DATA PRIVACY AND PROTECTION POLICY
The Data Privacy and Protection Policy of KNIT Technologies Nigeria Limited describes the requirements for handling personal data securely and maintaining its confidentiality, in accordance with best practices and data protection principles, as well as the procedures to be followed when doing so. The roles and duties for making sure suitable procedures are in place to meet standards and guarantee compliance are also listed.
This policy is applicable to all employees, contractors, temporary workers, consultants, and other third parties who have permission to access our information and information systems globally for KNIT Technologies Nigeria Limited. This Policy has been produced as an aid to deciding how to collect, handle, store or transmit personal data that KNIT may receive.
What is Personal Data?
When dealing with personal data, KNIT Technologies Nigeria Limited employees are subject to this policy. Any information that connects to and can explicitly identify a living individual is considered personal data. Names and addresses, email addresses, and other personal information are examples of personal data. To carry out its daily business, KNIT Technologies Nigeria Limited must obtain, hold, process, and transfer certain personal data about persons, such as users (users), from a variety of sources. Certain types of personal information are labeled as sensitive; thus, care must be taken to ensure that users have given their consent in a sufficient amount of time.
Policy Statement
The following policy statements must always be upheld by KNIT when using or processing personal data:
We only make use of personal data that have been disclosed by the User or that are permitted by this Policy.
Every time the purpose of data processing or the legal justification for data processing changes, the User will be notified.
KNIT may only process and retain sensitive personal data with the consent of the user and only when it is absolutely necessary. Only a little period of time should be spent keeping personal data, and it should always be kept current and accurate.
The User may have the right to view personal information about them that is being processed.
When sending marketing materials to the Users, KNIT must determine whether the User's consent needs to be gained first. A person's desire to not receive such materials in the future must likewise be honored by KNIT.
When working with an external data processor, KNIT must make sure that the processor adopts the proper organizational and technological security measures to protect the user's personal information and that such measures are properly managed.
It must be confirmed that, after the transfer of data, the treatment of such personal data complies with data protection legislation if personal data needs to be moved to a location other than KNIT Technologies Nigeria Limited premises.
The collecting of personal data is a necessary component of websites, so both new website projects and current websites must abide by this policy.
Unauthorized access to, disclosure of, deletion of, or other use of user’s records is regarded as a significant disciplinary offense and may be illegal.
All records must be kept for the length of time specified in this document's retention policy by the business.
Information Gathering
We obtain the following categories of user information:
Personal data, such as names, email addresses, phone numbers, and billing information, but not only those.
Transaction Information: We keep track of information regarding the events for which you buy tickets, including the specifics of those events, the number of tickets you bought, and your payment details.
Usage Information: We collect information on how you use our platform, including the pages you view, the features you utilize, and the links you click.
Device Information: We track information about the operating system, browser type, and device type you use to access our Platform.
Information Use:
We make the following uses of the data we collect:
Offering Services: Handling ticket sales, sending event confirmations, and offering customer service.
Communication: We'll use your information to send you newsletters, coupons, and other relevant updates, with the option to unsubscribe.
Improvement: By analyzing usage trends, we can improve our Platform, services, and user experience.
Legal Compliance: To adhere to legal requirements and grant legitimate demands.
Information Sharing
In the following situations, we might divulge your information:
Event Organizers: In order to complete your order, we may share your information with the event organizers of the events for which you buy tickets.
Service Providers: In order to offer you with services, we may share your information with outside service providers.
Legal Requirements: In order to comply with legal requests or as mandated by law, we might disclose your information.
Processing Personal Data
RULE: Personal data must only be processed for purposes which have been notified to the user
or which are permissible under this Policy.
Explanation: KNIT Technologies Nigeria Limited has, where required, registered its various processing activities with the applicable data protection regulatory bodies. Under this Policy, all processing of personal data must be lawful, and any processing must be adequate, relevant and not excessive for the specific purposes for which the personal data was obtained. This Policy provides guidance as to the type of processing which is permissible under data protection laws.
Processing is a very wide term which in practice covers any use of personal data, including:
✓ Obtaining, recording, holding, and carrying out any operation(s) on the personal data.
✓ Organization, adaptation, or alteration of the personal data.
✓ Retrieval, consultation, disclosure or use of the personal data.
✓ Combination, blocking, erasure or destruction of the personal data
All such data processing activities within KNIT Technologies Nigeria Limited will constitute processing as defined by data protection laws. The actual processing being carried out must be necessary to achieve the purpose for which it was collected (and the purpose notified to the user) and the user must not be misled or deceived with regards to the full extent of processing of their personal data. At all times, personal data processed should be adequate, relevant, and not excessive in relation to the purpose(s) for which it has been collected. For example, forms or questionnaires should only require information which is relevant to their specific purposes.
Data protection requires that KNIT Technologies Nigeria Limited provides the user with this notification at the time the personal data is collected.
Processing of Sensitive Personal Data
RULE: KNIT may only process and store sensitive personal data if they are required to do so and only with the person's permission.
