1. General Policy Scope

Soft Alliance and Resources Limited set forth how it shall manage the Personal Data collected in the normal course of business. Any data provided are handled confidentially to ensure that the content and service being offered are tailored to specific requests, needs, and interests.

This Policy applies to:
• All investors, operators, individuals, or employees who provide Personal Data using any channel;
• All functional areas and Soft Alliance sites in the scope of the NDPR
• All methods of contact, including in-person, written, via the Internet, direct mail, telephone, or other data capturing channels/methods.

This Policy is designed also to inform all stakeholders about their obligation to protect the privacy of all stakeholders’ information and the security of Personal Data.

This document applies to the entire Nigerian Data Privacy Regulation scope

2. Purpose and Users

Soft Alliance and Resources Limited software development needs to gather and process certain information about individuals with whom it has a relationship for various purposes, but not limited to the recruitment and payment of staff, relationship management with Members, issuers, investors, collection of personally identifiable information on their platforms, In light of the emerging data regulatory environment that requires higher transparency in how companies manage personal information, the Company must ensure that its business operations align with global best practices on the protection of rights and privacy of individuals. This Policy is designed to inform all stakeholders about their obligation to protect the privacy of all stakeholders’ information and the security of Personal Data.

This document applies to the entire Nigerian Data Privacy Regulation scope. Users of this document are all employees of Soft Alliance and service providers.

3. Policy Statement

All data in the custody of Soft Alliance shall be handled with utmost privacy and protection. Soft Alliance shall comply with all legislation and regulations applicable to its business and operations regarding data protection and privacy. All personal data shall be classified in line with Soft Alliance Information Classification Policy.

4. Description

This policy document describes how we use and protect Your Information and the control you have over it. Soft Alliance respects your privacy and will keep all your details confidential.

4. Description

Database Administrator/ Processor is a specialized computer systems administrator who maintains a successful database environment by directing or performing all related activities to keep the data The top responsibility of a DBA professional is to maintain data integrity.

Data Controller means a person who either alone, jointly with other persons or in common with other persons or as a statutory body, determines the purposes for and how personal data is processed or is to be processed.

Data Portability means the ability for data to be transferred easily from one IT system or computer to another through a safe and secure means in a standard format ▪ Nigeria Information Technology Development Agency – NITDA

Data Protection Compliance Organization (DPCO) means any entity duly licensed by NITDA for training, auditing, consulting, and rendering services and products for compliance with Nigeria Data Protection Regulation, or any foreign Data Protection law or any other regulation affecting in Nigeria.

Consent of the data subject means any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

Datameans facts and statistics collected together for reference or analysis.

Database refers to a structured set of data held in a computer, especially one that is accessible in various ways.

Data Subject/PII Principal means an identifiable person; one who can be identified directly or indirectly, in particular by reference to an identification number or one or more factors specific to his physical, physiological, mental, economic, cultural, or social identity.

Personal Data is any information that relates to an identified or identifiable living individual. Different pieces of information, which when collected together can lead to the identification of a particular person, also constitute personal data.

Data breach is a security incident in which information is accessed without authorization.

Record a thing constituting a piece of evidence about the past, especially an account kept in writing or some other permanent form, means public record and reports in creditable news media

Sensitive Personal Data means data relating to religious or other beliefs, sexual tendencies, health, race, ethnicity, political views, trade union membership, criminal records, or any other sensitive personal information.

5. Information We Collect

We collect the following personal information:

When the organization that you represent becomes a customer and/or you become a user of our Services, we may collect the following types of information: your first and last names; gender; date of birth; government-issued identification and/or number; photo identification; address; fax; country of residence; nationality; place of birth; country of birth; your company and/or personal email address; your telephone number; your company name; your job title; your company’s industry, trade details and regulated status; general information about your interest in our products and services; information provided when you correspond with us; any updates to information provided to us; information you provide to help us provide you with improved services; information about your marketing preferences, and personal information we collect about you or that we obtain from our third party sources.

Whenever you contact us or respond to our communications (e.g., in email, telephone, or writing), we receive your contact information and any other personal information you choose to provide us. We will use such information to fulfil your requests or to provide services.

We collect Personal Information when you use or request information about our Services, subscribe to marketing communications, request support, complete surveys, or sign up for and/or attend events we participate in.

Your communications with other users of the Services or the Site may be monitored, recorded and/or reviewed by SoftAlliance.

In addition, the following information is created and recorded automatically when you visit our Site or use our Services:

Technical information, including the Internet protocol (IP) address used to connect your computer to the internet address; the website address and country from which you access information; the files requested; browser type and version; browser plug-in types and versions; operating system; and platform. We use this personal information to administer our Site, to measure the efficiency of our systems and to undertake an analysis on the locations from which people access our webpages; and

Information about your visit and your behaviour on our Site or our Services. This may include the website you visit before and after visiting our Site (including date and time), time and length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page, traffic data, location data, weblogs and other communication data and information provided when requesting further service or downloads.

