Data Protection Policy

1. Data Protection Overview

Suwk Technologies Limited is committed to protecting the privacy, confidentiality, and data rights of all individuals and partner institutions using our platform. This Data Privacy Policy outlines our standards for processing, securing, and governing personal and institutional data in strict compliance with applicable regulatory frameworks, including the Nigeria Data Protection Act (NDPA) and international data privacy standards.

2. Principles of Data Processing

We process all personal data in accordance with the following core principles:

Lawfulness, Fairness, and Transparency: Data is collected legitimately with clear consent or under explicit legal bases.

Purpose Limitation: Data is used strictly for the operational, reporting, and verification purposes described at the point of collection.

Data Minimization: We collect only the minimum amount of information required to deliver our logbook, supervision, and reporting services.

Accuracy: We maintain mechanisms to ensure personal data remains up to date and correct.

Storage Limitation: Data is retained only for as long as necessary to fulfill legal, academic, and auditing obligations.

Integrity and Confidentiality: High grade technical and organizational safeguards are continuously deployed to prevent unauthorized access, loss, or misuse.

3. Data Subjects and Consent

SUWKLog processes data on behalf of both individual data subjects (participants, supervisors, managers) and enterprise data controllers (universities, TVET institutes, corporate bodies, non profits). Individual users explicitly grant consent upon account setup for operational processing. Where programs involve participants under 18 years of age, contracting institutions or program coordinators act as the primary data controllers responsible for verifying valid parental or guardian consent.

4. Data Transfer and Third Party Processing

Your data is never sold, rented, or commercialized. Data transfers are strictly limited to secure third party infrastructure providers required to operate our service, such as enterprise cloud hosting, database backup services, and transactional communication tools. All subprocessors are legally bound by data protection agreements that match our privacy and security standards.

5. International Data Transfers

When data is transferred across borders for secure cloud storage or processing, SUWKLog ensures appropriate transfer mechanisms are in place, maintaining encryption standards that meet or exceed local and international legal requirements.

6. Individual Data Rights

Depending on your jurisdiction and role within an active program, you hold the following rights regarding your personal data:

Right of Access: You can review your personal profile, active enrollments, and complete submission history at any time through your dashboard.

Right to Rectification: You may update inaccurate personal profile details directly within your account settings.

Right to Erasure and Restriction: You may request the deletion or restricted processing of your personal profile data. Please note that historical program logs, timestamps, and verified activity evidence linked to institutional records are preserved as permanent audit trails required by your program controller.

Right to Data Portability: You can request an export of your personal submission logs and records in standard digital formats.

7. Data Breach Notification Protocols

In the unlikely event of a security incident leading to unauthorized access, exposure, or alteration of personal data, SUWKLog maintains an active incident response protocol. Affected users, organizational leads, and relevant regulatory authorities will be notified promptly in accordance with statutory reporting timelines.

8. Contact the Data Protection Officer

For inquiries regarding this Data Privacy Policy, data subject access requests, or regulatory compliance matters, contact our Data Protection Officer directly at privacy@suwkafrica.com.