Lawful Basis for Processing

We process personal data only where we have a lawful basis to do so, including your consent, the performance of a contract, compliance with a legal obligation, or our legitimate interests where these do not override your rights.

Data Minimization

We adhere strictly to the principle of data minimization. This means we collect only the personal information that is directly necessary to deliver the service or fulfill the purpose for which it was requested, nothing more. We do not collect data speculatively or in excess of what is required. Where a service can be delivered with less information, we will always prefer the less intrusive approach. This principle applies equally to our Nigerian operations and to all data subjects whose information we process, regardless of jurisdiction.

Cross-Border Data Transfers

Where personal data is transferred outside of Nigeria, we ensure that adequate protections are in place consistent with NDPA requirements, including contractual safeguards with receiving parties.

Data Subject Rights Under the NDPA

Nigerian data subjects have the right to access, correct, and request deletion of their personal data, as well as the right to object to or restrict its processing. To exercise these rights, contact us at info@digissllc.com. Complaints may also be directed to the Nigeria Data Protection Commission (NDPC).