In addition to this, we also use facial recognition data of users (user face data which includes features of the user’s face including the user’s left eye, right eye, upper lip, lower lip and nose ) for verifying users on our SoftSuite Mobile Application (“SoftSuite Mobile”)

6.   Cookies

We, and third parties we may partner with, may store and retrieve information on and from your browser by placing a small text file called a “Cookie” in the browser files of your computer, smartphone, or other device. By using the Services or the Site, you agree that we may use, store, and access Cookies on and from your computer, smartphone, or other device. For more information about Cookies and how we use them, please visit our Cookies Policy.

7.   Non-Personal Information

Non-Personal Information may be collected, processed, and used in accordance with applicable law, for any and all purposes we deem fit. Generally, the information SoftAlliance collects is used only for our own internal purposes, for example, to improve the Services and the Site, to improve our marketing and promotional efforts, to improve customer service, and to improve SoftAlliance content and Site offerings, and may also be used by SoftAlliance to contact you to provide you with information which we believe may be useful to you. SoftAlliance believes that these uses allow it to improve the Services and our Site and to better tailor them to meet customers’ needs.

8.   Use of Personal Information

In general, Personal Information you submit to us, or that is obtained by us, is used:

• to create and manage the business relationship,
• to provide and support our services to the organization you represent,
• to improve our Services,
• to communicate with you about our Services,
• to send you notifications regarding your use of the Services or the Site,
• to send you notifications by various means, including regular mail, email, telephone, including voicemail, or SMS (text message)
• to respond to requests that you make,
• to bill you, to resolve fee disputes and for other associated billing services,
• to further new services or products,
• to operate, maintain, and improve the features, functionality, and performance of our Site and Services,
• to comply with our legal obligations;
• to comply with our regulatory obligations;
• to monitor compliance with our rulebooks and contractual terms of use;
• to better understand our customers and the way they use and interact with our Site and our Services;
• to enhance security, prevent fraud or market abuse, monitor and verify identity or service access, combat spam or other malware or security risks;
• to deliver targeted marketing and service update notices;
• to facilitate events we participate in and communicate with you about those;
• to enforce our agreements with third parties;
• to protect our business and to enforce and exercise our rights.
• for face data, the image captured is used for facial recognition to verify the user's identity within the SoftSuite application

Furthermore, we may create anonymized information from Personal Information by excluding information that makes the information personally identifiable to you. We may use this anonymized information for internal purposes, such as analyzing usage patterns, so that we may enhance the Site and Services, and we also reserve the right to use and disclose such anonymized information at our discretion to third parties. Such anonymized information may be deemed to be Non-Personal Information and used accordingly.

9.   Disclosure of Personal Information

Except as otherwise stated in this Privacy Policy, we will not disclose or share your Personal Information with third parties, unless you ask or authorize us to do so.

We disclose your Personal Information to our subsidiaries, joint ventures, or other companies under common control (collectively, “Affiliates”), in which case we will require our Affiliates to honor this Privacy Policy. We may provide your Personal Information to your employer and to your colleagues within the organization that you represent. We may provide your Personal Information to any legal, regulatory or governmental body that we are required to disclose information to, as well as to credit control and debt collection agencies. In addition, we may provide your Personal Information to business partners, third party service providers, and suppliers who work on our behalf (a) to provide you with some of the Services or the Site, (b) to operate, improve, understand, customize, and support the Services or the Site, (c) to help us communicate with our customers, (d) to assist us in our marketing, advertising and promotional activities (e) to analytics and search engine providers that assist us in the improvement and optimization of our Services or our Site and (f) to help us with our business and informational needs. However, we do not grant these business partners, service providers, and suppliers any independent right to use this information except to help us provide the Services, operate the Site, or for our legitimate business interests.

In the event SoftAlliance goes through a business transition such as a merger, acquisition by another company, or sale of all or a portion of its assets, your Personal Information will likely be among the assets transferred. You acknowledge that such transfers may occur, and that any acquirer of SoftAlliance, or a portion or all of its assets may continue to use your Personal Information as set forth in this Privacy Policy

We may disclose Personal Information we have collected from and about you if we believe in good faith that such disclosure is necessary (a) to comply with relevant laws, (b) to respond to court orders, subpoenas, or warrants served on us, (c) to respond to an emergency, or (d) to protect and defend SoftAlliance’s rights or property.

For the purpose of capturing user’s face data, the captured image is used only within SoftSuite and is not shared with any third party solution.

Please note that third parties you interact with, including your employer, may have their own privacy policies, and SoftAlliance is not responsible for their operations, including, but not limited to, their personal information practices. Personal Information collected by third parties, which may include contact details, is governed by their privacy practices. We encourage you to learn about the privacy practices of those third parties.

