This Privacy Notice explains the ways GiriToday (“we”) collects, uses, and shares personal data about a User or visitor (“you”) in connection with your access to the Platform or any of its Services (“our services” or “our platform”) and in connection with any other information GiriToday collects when you use the Platform or any of its Services.
We value your privacy and care about the way in which your personal information is handled, stored and shared. Hence, we remain committed to safeguarding the privacy of the persons whose information had been provided to us or collected by us during the course of playing or that personal information we receive from visitors to our website.
Definitions
- GiriToday means the proprietors of the Website or Platform or GiriToday Technology Limited.
- Data Controller means the natural or legal person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal information are, or are to be, processed.
- Data Processor means any natural or legal person who processes the data on behalf of the Data Controller.
- Data Subject means any natural person who is using our Service (“you”) and is the subject of Personal Data.
Principles for processing personal data
Our principles for processing personal data are:
- Fairness and lawfulness. When we process personal data, the individual rights of the Data Subjects must be protected. All personal data must be collected and processed in a legal and fair manner.
- Restricted to a specific purpose. The personal data of Data Subject must be processed only for specific purposes.
- Transparency. The Data Subject must be informed of how his/her data is being collected, processed and used.
What personal data we collect and process
GiriToday collects several different types of personal data for various purposes. Personal Data may include, but is not limited to email address, First name, last name, Phone number, Address, Date of Birth, State, Province, ZIP/Postal code, City, Country, necessary financial information, personal data retrieved from authorized third-parties etc.
How we use the personal data
GiriToday uses the collected personal data for various purposes:
Account Creation and Management: To create and maintain your seller account on our platform. Communication: To send you account-related updates, including order confirmations, payment notifications, and platform-related announcements. Transaction Processing: To complete payments, handle disputes, and support the fulfillment of orders. Legal Compliance: To meet regulatory requirements on Know Your Customer (KYC)/Know Your Business (KYB), fraud prevention, and other legal obligations. Service Improvement: To enhance the performance of our platform and provide personalized services based on your preferences. Payments Processing; To enhance and facilitate process payments for our service or on the Platform
Enforcement of GiriToday’s Terms of Service
- Advertising; To personalize your ads and carry on marketing communications – More on ads in the next section of the Notice. Limitation of Ads - Where you wish to limit the nature or completely halt your personalized ads, please refer to your privacy settings on your device and all your active social media platforms.
Legal basis for collecting and processing personal data
GiriToday’ legal basis for collecting and using the personal data described in this Data Protection Policy depends on the personal data we collect and the specific context in which we collect the information:
- You have given us your consent to do so
- You have given us your consent in order to consummate a contract between you and a GiriToday Merchant.
- Processing your personal data is in our legitimate business interests
- GiriToday needs to comply with the applicable law and regulations
Retention of personal data
We may retain your personal information only for as long as is necessary for the purposes set out in this Privacy Notice. We may retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies.
Third Parties access to personal data collected by GiriToday
GiriToday may share your personal information with certain trusted third parties in accordance with contractual arrangements in place with them, including:
- Our Merchants, Partners, Professional Service Providers/Advisers and Auditors
- External professional IT Service Providers such as Cloud Storage Providers, Data Hosting Platforms etc.
- Regulatory Authorities
- Third parties engaged in the course of providing services to you with their prior consent.
Where necessary, or for the reasons set out in our policy, personal information may also be shared with regulatory authorities, courts, tribunals, government agencies and law enforcement agencies. GiriToday may also be required to disclose your information to comply with legal or regulatory requirements. GiriToday will use reasonable endeavours to notify you before it does this unless we are legally restricted from doing so.
Your Right.
The Constitution of the Federal Republic of Nigeria 1999 (as Amended), the Nigeria Data Protection Act 2023 and Its Regulations, and other applicable data protection laws provide certain rights for you with respect to personal information.
Notwithstanding where you may be resident, your data right would be respected and GiriToday remains committed to upholding your rights under the applicable data protection and governance laws in your country. Primarily, we understand that your data protection rights shall but not limited to the following include:
- Right to Information: You may ask for more information on our privacy practices and how we handle your data. This right includes extends to access, update or to delete the information we have on you
- Right to Access: You can request a copy of the personal data we hold about you and have that exported in a machine-readable format or forwarded to any third-party of your choosing.
- Right to Rectification: You can update or amend inaccurate personal data.
- Right to Object: You may object to certain types of processing, such as marketing communications.
- Right to Manage Consent, Opt-out of marketing communication and Restrict Processing; You can withdraw your consent in totality or partially by unsubscribing from all marketing communication at any time.
- Right to Delete or be forgotten: You can request the deletion of your personal data. This right is not absolute, as are required to retain your data due to our legal obligations or legitimate business interests.
You are entitled to request details of the information we hold about you and how we process it. You may also have a right in accordance with applicable data protection law to have it rectified or deleted, to restrict our processing of that information, to stop transfers of your personal information to a third party and, in some circumstances, to have personal information relating to you transferred to another organization.
You may also have the right to lodge a complaint in relation to how we have processed your personal information with the relevant regulatory authority.
If you object to the processing of your personal information, or if you have provided your consent to processing and you later choose to withdraw it, we will respect that choice in accordance with our legal obligations. Please email us here at [email protected]
Please note that even after you have chosen to withdraw your consent we may be able to continue to process your personal information to the extent required or otherwise permitted by relevant law, in particular in connection with exercising and defending our legal rights or meeting our legal and regulatory obligations.
You may wish to inform us of any update to any information you may have with us, please email us here [email protected]
International Data Transfer
The information we collect about you may be transferred, used, or stored in any country where we have operations or where we engage service providers. That means that your information may be transferred to a different country than where it was collected, and which may not provide equivalent levels of data protection as Nigeria.
The level of Data protection in countries outside Nigeria may be less than that offered within Nigeria. Where this is the case, GiriToday shall implement appropriate measures to ensure that your personal information remains protected and secure in accordance with applicable data protection laws, guidelines, and standards in Nigeria at the least. Nigerian standard contractual clauses are in place between all foreign entities that share and process personal data.
Where our third-party service providers process personal data outside Nigeria in the course of providing services to us, our written agreement with them will include appropriate measures, usually standard contractual clauses on data sharing in accordance with prevailing local and international standards.
Changes to this Notice
GiriToday may change this Notice at any time for several reasons. However, if we make changes to this Notice, it shall notify you by updating the effective date at the top of this Notice. GiriToday may also provide notice of any changes through other means, such as placing a notice on our homepage at GiriToday.com/privacy or sending you an email. We encourage you to review the Privacy Notice whenever you access the Services or otherwise interact with us to stay informed about our data practices and the choices available to you.
ELECTRONIC CONSENT: Clicking on the "Agree" button on this page or before the creation of your account you indicate that:
- you have ready the above information
- you voluntarily agree to participate
- you are at least 18 years of age
If you do not Agree please decline the creation of our account and use of the Platform by clicking on the "disagree" button.
Our Data Protection Officer can be contacted below;
Habib A.
[email protected]