Privacy Policy

This Privacy Policy describes how GIT (referred to as "GIT," "we," "us," or "our") collects, uses, processes, and protects your personal data when you use our website, products, and services (collectively, the "Services").

We are committed to protecting your privacy and personal data in accordance with the Nigeria Data Protection Act (NDPA), 2023, and other applicable laws and regulations.

---

1. Introduction and Scope

This Privacy Policy applies to all personal data collected and processed by GIT, whether in electronic or hard copy format. It covers our interactions with:

• Clients and Business Partners: Individuals and businesses that use our financial infrastructure and software services, such as our CORA core banking system.
• End-Users: Individuals who are customers of our clients and whose data is processed by our systems on behalf of our clients.
• Website Visitors: Individuals who visit our websites, contact us, or interact with our online services.
• Job Applicants and Employees: Individuals who apply for jobs or are employed by GIT Holdings.

---

2. Definitions

Personal Data: Any information relating to an identified or identifiable natural person (Data Subject).

Sensitive Personal Data: Information relating to financial data, racial or ethnic origin, political opinions, religious beliefs, trade union membership, health, or sexual life.

Data Controller: GIT, which determines the purposes and means of processing personal data.

Data Processor: Any person or entity that processes personal data on behalf of the Data Controller.

---

3. Information We Collect

A. Information You Provide Directly

• Contact and Identity Information
• Financial and Transaction Data
• Identity Verification Data (KYC/AML)
• Employment-Related Information

B. Information Collected Automatically

• Device and Usage Data
• Cookies and Tracking Technologies

C. Information from Third Parties

• Data received from clients (as Data Processor)
• Publicly available sources for verification and compliance

---

4. Purposes for Processing Personal Data

• Performance of a Contract
• Legal Obligation
• Legitimate Interests
• Consent (You may withdraw consent at any time)

---

5. How We Share Information

• With Clients and Partners
• With Trusted Service Providers
• For Legal and Regulatory Purposes
• During Business Transfers

---

6. International Data Transfers

We may transfer your personal data outside Nigeria. Where this occurs, we ensure adequate protection measures such as standard contractual clauses and compliance with NDPA requirements.

---

7. Your Data Rights

• Right to be Informed
• Right to Access
• Right to Rectification
• Right to Deletion
• Right to Object
• Right to Data Portability
• Right to Withdraw Consent

To exercise your rights, please contact us using the details below.

---

8. Data Security

We implement robust technical and organizational measures including encryption, access controls, network security, and regular audits to protect your personal data. However, no internet transmission is 100% secure.

---

9. Retention of Personal Data

We retain personal data only as long as necessary for legal, contractual, and operational purposes.

---

10. Changes to this Policy

We may update this Privacy Policy periodically. Material changes will be communicated via our website or other appropriate means.

---

11. Contact Us

If you have any questions or concerns, please contact:

GIT Holdings Data Protection Officer
Email: privacy@gitecholding.com