10.   Retention of Your Personal Information

We may transfer the Information, including Personal Information, we collect about you to recipients in countries other than the country in which the information originally was collected, including but not exclusively, countries outside Nigeria, the European Economic Area (“EEA”) and the EMEA region. Those countries may not have the same data protection laws as the country in which you initially provided the information. By using or participating in any of our Services or the Site, and/or by providing us with your Information, you consent to the collection, transfer, storage and processing of your Information in such other countries, including countries outside of the EEA. In those cases where we transfer Personal Information collect in the EEA to Affiliates or to our service providers located in countries outside the EEA, we will take appropriate measures to ensure that the recipient protects your Personal Information adequately in accordance with this Privacy Policy. These measures may include entering into European Commission approved standard contractual arrangements designed to ensure that your Personal Information is protected.

The data subject has given consent to the processing of his or her data for one or more specific purposes

Processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject before entering into a contract.

Processing is necessary for compliance with a legal obligation to which Soft Alliance and Resource Limited is a subject.

Processing is necessary to protect the vital interests of the data subject or another natural person.

12.    Legal Bases for Our Use of Your Personal Information

We rely on both your consent and our legitimate business interests as the legal bases for processing Personal Information.

In this regard, we use your Personal Information when necessary (a) to perform our obligations under any contract with you; (b) to comply with our legal obligations (for example, complying with our legal and regulatory obligations); and (c) for our legitimate interests or the legitimate interests of others (for example, to ensure the security of our Site or Services). If we rely on our (or another person’s) legitimate interests for using your Personal Information, we will undertake a balancing test to ensure that our (or the other person’s) legitimate interests are not outweighed by your interests or fundamental rights and freedoms which require protection of the Personal Information.

If we rely on your consent for us to use your Personal Information in a particular way, but you later change your mind, you may withdraw your consent by contacting us at the e-mail address set forth in the “Contact Us” section below, and we will stop doing so.

13.   Links to Other Websites

The Services and/or the Site may contain links to other websites that are not owned or controlled by us. The provision of such links does not signify our endorsement of such websites or their content. We have no control over, do not review and are not responsible for, the privacy policies, terms of use, or content displayed on such other websites. Please be aware that the terms of our Privacy Policy do not apply to any outside websites.

14.   Security and Confidentiality

SoftAlliance has put in place commercially reasonable protections and procedures to safeguard and secure the Personal Information we collect. However, even with these measures, we cannot guarantee the security of Personal Information. By using our Services or our Site, you acknowledge and agree that we make no such guaranty.

15.   Access to, Correcting or Deleting Your Personal Information

If we hold Personal Information about you, you may request that we correct, amend, or delete certain information where it is inaccurate, within reason and in accordance with applicable laws. Prior to fulfilling any request for information or deletion, we may require you to provide information so that we may verify your identity. Subject to applicable laws, we reserve the right to decline requests that are unreasonable, present risk to the privacy of another individual, may jeopardize the confidentiality of another party, are excessively repetitive, may require significant technical modifications to our systems. Please contact us at the address set forth in the “Contact Us” section below if you need assistance in updating or reviewing your information.

Your Rights with Respect to Your Personal Information

the right to access your Personal Information;

the right to restrict the use of your Personal Information;

the right to have incomplete or inaccurate data corrected;

the right to ask us to stop processing your Personal Information; and

the right to require us to delete your Personal Information in some limited circumstances.

the right in some circumstances to request for us to “port” your personal data in a portable, re-usable format to other organizations (where this is possible).

We will consider all such requests and provide our response within a reasonable period (and in any event within one month of your request unless we tell you we are entitled to a longer period allowed by applicable law). Please note, however, that certain Personal Information may be exempt from such requests in certain circumstances, for example if we need to keep using the information to comply with our own legal obligations or to establish, exercise or defend legal claims. If an exception applies, we will tell you this when responding to your request. We may request you provide us with information necessary to confirm your identity before responding to any request you make.

Marketing Activities

We may collect and use your personal information for undertaking marketing by email telephone and mail. We may send you certain marketing communications (including electronic marketing communications to existing customers) if it is in our legitimate interests to do so for marketing and business development purposes

We will always obtain your consent to direct marketing communications where we are required to do so by law (for example, if you have provided a personal email address to us) and if we intend to disclose your personal information to any third party for such marketing.

If you wish to stop receiving marketing communications, you can contact us at at the address set forth in the “Contact Us” section below.

Changes to this Privacy Policy

We may change this Privacy Policy at any time by posting a new version on this page or on a successor page. The new version will become effective on the date it is posted. We reserve the right to modify this Privacy Policy at any time, and you agree that your continued use of our Services or our Site shall constitute your acceptance of any modifications to such Privacy Policy, so please review it frequently.

Contact Us and Opting-Out

If you wish to exercise any of your rights in relation to your Personal Information, including exercising your opt-out rights, please send us an email to our Compliance Officer at dpo@softalliance.com

If you have any questions regarding our Privacy Policy or the collection or use of your Information, please contact our Compliance Officer at  dpo@softalliance.com