FarmNet Technologies
Data Protection Compliance

Nigeria Data Protection Compliance

Our commitment to protecting your personal data in accordance with the Nigeria Data Protection Commission (NDPC) regulations and the Nigeria Data Protection Act 2023.

Last updated: September 6, 2025

Compliance with Nigerian Law

Farmnet Technologies & Agro Services Limited is fully committed to complying with the Nigeria Data Protection Act 2023 and regulations established by the Nigeria Data Protection Commission (NDPC).

🇳🇬 Registration Status: We are registered with the NDPC as a data controller and processor operating within the Federal Republic of Nigeria.

Data Protection Principles

1

Lawfulness

Personal data is processed lawfully, fairly, and transparently

2

Purpose Limitation

Data collected for specific, legitimate purposes only

3

Data Minimization

Only necessary data is collected and processed

4

Accuracy

Data is accurate, complete, and up-to-date

5

Storage Limitation

Data retained only as long as necessary

6

Security

Appropriate technical and organizational measures

7

Accountability

Demonstrable compliance with data protection principles

Your Rights Under Nigerian Law

As a data subject under the Nigeria Data Protection Act 2023, you have the following rights:

Fundamental Rights

  • Right to Information

    Clear information about how your data is processed

  • Right of Access

    Request copies of your personal data

  • Right to Rectification

    Correct inaccurate or incomplete data

Control Rights

  • Right to Erasure

    Request deletion of your personal data

  • Right to Object

    Object to certain types of data processing

  • Right to Data Portability

    Receive data in a structured, machine-readable format

Legal Basis for Processing

We process your personal data based on the following legal bases as recognized under Nigerian law:

Consent

When you explicitly agree to the processing of your personal data for specific purposes.

Examples: Marketing communications, optional data analytics, social media integration

Contract Performance

Processing necessary for the performance of a contract or to take steps prior to entering into a contract.

Examples: Account creation, payment processing, service delivery, customer support

Legal Obligation

Processing required to comply with legal obligations under Nigerian or international law.

Examples: KYC verification, anti-money laundering compliance, tax reporting, regulatory filings

Legitimate Interest

Processing necessary for legitimate interests pursued by Farmnet or third parties, provided such interests are not overridden by your rights.

Examples: Fraud prevention, platform security, business analytics, improvement of services

Cross-Border Data Transfers

When we transfer your personal data outside Nigeria, we ensure adequate protection through:

Adequacy Decisions

  • Transfers to countries with NDPC adequacy decisions
  • Recognition of equivalent data protection standards
  • Ongoing monitoring of destination country laws

Appropriate Safeguards

  • Standard contractual clauses approved by NDPC
  • Binding corporate rules for multinational transfers
  • International certification schemes and codes of conduct

Current International Partners: Our technology infrastructure and payment processors are located in the United States and European Union, which have appropriate data protection frameworks in place.

Data Protection Impact Assessments

We conduct Data Protection Impact Assessments (DPIAs) for high-risk processing activities, including:

High-Risk Processing

  • Systematic monitoring of farmers and buyers
  • Large-scale processing of financial data
  • Automated decision-making for credit scoring
  • Processing of location and agricultural data

Assessment Process

  • Systematic identification of risks to rights and freedoms
  • Assessment of necessity and proportionality
  • Implementation of risk mitigation measures
  • Consultation with NDPC when required

Data Breach Response

In the event of a personal data breach, we follow NDPC requirements:

72h

NDPC Notification

Report data breaches to the NDPC within 72 hours of becoming aware, unless unlikely to result in risk to rights and freedoms.

📧

Individual Notification

Notify affected data subjects without undue delay when the breach is likely to result in high risk to their rights and freedoms.

📝

Documentation

Maintain detailed records of all data breaches, including facts, effects, and remedial actions taken.

Contact Our Data Protection Officer

For data protection matters or to exercise your rights under the Nigeria Data Protection Act 2023:

Data Protection Officer

dpo@farmnetafrica.com

Direct Line

+234 (0) 123 456 7891

Supervisory Authority:
Nigeria Data Protection Commission (NDPC)
https://ndpc.gov.ng
Email: info@ndpc.gov.ng | Phone: +234 (0) 9 461 9368

NDPC Registration: Farmnet Technologies & Agro Services Limited is registered with the Nigeria Data Protection Commission under registration number [NDPC-REG-001234] as required by Section 28 of the Nigeria Data Protection Act 2023.