Explanation: Given the nature of KNIT Technologies Nigeria Limited's operations, processing personal data is required for day-to-day operations. However, KNIT may occasionally need to process sensitive data. In these circumstances, KNIT must first get the User's express consent before processing that type of data. Any information pertaining to a person's physical or mental health, racial or ethnic origin, sexual orientation, politics, religion, or participation in a trade union is considered sensitive data, as is any information pertaining to alleged or actual criminal offenses committed by the user.
Data Retention
The rules and processes for keeping and managing user data gathered through Knit's Platform are described in this data retention policy. This policy is applicable to how our ticketing platform (the "Platform") stores and keeps track of user-provided personal and non-personal data.
We pledge to keep user data just as long as it is required to achieve the goals described in our Data Privacy Policy. Depending on the type of information and regulatory requirements, data retention durations may change.
Categories of Data:
We categorize data collected on our Platform into the following groups:
Personal Information: This includes data such as names, email addresses, phone numbers, and billing information.
Transaction Information: Details about events for which users purchase tickets, including event specifics, ticket quantities, and payment data.
Usage Information: Information about how users interact with the Platform, including pages visited, features used, and links clicked.
Device Information: Data about the devices users employ to access our Platform, such as device type, operating system, and browser type.
Data Retention Periods:
The following retention periods provide a general overview of how long we retain different categories of data:
Personal Information: We retain personal data for as long as necessary to provide our services and fulfill legal obligations. Upon user request, we will delete personal data.
Transaction Information: We retain transaction data for a period necessary to handle refunds, address disputes, and for financial reporting purposes.
Usage and Device Information: We retain usage and device data for a reasonable period to improve our services and analyze platform performance.
Retention and Deletion Policy
KNIT Technologies Nigeria Limited (Hereinafter referred to as “KNIT”) seeks to ensure that it retains only data necessary to effectively conduct its services and work in fulfilment of its mission. The need to retain data varies widely with the type of data and the purpose for which it was collected. KNIT strives to ensure that data is only retained for the period necessary to fulfil the purpose for which it was collected and is fully deleted when no longer required. This policy sets forth KNIT’s guidelines on data retention and deletion.
Data Retention
This policy covers all data collected, stored or leased systems and media, regardless of location. It applies to both data collected and held electronically (including photographs, video and audio recordings) and data that is collected and held as hard copy or paper files. The need to retain certain information may be mandated by federal or local law and applicable Data Protection Regulations.
Reasons for Data Retention
•Providing an ongoing service to the data subject (e.g. sending a newsletter, publication or ongoing program updates to an individual, ongoing training or participation in KNIT’s programs, processing of employee payroll and other benefits)
• Compliance with applicable laws and regulations associated with financial and programmatic reporting by KNIT to its funding agencies and other donors
• Compliance with applicable, tax and International laws
• Other regulatory requirements
• Security incident or other investigation
• Intellectual property preservation
• Litigation etc.
Account Deletion
As a user, you are able to delete your account through the Account section of the app's side navigation menu.
Account Inactivity:
Upon account deletion, your account will become inactive for the next 60 days. During this period, you will not be able to access or use any features of the application. However, if you change your mind and wish to reactivate your account, you can reach out to our Admin via “Contact Us” and request for re-activation of the account.
Data Removal:
After 90 days of inactivity, all your physical data stored in our application will be permanently removed. This includes your user credentials, demographic information, events, posts, facilities, expert profiles, ads, and any likes, comments, or shares you have made.
Inactive User Limitations:
During the period of inactivity, you will have limited functionality within the application. You will not be able to log in, create, edit, or delete events, facilities, expert profiles, posts, ads, or other features. Additionally, you won't be able to like, share, comment on any application features or provide reviews for any services. However, you can still enjoy all the features available to guest users.
Profile Visibility:
Upon account deletion, your user profile will no longer be accessible by us. All information related to your account, including profile details, posts, and interactions, will be permanently removed from the application. Please note that all other personal information, including email, contact details, and demographic information, will be physically deleted.
Third-Party Integration:
Any third-party integrations associated with your account will be automatically removed as soon as your account is deleted. This means that any connections, authorizations, or data exchanges with third-party applications or services will be severed.
Account Recovery:
Once the account is deleted, there will not be any process of account recovery. If you choose to delete your account, you will need to create a fresh account if you wish to use our services again. Please keep this in mind as the deletion process is irreversible.
Effects of Account Deletion:
If you have subscribed to any paid services or subscriptions, deleting your account will result inthe cancellation of the subscription. Recurring payments will cease, and access to paid featureswill be revoked after account deletion. If you have any amount available in your wallet, it will not be automatically refunded. To initiate the refund process, please contact our KNIT Admin via the "Contact Us" option.
Services and Subscriptions:
One-time purchases such as virtual goods, upgrades, or additional content made within the KNIT app will generally remain unaffected by account deletion. However, access to those purchased items will no longer be available as they are tied to your user account.
