Cana Digital (“Cana Digital”, “we” or “us”) is committed to protecting the privacy and security of your personal data. This Privacy Policy describes how we collect, process, and use your data in accordance with the Nigeria Data Protection Act (NDPA) 2023, the Nigeria Data Protection Regulation (NDPR), and other applicable data protection laws.

1. Information about the collection of personal data

(1) Personal data refers to any information relating to an identified or identifiable natural person (Data Subject). This includes information such as your name, address, email address, or user behavior. The purpose of processing this data is to present our company and services online and to facilitate our business operations.

(2) The Data Controller is:
Cana Digital
No 5, Ololade Odeyemi Close, Anthony 100232, Lagos Nigeria
Email: info@canadigital.com

(3) Data Protection Officer (DPO): You can contact our Data Protection Officer regarding any data privacy inquiries at info@canadigital.com or by post to our office address, marked c/o “Data Protection Officer”.

(4) When you contact us by email or via a contact form, we store the data you provide (name, company, and email address) to address your inquiry. We delete this data once storage is no longer required or restrict processing if legal retention obligations apply.

2. Lawful Basis for Processing

In accordance with the NDPA and NDPR, Cana Digital processes your data based on the following legal grounds:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose (e.g., subscribing to a newsletter).
• Contractual Necessity: Where processing is necessary for the performance of a contract to which you are a party.
• Legal Obligation: Where processing is necessary for compliance with a legal obligation in Nigeria.
• Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these do not override your fundamental rights.

3. Your Rights

Under the NDPA and NDPR, you have the following rights regarding your personal data:

• Right of Access: The right to be informed of and request access to the personal data we process about you.
• Right to Rectification: The right to request that we amend or update your personal data where it is inaccurate or incomplete.
• Right to Erasure (“Right to be Forgotten”): The right to request that we delete your personal data under certain conditions.
• Right to Restriction of Processing: The right to request that we temporarily or permanently stop processing all or some of your personal data.
• Right to Object: The right to object to us processing your personal data on grounds relating to your particular situation or for direct marketing purposes.
• Right to Data Portability: The right to request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent: The right to withdraw your consent at any time where processing is based on consent.

Furthermore, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe our processing of your data violates the law.

4. Collection of Data During Website Visits

(1) For purely informational use of the website, we only collect the data your browser sends to our server. This is technologically necessary for us to display the website and ensure its stability and security:

• IP address
• Date and time of access
• Referrer URL
• Browser type and version
• Operating system

(2) Cookies: Our website uses cookies to enhance user experience.

• Transient Cookies: Automatically deleted when you close your browser (e.g., session cookies).
• Persistent Cookies: Automatically deleted after a set duration (typically 12 months).
• You can configure your browser to reject cookies; however, this may limit the functionality of our website.

5. Newsletter and Marketing

If you subscribe to our newsletter, we use a double opt-in method to confirm your consent. We use Mailchimp (The Rocket Science Group, LLC) and Mailerlite (Digital marketing tool) to distribute our newsletter.

• Cross-Border Transfer: As Mailchimp and Mailerlite are located in the USA, your data is transferred outside of Nigeria. Cana Digital ensures that such transfers comply with the NDPA through the use of Standard Contractual Clauses or other approved safeguards to ensure an adequate level of protection.

6. Analytics and Tracking Tools

We use Google Analytics to analyze website usage.

• Data collected includes origin (city/country), device type, and user behavior.
• IP Anonymization: We have activated IP anonymization so that your IP address is truncated before being processed.
• You can opt out of Google Analytics by using the browser add-on available here: https://tools.google.com/dlpage/gaoptout.

7. Social Media and Third-Party Plugins

We provide links to our social media profiles (LinkedIn, Facebook, YouTube, X/Twitter). These platforms have their own privacy policies and data processing practices. We employ the two-click method for share buttons to ensure that no data is sent to these providers unless you actively click the button to log in or share content.

8. Data Security

Cana Digital has implemented appropriate technical and organizational measures (such as encryption and firewalls) to protect your personal data against accidental or unlawful destruction, loss, alteration, and unauthorized disclosure.

9. Retention Period

We store your personal data only as long as necessary to achieve the purposes for which it was collected, or as required by statutory retention periods (e.g., Nigerian tax or commercial laws).

10. Contact and Objections

If you wish to exercise your rights or have questions about how Cana Digital handles your data, please contact us:

Cana Digital
No 5, Ololade Odeyemi Close, Anthony 100232, Lagos Nigeria
Email: info@canadigital.com