In compliance with the Nigeria Data Protection Act (NDPA) 2023, RMF REGION19 MULTIPURPOSE COOPERATIVE SOCIETY LIMITED ("the Cooperative") is committed to protecting the privacy and personal data of its members and subscribers. This Data Protection Policy outlines our practices regarding the collection, processing, and disclosure of personal information, including sensitive data such as Bank Verification Numbers (BVNs).
1. Introduction
This policy is established to ensure that all personal data collected by the Cooperative is handled in accordance with the NDPA 2023 and other applicable laws. Our goal is to maintain the trust of our members by being transparent about how we use their data and by implementing robust data protection measures.
2. Data Collection
We collect personal data through various means, including membership application forms, both online and offline. The types of personal data we may collect include:
- Full Name
- Contact Information (e.g., phone number, email address)
- Residential Address
- Bank Verification Number (BVN)
- Identification Details (e.g., National ID, Passport Number)
3. Purpose of Data Collection
The personal data collected is used for the following purposes:
- Processing membership applications
- Managing member accounts and services
- Complying with legal and regulatory obligations
- Communicating with members about Cooperative activities and services
4. Consent
We require explicit consent from individuals before collecting and processing their personal data. This consent is obtained through a separate consent form attached to our data collection instruments. The consent form clearly states:
- The specific data to be collected
- The purpose(s) for which the data will be used
- The individual's rights regarding their data
- Contact information for inquiries
By signing the consent form, individuals agree to the processing of their data as outlined.
5. Data Processing and Storage
Personal data is processed and stored securely to prevent unauthorized access, alteration, or disclosure. We implement appropriate technical and organizational measures to safeguard the data, including encryption and access controls.
6. Data Sharing and Disclosure
We do not share personal data with third parties except in the following circumstances:
- With government regulators and authorities as required by law
- With service providers who assist in our operations, under strict confidentiality agreements
7. Data Retention
Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected or as required by law. After this period, data is securely deleted or anonymized.
8. Individual Rights
Individuals have the following rights regarding their personal data:
- Right to access their data
- Right to correct inaccurate data
- Right to withdraw consent at any time
- Right to request data deletion
Requests to exercise these rights can be made through the contact information provided below.
9. Contact Information
For questions or concerns regarding this Data Protection Policy or our data practices, please contact:
Data Protection Officer
RMF REGION19 MULTIPURPOSE COOPERATIVE SOCIETY LIMITED
10. Policy Updates
This policy may be updated periodically to reflect changes in our practices or legal requirements. Members will be notified of significant changes through appropriate channels.