this Privacy Policy (“Policy”) carefully to understand how CIIX (“We”, “our”, or “us”) processes personal information.

When we say “CIIX”, we mean CIIX Ideal Global Resources Limited, and any of its affiliates. When we say “site”, we mean [insert website]. When we say “Service”, we mean the Platform plus any websites, features, mobile applications, tools, or online services owned or controlled by CIIX.

This Policy may be updated from time to time to reflect changes in law, technology, or business operations. Any changes will be posted on this page with the updated “Last Updated” date. Where required under the Nigeria Data Protection Act, 2023, you will be notified of material changes. We strongly advise that you check this Policy periodically for any updates or changes.

1. THE POLICY SHORT VERSION

Information We Collect: We collect information you provide (name, email, ID, payment details), data from third-party services (e.g., Google/Facebook login, payment processors), and information about your activities on the platform, including reviews and feedback.

How We Use Information: We use your data to provide and secure services, verify identity, prevent fraud, support customer interactions, and suggest relevant services. We may also use it to comply with laws or maintain business records.

Your Rights: Under NDPA 2023, you may access, update, delete, or withdraw consent for your personal data. You may also request data portability or lodge complaints with the NDPC.

Data Retention: We keep your information only as long as necessary for services, legal compliance, or dispute resolution. Data from closed accounts may be retained where required by law.

Children: Users must be 18 or older. Minors aged 13 to 17 may use the platform only with parental consent. Children under 13 cannot use CIIX.

Sharing Information: We may share your data with other users you interact with, service providers, payment processors, regulators, or as required by law. In corporate transactions, your data may be transferred to successors.

Data Security: We apply industry-standard safeguards, maintain PCI DSS compliance, and require third parties to uphold security. However, no online transmission is 100% secure; please keep your login credentials safe.

Updates & Contact: This Policy may be updated, with changes posted here. For questions or to exercise your rights, contact our Data Protection Officer at [email address].

2. INFORMATION COLLECTED

a. Information You Provide to Us

When you do any of these actions (register to our site, use it, complete forms, participate in surveys, or such other actions as necessary), we ask you to provide or otherwise collect personal information provided by you, including a valid email address, login details, name and username, profile details (including picture, skill and expertise), physical address or billing information, telephone number or other contact details, date of birth, transactional information, payment information. We may also collect identification information (as may be necessary or applicable) (such as copies of your government issued ID, passport, driving license) and biometric information derived from photos and identification documents you submit for verification. Service providers on CIIX are also requested to provide additional information to verify their business.

b. Information we collect automatically

We do not use cookies for advertising or profiling. However, we may use session data to identify returning users and enhance functionality. The only cookies employed are analytics cookies, which help us measure site usage and improve performance. These cookies do not collect personal data that directly identifies you.

c. Information We receive from Third Parties

We receive information from third party vendors and/or other commercially and/or publicly available sources, such as payment processors, identity verification services, and fraud prevention partners. Such information may include alerts regarding suspicious transactions or security risks. We use this information solely to enhance account security, prevent fraud, comply with legal obligations, and protect the integrity of our Platform.

If you link, connect, or login to your account with a third-party service (e.g. Google, Facebook, LinkedIn), we receive certain information, such as your registration and profile information from that service. This information includes, for example, your email address, name and profile picture, but may vary and is controlled by that service or as authorized by you via your privacy settings at that service.

If any other third party submits a report and/or complaint about you or your activity on CIIX, we may receive information relating to the specific report and/or complaint, review and address it.

d. Work Review

With your consent, we may collect and display information about services provided through the Platform, including reviews, ratings, and feedback from clients regarding a service provider’s work. We may also collect certain information automatically about completed jobs (such as the type of service rendered and the date of completion). This information helps prospective users make informed decisions and promotes trust and transparency on the Platform.

We combine your personal information with information we obtain from other companies and use it for the purposes detailed in this Policy.

4. USAGE OF INFORMATION COLLECTED

We will use your personal information for the following purposes:

  • To provide you with secure and quality service, operate the Site, and fulfill our obligations to you. This includes verifying your identity (for service providers), setting up your account, managing access (e.g., password resets), logging activity, enabling communications, offering customer support, and contacting you when necessary.
  • To maintain marketplace integrity, prevent fraud, and ensure a safe and secure platform. This includes monitoring activity, verifying information, conducting security checks, enforcing our Terms, complying with legal obligations, and, where necessary, restricting or limiting use to protect CIIX, its users, and third parties.
  • To suggest services, features, or opportunities that may be relevant to you, and to keep you informed about updates, programs, or events within the CIIX marketplace.
  • To maintain appropriate business records, to comply with lawful requests by public authorities and to comply with applicable laws and regulations.

Please note that we will ask for your consent before using information for a purpose other than those set out in this Policy.

5. DATA SUBJECT’S RIGHTS

CIIX being a responsible organization, is committed to complying with the relevant applicable data protection regulations when processing your personal data. In the light of this, the NDPA, 2023 and GDPR give you certain rights regarding our use of your personal data, including the right to:

  • Request access to the personal data we have collected about you to review, modify.
  • Request the rectification or erasure of your Personal Data.
  • Request that we cease processing your Personal Data.
  • Withdraw consent for processing in cases where consent has previously been given.
  • Request for your personal data to be transferred to a third-party in a commonly used and machine-readable format.
  • Lodge a Complaint with the Data Protection Authority.

Note: If you suspect any violation of your right, you can send your complaint to the Data Protection supervisory authority in Nigeria, the Nigerian Data Protection Commission (NDPC), at info@ndpc.gov.ng.

