Privacy Policy
We take your privacy seriously. This policy explains what personal data CICANDA Limited collects, how we use it, and your rights under Nigerian and applicable international law.
1. Who We Are
CICANDA Limited ("CICANDA", "we", "our", "us") is a company registered in Nigeria, operating from Aco Housing Estate Complex, Abuja. We provide Information Technology, Media & PR, and Reseller & Partnership services. We are the data controller for personal data collected through this website and through our service engagements.
2. What Personal Data We Collect
We may collect the following categories of personal data:
- Contact and identity data: your name, job title, organisation name, email address, and telephone number, provided when you contact us or submit an enquiry form.
- Communication data: the content of messages you send us through this website, by email, or by telephone.
- Technical data: your IP address, browser type and version, time zone, browser plug-in types, operating system, and other technology on the devices you use to access this website (collected automatically via our analytics tools).
- Usage data: information about how you use our website, including pages visited, time spent, and links clicked.
We do not collect any special categories of personal data (such as data about your health, ethnicity, religion, or biometric data).
3. How We Use Your Data
We use personal data for the following purposes:
- To respond to enquiries and communicate with prospective clients.
- To deliver contracted services and manage the client relationship.
- To send relevant service information or updates where you have consented or where we have a legitimate interest to do so.
- To analyse website usage and improve the performance and content of this website.
- To comply with legal obligations, including those under the Nigeria Data Protection Regulation (NDPR) and other applicable law.
4. Lawful Basis for Processing
Under the NDPR and applicable law, we process personal data on the following bases:
- Consent: where you have given clear consent for us to process your data for a specific purpose (e.g. newsletter subscription).
- Contract: where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
- Legitimate interests: where processing is necessary for our legitimate business interests, such as maintaining and improving our website, or communicating with prospective clients, and those interests are not overridden by your data protection rights.
- Legal obligation: where we are required to process data to comply with a legal obligation.
5. Data Sharing
We do not sell, rent, or trade your personal data. We may share your data with the following categories of third parties only where necessary:
- Service providers: third parties who assist with website hosting, analytics, email delivery, and similar technical services, all bound by contractual data protection obligations.
- Professional advisers: lawyers, auditors, and insurers where necessary for the conduct of our business.
- Regulatory authorities: where required by law, court order, or lawful request from a competent authority.
6. International Transfers
Some of our third-party service providers are based outside Nigeria. Where we transfer personal data outside Nigeria, we do so in accordance with the NDPR requirements, including by ensuring that recipients provide adequate levels of data protection.
7. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Enquiry data is retained for up to 24 months. Client engagement data is retained for seven years following the conclusion of the engagement, in line with Nigerian commercial record-keeping requirements.
8. Your Rights Under the NDPR
Under the Nigeria Data Protection Regulation, you have the right to:
- Access: request a copy of the personal data we hold about you.
- Rectification: request correction of inaccurate or incomplete data.
- Erasure: request deletion of your personal data where there is no legitimate reason for us to continue processing it.
- Restriction: request that we restrict processing of your data in certain circumstances.
- Objection: object to processing of your personal data where we rely on legitimate interests as our lawful basis.
- Portability: request transfer of your personal data to you or a third party in a structured, machine-readable format.
- Withdraw consent: where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at hello@cicanda.com. We will respond within 30 days. You also have the right to lodge a complaint with the National Information Technology Development Agency (NITDA), the Nigerian data protection supervisory authority.
9. Cookies
This website uses cookies to improve user experience and analyse traffic. For detailed information on the cookies we use, please see our Cookie Policy.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by updating the "last updated" date. We encourage you to review this page periodically.
11. Contact
For any privacy-related questions or to exercise your data rights, contact us at hello@cicanda.com or write to CICANDA Limited, Aco Housing Estate Complex, Abuja, Federal Capital Territory, Nigeria.