Privacy Policy

Superflux International Limited Data Privacy Policy

 

We appreciate you taking the time to read all our notices carefully. Superflux International Limited (“Superflux”) is committed to protecting your privacy by ensuring that any personal data collected is used lawfully and transparently. 

This privacy policy explains how personal data is collected and used offline and when you use our website.

 This Privacy Notice explains:

  • Who we are
  • Personal data we collect
  • Our legal basis for processing
  • Who we may share information with and why
  • Where we may transfer data to
  • How we keep information secure and deal with security incidents
  • How long we may keep your data for
  • Your data privacy rights
  • How to contact our DPO

 

WHO IS SUPERFLUX INTERNATIONAL LIMITED?

 

Superflux International Limited is a leading security printing company in Nigeria, incorporated as a private limited liability company in 1995. We strive hard in ensuring   high secure products are produce to meet our customer satisfaction always. Superflux is accredited by the Central Bank of Nigeria, Central Bank of Zambia and other West African Central Banks. We are the industry leader for Cheque provision and other security printing solutions in Nigeria.    

Our services cut across Financial, Manufacturing, Entertainment, Education sectors as well as Government agencies in Nigeria and across several African countries. 

When providing these services, we take our responsibilities regarding data protection very seriously and are bound by all applicable data protection laws in respect of the handling, processing and collection of data. All employees who handle personal and business data are fully trained to ensure that the data is processed in line with Nigeria Data Protection Regulation (NDPR 2019).

 

DATA PROTECTION POLICY

 

Superflux understands the importance of client’s privacy and the need to securely hold their personal information.

This Privacy Policy explains what information we collect, how we collect, share, use, and protect your personal information when you visit or use our web site and other services offered by Superflux. You are also informed of your rights regarding the information we process and how you can contact us. By continuing to visit our website (https://www.superflux.com) and other Superflux’ customer touchpoints, you accept and consent to the practices described in this policy.

 

PURPOSE OF THIS POLICY

 

This Policy sets out how Superflux will process the personal data of its customers, staffs, suppliers and other third parties. This Policy applies to all personal data that the company processes regardless of the format or media on which the data are stored or who it relates to.

 

SCOPE OF THE POLICY

 

This policy applies to all parties – employees of the company and its subsidiaries and other stakeholders who may provide information to the Company such as customers and are expected to follow the policy along with any entity the Company collaborates with or such entity that Acts on behalf of the Company who may have need of the data we have.

 

PERSONAL DATA

 

Personal data is defined under the Nigeria Data Protection Regulations (NDPR) as:

“Any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person”.

 

THE DATA WE COLLECT

 

Personal information refers to ‘data that could identify a specific individual such as names, addresses, e-mail addresses, and telephone numbers. We collect information about you from various sources such as websites visits, applications, identification documents, personal financial statements, interactions with our relationship management officers, and other third parties and other written or electronic communications’. Depending on your medium of interaction with Superflux, we collect various types of information from you, as described below.

 

  • Personal details (e.g. name, date of birth, passport information or other identification information)
  • Contact details (e.g. phone number, email address, postal address or mobile number);
  • Transactional details (e.g. payments you make and receive)
  • Biometric information (e.g. fingerprints, facial recognition, or voice recognition)
  • Financial information (e.g. bank account number, debit card numbers, financial history) including information you provide to deliver payment initiation services and account information services regarding accounts you hold with other providers
  • Education and employment information.
  • Information about your family, lifestyle and social circumstances (such as dependents, marital status, next of kin and contact details);
  • Information about any other SUPERFLUX INTERNATIONAL products and services you currently have, you have applied for, or you have previously held.
  • Visual images and personal appearance (such as copies of passports or CCTV images
  • Online profile and social media information and activity, based on your interaction with us and our websites and applications, including for example your banking profile and login information, Internet Protocol (IP) address, smart device information, location coordinates, online and mobile banking security authentication, mobile phone network information, searches, and site visits.

 

HOW WE COLLECT YOUR INFORMATION

 

We collect personal information from different sources. Most of the data we collect will come from you, for example when you:

 

  • Enquire about our activities, our services, or ask us a question;
  • Provide your contact details to us when registering to use or accessing any websites or portals we make available or when you update those details;
  • Request marketing materials to be sent to you;
  • E-mail or get in contact with us in some way;
  • Voluntarily complete a customer survey or provide feedback on any of our message boards or via email or participate in any other interactive areas that appear on our websites or portals;
  • Use or view our website via your browser;
  • Interact with us using social media
  • Contact us offline, for example by telephone, SMS, e-mail, post or any other means of communication;
  • Partially complete and/or abandon any information inputted into our website and / or other online forms and may use this information to contact you to remind you to complete any outstanding information.
  • In addition, as you interact with our website, we will automatically collect technical data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs, and other similar technologies

 

THE INFORMATION WE DISCLOSE

 

Information about our customers or former customers will only be disclosed as permitted or required by law. We use this information to process and service your product request; with your consent or as directed by you.

 

HOW WE MAY DISCLOSE INFORMATION

 

We share information:

  • To satisfy any applicable law, regulation, legal process or enforceable governmental request.
  • To enforce applicable Terms of Service, including investigation of potential violations thereof.

 

OUR LEGAL BASIS FOR PROCESSING

 

Before processing any personal data, we ensure that at least one lawful basis under NDPR is met. We will not disclose personal data for any purpose other than what the data was originally collected for; unless there is an overriding legal basis that enables this processing. Superflux’ personnel or any third party acting on its behalf shall only process your personal data if at least one of these conditions are met:

 

  1. Consent: This refers to any freely given, specific, informed, and unambiguous indication through a statement or a clear affirmative action that signifies your agreement to the processing of your Personal Data by Superflux. Superflux shall not seek consent that may engender direct or indirect propagation of atrocities, hate, criminal acts, and anti-social conducts.
  2. Contract: Processing is necessary for the performance of a contract or entering a contract at your request.
  3. Legal obligation: Processing is necessary for compliance with a legal obligation to which Superflux is subject.
  4. Vital interest: Processing is necessary to protect your vital interests or those of another natural person.
  5. Public interest: Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in Superflux.
  6. Vendors, Consultants and Third-party Service Providers: Processing is required for legitimate interests of Superflux or a third party in so far as this does not conflict with the requirements for the protection of your personal data.

 

HOW WE USE YOUR PERSONAL DATA

 

To the extent permissible under applicable law, we may use your information for the following legitimate actions:

  • Providing and operating the products and services you have requested
  • Identifying and informing you about other products or services that we think may be of interest to you
  • To plan, conduct and monitor Superflux’ business
  • For improving the design and marketing of our range of services and related products for customer use.
  • Compare information for accuracy and to verify it with third parties/publicly available information.
  • Manage our relationships with you
  • To monitor, carry out statistical analysis and benchmarking to identify potential markets and trends, evaluate and improve our business
  • Monitor activities at our facilities, including compliance with applicable policies
  • For purposes required by law or regulation Without your personal information, we may not be able to provide or continue to provide you with the products or services that you need.

 

CONFIDENTIALITY AND SECURITY OF YOUR INFORMATION

 

We restrict access to your Information to our employees who we have determined they need it in order to provide products or services to you. We train our employees to safeguard customer information, and we require them to sign confidentiality and non-disclosure agreements. We maintain strict physical, electronic, and procedural safeguards to protect your Information from unauthorized access by third parties.

 

TRANSFER OF PERSONAL DATA

 

Personal data collected by Superflux may be transferred among its various divisions (with personnel who have business need to know). Other than to those individuals and entities listed below, your details will not be revealed by Superflux to any external body unless Superflux has your permission or is under either a legal obligation or any other duty to do so. For the purposes detailed above, your information may be disclosed to:

  • Other Branches/Subsidiaries of Superflux;
  • Any regulatory, supervisory, governmental, or quasi-governmental authority with jurisdiction over Superflux;
  • Any agent, contractor or third-party service provider, professional adviser, or any other person under a duty of confidentiality to Superflux.

 

DATA RETENTION

 

Information held about you is retained if the purpose for which the information was collected continues. The information is then destroyed unless its retention is required to satisfy legal, regulatory, or accounting requirements or to protect Superflux’ interest. It is your responsibility to maintain the secrecy of any user ID and login password you hold.

 

YOUR DATA PRIVACY RIGHTS

 

All data subjects have individual rights. On a case by case basis, you have the following rights in relation to your personal data processed by Superflux:

 

  1. The right to be informed – To emphasize the need for transparency over the usage of personal data, we ensure fair processing of information typically through this privacy policy.
  2. The rights to access – You have the right to request for copies of your personal data from Superflux where those requests are reasonable and permitted by law or regulation. We may charge you a small fee for this service.
  3. The right to rectification – You have the right to request that Superflux should correct any information you believe is inaccurate. You also have the right to request Superflux to complete information you believe is incomplete.
  4. The right to restrict processing – You have a right to ‘block’ or withdraw your consent to our processing of your information, which you can do at any time. When processing is restricted, we are permitted to store the personal data, but not further process it.
  5. The right to erasure – You have the right to request the deletion or removal of personal data where there is no compelling legal or regulatory requirement for its continued processing. Superflux will make sure that this right is protected.
  6. The right to data portability – You have the right to request that the bank transfer the data that we have collected to another organization, or directly to you, under certain conditions. We will ensure that personal data is moved, copied, or transferred easily from one IT environment to another in a safe and secure way, without hindrance to usability.
  7. The right to object – You have the right to object to our processing of your information if there are compelling legitimate grounds to do so and to the extent permitted by law or regulation. To exercise your right(s), please contact the Data Protection Office of Superflux.

 

You also have the right to:

 

  1. The right to receive your Personal Data in a commonly used and machine-readable format and the right to transmit these data to another Data Controller when the processing is based on (explicit) consent or when the processing is necessary for the performance of a contract.

 

  1. The right to lodge a complaint with the National Information Technology Development Agency (NITDA) where you believe our processing of your data violates the requirements of the Nigeria Data Protection Regulation 2019 (NDPR).

 

PRIVACY UPDATES

 

Superflux reserves the right to amend its prevailing Data Protection and Privacy Statement at any time and will place any such amendments on our websites (www.superfluxnigeria.com). The latest version of our privacy statement will replace all earlier versions unless it says differently. Please check back frequently to see any updates or changes to our Notice. This policy is not intended to, nor does it, create any contractual rights whatsoever or any other legal rights, nor does it create any obligations on Superflux in respect of any other party or on behalf of any party.

 

QUERIES AND COMPLAINTS

 

Superflux has a dedicated representative who can be approached for any questions, comments and requests regarding this privacy policy or our Data Privacy Management System.

 

Write to:

 

Data Protection Officer

Superflux International Limited

No. 3, Vori Close

Off Acme Road

Ogba, Ikeja

LAGOS