Privacy Policy
Purpose of the Policy
Linkage Assurance Plc (“We”, “Us” or “Our”) is committed to safeguarding the privacy of personal data of employees, customers, stakeholders and other interested parties that interact with us in the course of our business.
This Policy set out the details, how and why we collect, use, disclose and secure Personal Data.
You accept this Privacy Policy and hereby give us consent to save, process and use your Personal Data to the extent as allowed by law when you provide us with details of your Personal Data or by clicking on the “accept” button.
We may change this Privacy Policy from time to time. If we make changes, we will notify you by revising the date at the top of this policy, and in some cases, we may provide you with additional notice (such as by adding a statement to the homepages of our website or by sending you an email notification).
We encourage you to review the Privacy Policy whenever you interact with us to stay informed about our information practices and the ways you can help protect your privacy.
Personal Data comprises all that makes a person identifiable such as names, addresses, phone number, passport ID, usernames, passwords, digital footprints, photographs, financial data, assets and liabilities, insurance, savings and investments etc.
How we collect Personal Data
We collect Personal information through;
- Proposal, enquiry, registration, claim and feedbackforms;
- Application for employment or other forms of applications to theCompany;
- Purchase of any of our products orservices;
- By filling any of oursurvey;
- Telephone calls, emails,website;
- Online sales channels, such as, the online motor and online marine portals, official website, Facebook,twitterand Instagram.
Why we collect and hold Personal Data
We collect and process information for the following purposes;
- To provide information on our products and services.
- To ensure compliance with relevant legal and regulatory requirements.
- To manage security risk and prevent crimes such as fraud and money laundering.
- To develop database of employees,customersand other stakeholders.
- To contact and provide customers and other stakeholders information when necessary.
How we use the Personal Data collected
- We only use the Personal Data collected with the consent of the Data Subject or when required by the law to do so.
- We use the Personal Data collected to meet our compliance obligations to relevant stakeholders.
- We use the Personal Data to provide our customers with best-in-class products and services.
- We use the Personal Data to detect and prevent financial crimes such as fraud, money laundering and financing for terrorism.
- We may need to record conversations you have with us including phone calls, face-to-face meetings, letters, emails and any other kinds of communication. These recordings may be used to check your instructions to us and improve on our product and service delivery.
Legal Basis of Processing your Personal Data
We will only process your Personal Data where we have a legal basis to do so. Our legal basis will depend on the purpose for which we have collected and use your Personal Data. The legal basis for processing is any of the following:
- Consent:This will apply where you have provided your consent to the processing of your Personal Data for one or more specific purposes;
- Performance of a Contract with you: This will apply where processing is necessary for the performance of a contract to which you are a party or in order to take steps prior to entering into a contract withyou;
- Protection of Vital Interests: This is where processing is required for the protection of your vitalinterests;
- Compliance with Legal Obligation: Where we are subject to a legal obligation and need to use your Personal Datain order to comply with that obligation.
- Public Interest: Where processing is necessary for the performance of a task or function carried out in the interest of thepublic;
- Legitimate Interests: Where we reasonably consider it is in your legitimate interests, our legitimateinterests or the legitimate interests of others. This may include commercial interests, individual interests, or broader societal benefits.
Security of Personal Information
We attach very great importance to the security of your Personal Data collected and held by us. We maintain physical, electronic and procedural safeguards to secure your information from unauthorized access and use, accidental or unlawful alteration and destruction; and other unlawful or unauthorized forms of processing.
Employees are forbidden to use Personal Data for private or commercial purposes, to disclose it to unauthorized persons, or to make it available in any other way.
Our suppliers and contractors are expected to adhere to the same security standards as ours. Regardless of where Personal Data is transferred, we take all steps reasonably necessary to ensure that personal data is kept securely.
Transfer of Personal Information to Third Parties
We may in the course of our business transfer your Personal Data to third parties. Be assured that such transfer will be done in line with relevant regulations, laws and in accordance with international best practice.
We may also share your Personal Data with third parties to comply with regulatory reporting or where we have legal duty to do so.
Methods used to collect and Store Personal Information
We use POST web service to collect information, then store them into session variables and thereafter encrypt all collected Personal Datan with BCrypt encryption algorithm before storing them in the database.
Retention of your Personal Data
We will hold your Personal Data in our systems for as long as it is necessary to fulfil the purpose for which it was collected or to comply with legal, regulatory or internal policy requirements.
Information Technology Security Measures
We have implemented the following security measures to protect the confidentiality, integrity, and availability of our IT Assets:
- Firewall – to filter our network traffic and as an identity authorization tool.
- Virtual Private Network – for secured remote connection to business-critical applications.
- Network Segregation.
- System Access Control.
- Biometric Access Control for Data Centre.
- CCTV.
- Passwords.
- Multifactor Authentication.
- i. Sophos Endpoint Security.
- Information Security Awareness Programs.
Your Rights
The Nigeria Data Protection Regulation (NDPR) gives you certain rights in respect to the Personal Data we hold about you. As a Data Subject, you have the right to;
- Request for access to your Personal Data.
- In certain circumstances, you have the right to request that your Personal Data be deleted or destroyed.
- Request that your Personal Data be updated or rectified if it is factually inaccurate.
- Request that your Personal Data be transferred to a third party.
- Request that the processing of your Personal Data be restricted.
- Request that your Personal Data should not be processed for the purpose of marketing.
Data Subject’s Responsibility
You are responsible for making sure that the Personal Data provided to us is accurate. You should notify us of any change to your Personal Data.
Breach / Privacy Violation
In the event of a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to Personal Data, we shall within 72 (Seventy-Two) hours of having knowledge of such breach report the details of the breach to NITDA.
Where we ascertain that such breach is detrimental to your rights and freedoms in relation to your Personal Data, we shall within 7 (Seven) days of having knowledge of the occurrence of such breach take steps to inform you of the breach incident, the risk to your rights and freedoms resulting from such breach and any course of action to remedy said breach.
Contact Us
Where you have any concerns relating to the processing of your Personal Data by Linkage Assurance or If you need any or further clarifications on this policy, please contact us at Plot 20, Block 94, Providence Street, off Adewunmi Adebimpe Street, Lekki Phase 1, Lagos or [email protected]