Data Deletion
Data destruction ensures that KNIT manages the data it controls and processes it in an efficient and responsible manner. When the retention period for the data as outlined above expires, KNIT will actively destroy the data covered by this policy. If an individual believes that there exists a legitimate business reason why certain data should not be destroyed at the end of a retention period, he or she should identify this data to his/her supervisor and provide information as to why the data should not be destroyed. Any exceptions to this data retention policy must be approved by KNIT’s data protection offer in consultation with legal counsel. In rare Circumstances, a litigation hold may be issued by legal counsel prohibiting the destruction of certain documents. A litigation hold remains in effect until released by legal counsel and prohibits the destruction of data subject to the hold.
Legal Requirements:
We will retain and disclose information as required by applicable laws and regulations. If a legal requirement dictates a longer retention period, we will comply with those requirements.
User Rights:
Users have the right to request access to, correction of, or deletion of their personal information in accordance with our Data Privacy Policy. Users may contact us to exercise these rights.
Data Disposal:
Upon reaching the end of the applicable retention period, we will securely dispose of or anonymize user data in accordance with applicable laws and regulations. When the user deletes data on its account, we immediately start the process of removing it from the product and our systems. First, we aim to immediately remove it from view and the data may no longer be used to personalize the user’s experience.
We then begin a process designed to safely and completely delete the data from our storage systems. Safe deletion is important to protect our users and customers from accidental data loss. Complete deletion of data from our servers is equally important for users’ peace of mind. This process generally takes around 90 days from the time of deletion. This often includes up to a month-long recovery period in case the data was removed unintentionally.
Our service also uses encrypted backup storage as another layer of protection to help recover from potential disasters. Data can remain on these systems for up to 3 months.
As with any deletion process, things like routine maintenance, unexpected outages, bugs, or failures in our protocols may cause delays in the processes and timeframes defined in this article. We maintain systems designed to detect and remediate such issues.
Changes to Data Retention Policy:
We may update this Data Retention Policy periodically to align with changes in our practices or legal obligations. Users will be informed of any significant changes.
Contact Us:
If you have questions or concerns about our Data Retention Policy or the retention of your data, please contact us at info@knittechapp.com
By using our Platform, you acknowledge that you have read and understood this Data Retention Policy and consent to the retention and management of your data as described herein.
Data Security:
User information and personal data shall be handled and maintained securely in accordance with this Policy and any other policies KNIT Technologies Nigeria Limited may establish. To prevent physical loss or damage of personal data, all staff members must maintain and manage personal data securely. Additionally, you must make sure that access to and disclosure of personal data are appropriately limited. You are accountable for making sure, for instance, that:
Personal data must be kept secure to prevent unauthorized access or changes, accidental loss or damage, and other calamities.
Personal data must not be disclosed to an unauthorized third party, whether orally, in writing, electronically, or in any other way, without first considering the Rules of this Policy, including whether consent is required and if there is a legitimate business purpose. When left unattended, electronic personal data must be inaccessible; for instance, computers and wireless devices must have screen locks and password protection.
Personal information-containing files shouldn't be visible to the public.
Personal data files must be safeguarded by authentication mechanisms (such as user IDs and passwords) so that only authorised users can access them while they are stored and processed on KNIT Technologies Nigeria Limited systems.
User’s Choices:
Access and Correction: Your account settings allow you to access, modify, or update your personal information.
Opt-Out: You can choose not to receive promotional communications by doing as instructed in the email or by getting in touch with us.
Data Deletion: Subject to any applicable legal duties, you may ask for the deletion of your account and all associated data.
Children's Privacy:
Our Platform is not intended for children under the age of 13 We do not knowingly collect personal information from children in this age group.
Direct Marketing
KNIT must decide whether to get the user's consent before sending any marketing materials to any user (such as a potential customer). KNIT must also abide with a user's request to stop receiving such communications in the future. KNIT Technologies Nigeria Limited will, where necessary, adhere to the regulations governing direct marketing. A user has the right to demand that a corporation stop marketing directly to them or not even start.
Any communication of any advertising or marketing content that is intended for a specific audience is referred to as direct marketing. This will include written items (such as newsletters, research, and updates) as well as electronic ones (through email or the internet).
Users have a right to fair processing of their personal data, which in practice requires that they be informed of the identity of the user and the intended use of their data. Useful privacy statements and notices can be included to forms of data collecting, websites, and other places to address this. The right to object to the use of one's personal information for marketing purposes and to request that KNIT Technologies Nigeria Limited cease using one's personal information for direct marketing is also available to users.
Cross-border Data Transfers
If personal data must be moved inside or outside of countries other than those in which the company has its headquarters, KNIT must make sure that, following the transfer, the personal data will be treated in accordance with the local country's data protection legislation. Additionally, the processing must adhere to the recipient country's data protection laws.
Contact Us:
If you have any questions or concerns about this Policy, please contact us at info@knittechapp.com.
By using our Platform, you acknowledge that you have read and understood this Data Privacy Policy and consent to the collection, use, and sharing of your information as described herein.
We may update this Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes.