Data Protection & NDPA Compliance
Last updated: January 14, 2026
How Venshack Technologies complies with the Nigeria Data Protection Act (NDPA) 2023 and protects your personal information.
Venshack Technologies is committed to protecting your personal data in accordance with the Nigeria Data Protection Act (NDPA) 2023 and regulations issued by the Nigeria Data Protection Commission (NDPC). This policy outlines our data protection practices and your rights as a data subject.
Legal Framework
Our data protection practices are governed by:
- Nigeria Data Protection Act (NDPA) 2023: The primary legislation governing data protection in Nigeria
- NDPC Regulations: Implementation regulations and guidelines issued by the Nigeria Data Protection Commission
- Industry Standards: International best practices including ISO 27001 and relevant security standards
Data Protection Principles
Lawfulness, Fairness, and Transparency
We process personal data lawfully, fairly, and in a transparent manner. We ensure data subjects are informed about how their data is used.
Purpose Limitation
Personal data is collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes.
Data Minimization
We collect only personal data that is adequate, relevant, and limited to what is necessary for the purposes for which it is processed.
Accuracy
Personal data is kept accurate and up to date. We take reasonable steps to ensure inaccurate data is erased or rectified without delay.
Storage Limitation
Personal data is kept in a form that permits identification of data subjects for no longer than is necessary for the purposes for which it is processed.
Integrity and Confidentiality
Personal data is processed in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing and accidental loss.
Legal Basis for Processing Personal Data
We process personal data only when we have a lawful basis to do so. The legal bases we rely on include:
- Consent: You have given clear consent for us to process your personal data for specific purposes
- Contract Performance: Processing is necessary to perform a contract with you or to take steps at your request before entering into a contract
- Legal Obligation: Processing is necessary to comply with legal obligations under Nigerian law
- Legitimate Interests: Processing is necessary for our legitimate interests or those of a third party, except where overridden by your rights and interests
Your Rights as a Data Subject
Under the NDPA, you have the following rights regarding your personal data:
Right to Access
You have the right to request access to your personal data and obtain information about how we process it.
Right to Rectification
You have the right to request correction of inaccurate personal data and completion of incomplete data.
Right to Erasure
You have the right to request deletion of your personal data under certain circumstances, subject to legal obligations.
Right to Restrict Processing
You have the right to request restriction of processing your personal data in certain situations.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
Right to Object
You have the right to object to processing of your personal data for direct marketing or other legitimate interests.
Right to Withdraw Consent
Where processing is based on consent, you have the right to withdraw consent at any time without affecting the lawfulness of prior processing.
Right to Complain
You have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your rights have been violated.
How to Exercise Your Rights
To exercise any of your data protection rights, you can:
- Email our Data Protection Office at legal@venshack.io
- Access your account settings in the Venshack platform
- Submit a written request to our office address (details in contact section below)
We will respond to your request within 30 days as required by the NDPA. In some cases, we may need to verify your identity before processing your request.
Data Security Measures
We implement appropriate technical and organizational measures to ensure the security of your personal data:
Technical Measures
- End-to-end encryption for data transmission
- Secure data storage with encryption at rest
- Regular security audits and vulnerability assessments
- Multi-factor authentication for account access
Organizational Measures
- Access controls and user authentication
- Employee training on data protection
- Data protection impact assessments
- Incident response and breach notification procedures
International Data Transfers
In some cases, we may transfer your personal data to countries outside Nigeria. When we do so, we ensure:
- The transfer is to a country with adequate data protection laws as recognized by the NDPC
- We implement appropriate safeguards such as standard contractual clauses
- We obtain your explicit consent where required
- The transfer is necessary for the performance of a contract or to take steps at your request
Data Breach Response
In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will:
- Notify the Nigeria Data Protection Commission within 72 hours of becoming aware of the breach
- Notify affected data subjects without undue delay if the breach poses a high risk
- Take immediate steps to contain and remediate the breach
- Provide guidance on steps you can take to protect yourself
Data Protection Office
We have a Data Protection Office (DPO) to oversee our data protection practices and ensure compliance with the NDPA. You can contact our DPO for any data protection matters:
Data Protection Office Contact
Email: legal@venshack.io
Phone: +234 (0) 123 456 7890
Address: Data Protection Office, Venshack Technologies, Lagos, Nigeria
Nigeria Data Protection Commission
If you have concerns about how we handle your personal data or wish to lodge a complaint, you have the right to contact the Nigeria Data Protection Commission:
NDPC Contact Information
Website: www.ndpc.gov.ng
Email: info@ndpc.gov.ng
Address: Nigeria Data Protection Commission, Abuja, Nigeria
Contact Us
For any questions about data protection or to exercise your rights, please contact us:
Email: legal@venshack.io
Phone: +234 (0) 123 456 7890
Address: Lagos, Nigeria