6. DATA RETENTION

We generally retain personal information only for as long as necessary to fulfill the purposes for which it was collected. However, in certain cases we may keep it for longer periods, such as when it remains relevant to our operations (e.g., maintaining accurate records in case of complaints or disputes), when required to comply with laws or obligations, to prevent fraud, collect fees, resolve issues, assist investigations, enforce our Site terms, or preserve evidence within applicable statutes of limitation.

7. CHILDREN

This Site is intended for users who are at least 18 years old and legally capable of entering into a binding contract. Minors between the ages of 13 and 17 may only access the Site through an account owned by a parent or legal guardian and with their appropriate consent. Children under the age of 13 are strictly prohibited from using the Site or any CIIX services. We do not knowingly collect personal information from individuals under 13. Parents and guardians are strongly advised to supervise their children’s online activities. If we become aware that we have inadvertently collected personal information from a child under 13, we will promptly delete such information.

8. INFORMATION SHARING AND DISCLOSURE

We share your personal information with third parties as detailed below:

  • With other users and Service Providers: Your information may be shared with other users when you message, communicate, or otherwise engage with them on the Site. If you publish or share personal information with other CIIX users, including Sellers providing you services through CIIX, such information is shared at your own risk and is treated as being shared with independent controllers. While our Terms of Service require Sellers to maintain the confidentiality of information you provide to them, CIIX cannot guarantee that all users will comply. It remains your responsibility to exercise discretion and ensure that any user or service provider with whom you share your personal information meets your own standards of confidentiality and data protection.
  • With Other Users: We may share limited personal information to help facilitate interactions and improve your experience (e.g., letting a Seller know it’s your first purchase). You may also choose to share information directly with other users through messages, transactions, or postings. Please note that any information you share directly is your responsibility and may be viewed or used by others.
  • When you submit a report or complaint about a user: We may share personal information about you when you submit reports or complaints about other users to allow them to protect their rights or as required by applicable laws.
  • For Legal Reasons: We may disclose personal information to law enforcement, regulatory authorities, or other relevant parties when required by law, court order, or legal process; to investigate fraud, security breaches, or policy violations; to respond to claims; or to protect the rights, property, and safety of CIIX, our users, or the public.
  • For payments and fraud detection: We share personal information with payment processors, fraud detection agencies and similar third parties for the purpose of facilitating payments done via the Site, securing the Site and protecting it against fraud, unauthorized transactions (such as money laundering), claims or other liabilities.
  • In the Context of Corporate Transactions: We may disclose personal information in connection with mergers, acquisitions, asset transfers, bankruptcies, or similar business transitions, where such information may be transferred to prospective or actual buyers or successors.

9. WHERE WE PROCESS YOUR PERSONAL INFORMATION

Some of the personal information you provide to us will be stored or processed on our behalf by third party suppliers and data processors and may be located in other jurisdictions, whose laws may differ from the jurisdiction in which you live. In the event that processing and storage will be located outside Nigeria, we will take all steps reasonably necessary to ensure that your personal information is treated securely and in accordance with this Policy.

11. DATA SECURITY

We employ appropriate technical and organizational measures to safeguard the Site, our services, and personal information, and to prevent unauthorized access, loss, misuse, alteration, destruction, or damage. These measures include the use of industry-standard technologies and internal procedures. Please note that access to publicly available data on the Site is not regarded as unauthorized access for security purposes.

As part of our commitment to data security, we maintain PCI DSS (Payment Card Industry Data Security Standard) certification for credit card payments, as required. We also ensure, through contractual agreements, that any third-party processing personal information upholds strict confidentiality, integrity, and security standards.

However, please note that data transmission over the internet is not entirely secure. While we take all reasonable steps to protect personal information, we cannot guarantee the security of information transmitted to the Site. Once received, we apply strict procedures and security measures to minimize the risk of unauthorized access.

Registered users are required to keep their passwords strictly confidential and must not disclose them to any third party. Further details regarding our data security practices are available upon request.

12. DELETING OR UPDATING PERSONAL INFORMATION

According to NDPA, 2023, you have rights regarding your personal information, including the right to request its deletion in certain circumstances (see Section 8 above). If you are a CIIX user and wish to delete your account information, please contact our Data Protection Officer via (designated email address).

We take reasonable steps to ensure that the personal information we collect is accurate and up to date. You may update your information through your account profile settings or notify us promptly if you believe it is inaccurate. Where necessary, we will correct or provide means to update or delete your information, unless retention is required for legitimate business or legal purposes.

We may require identity verification before processing requests to update or delete your information.

13. CHANGES TO THIS POLICY

We may change this Privacy Policy. If we make substantial changes, we will provide notice. This Privacy Policy takes effect from the date stated above. CIIX may update it at any time, with changes effective upon posting. By continuing to use the Service after notice of changes, you agree to the updated terms. We encourage you to review this Policy regularly.

14. CONTACT US

If you have any questions about this Privacy Policy, please contact us at (designated email address or landing page).

15. GOVERNING LAW AND APPLICABLE REGULATIONS

This Privacy Policy is governed by the laws of the Federal Republic of Nigeria. Specifically, our processing of personal data is subject to the Nigeria Data Protection Act, 2023 and all relevant subsidiary regulations, guidelines, and directives issued by the Nigeria Data Protection Commission (NDPC). CIIX operates and is headquartered in Abuja, Nigeria, and this Policy applies only to users who access our Platform within Nigeria.