O’Daniels Industries Limited is committed to the highest standards of data privacy and protection. As a provider of core infrastructure for the logistics industry, we recognise that the security of personal data—including names, contact details, and location data—is critical to the trust our partners place in us.
This statement outlines how we comply with the Nigeria Data Protection Act (NDPA) 2023 and other applicable regulatory frameworks.
1. Our Regulatory Status
-
Data Processor & Controller: We act as a Data Processor for our logistics partners and a Data Controller for our direct service operations.
-
NDPC Registration: We are formally registered with the Nigeria Data Protection Commission (NDPC) under the category of Major Data Processing – Ordinary High Level (MDP-OHL).
2. Core Privacy Principles
In accordance with Section 24 of the NDPA 2023, we adhere to the following principles:
-
Lawfulness & Transparency: Data is processed only on a legal basis (such as contract fulfilment or consent) and in a transparent manner.
-
Purpose Limitation: We only collect data necessary for logistics operations, such as shipment tracking and delivery coordination.
-
Data Minimisation: We ensure that the personal data we process is adequate, relevant, and limited to what is strictly necessary.
-
Security & Integrity: We implement robust technical and organisational measures to prevent unauthorised access, loss, or destruction of data.
3. Technical Safeguards
To protect the data flowing through our logistics backbone, we utilise:
-
Encryption: All sensitive data is encrypted both at rest and in transit.
-
Access Controls: Strict “least-privilege” access protocols ensure that only authorised personnel can interact with data.
-
Secure API Integration: Our integrations with third-party service providers (such as SMS gateways) are governed by strict Data Processing Agreements (DPAs).
4. Data Subject Rights
We facilitate the exercise of data subject rights as mandated by law, including the right to:
-
Access and rectify personal data.
-
Object to or restrict data processing.
-
Request the erasure of data (the “right to be forgotten”).
-
Data portability.
5. Data Protection Officer (DPO)
We have appointed a dedicated Data Protection Officer to oversee our compliance strategy and serve as a point of contact for the NDPC and data subjects.
Contact our DPO Here
6. Transparency and Complaints
If you have any questions about our data practices or wish to make a complaint, please contact us here. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your rights have been violated.