Protection of your personal data is important to us. In this Privacy Statement we explain how we collect and use your personal data.
1. Why do we process your personal data?
If you submit your personal data to us, we may process it for the purposes described below.
1.1 To respond to your queries or communicate with you
We process your personal data when you contact us via our online contact forms.
We process your name, title, (business) contact details (including your email address, telephone number, name of your company) and any other information that you provide to us in the open field entry of the contact form.
We process this information based on your consent, which can be withdrawn by you at any time.
1.2 For surveys or other (marketing) communication
We process your personal data to send you surveys on our products or services or to send you marketing communication, to keep you updated on events, special offers, products and services of Chemical & Allied Products (CAP Plc), the sole technological licensee of AkzoNobel in Nigeria. We may create profiles and analyze your interactions with us. This way we learn about your interests and can customize our communication to meet your personal interests.
We process your name, address, date of birth (but only if you have provided us with that information voluntarily), your email address and other topics you may have actively and voluntarily shared with us.
We process this information based on your consent, which can be withdrawn by you at any time.
1.3 For the development and improvement of products and services
We process aggregated personal data for various CAP Plc. business-related purposes, such as developing new products and services, enhancing, improving or modifying our websites, apps and other digital channels, identifying usage trends, determining the effectiveness of our promotional campaigns and operating and expanding our business activities.
When possible, we use aggregated data. Sometimes we process personal data such as your name, your email address, your IP address, gender, place of residence, and any other information mentioned in this Statement or otherwise provided to us by you.
We process this information for our legitimate business purposes.
1.4 For the technical and functional management of the app or Website
When you use our services, we may collect certain information automatically from your device. We process your personal data to help you find information in a quick and easy way and to improve access to and functionality of this website, app or other digital channel.
The information we collect automatically may include information like your IP address, device type, unique device identification numbers, browser-type, broad geographic location (e.g., country or city-level location), and other technical information. We may also collect information about how your device has interacted with our service, including webpages accessed and links clicked.
Collecting this information enables us to better understand the users of our services, where they come from, and what content is of interest to them. We use this information for our internal analytics purposes and to improve the quality and relevance of our services, for product and service improvement, and the development of new features and functionality.
We process this information for our legitimate business purposes, i.e. to better understand how our customers interact with our websites.
1.5 When you create an account with us, to administer the account
Upon your request, we can create a personal account for you to make the purchasing process easier for you.
We may process your name, a valid email address and any other information requested. We also process your display name, your role and your login data.
We process this information based on your consent, which can be withdrawn at any time.
1.6 When you purchase products through our web shop, to process your order and manage the relationship
We use personal data to process your purchase and to deliver your order, to report the status of your order and to contact you about the transaction.
We process your personal data to carry out our purchase agreement with you and to deliver your order to you.
1.7 Compliance with laws and legal obligations and protection of CAP Plc. assets and interests
We will process your personal data as appropriate or necessary
(a) under applicable law, including laws outside your country of residence and including e.g. counterparty due diligence, money laundering, financing of terrorism and other crimes;
(b) to comply with legal obligations;
(c) to respond to requests from public and government authorities including public and government authorities in our outside your country of residence;
(d) to enforce our terms and conditions and other applicable policies;
(e) to protect our operations;
(f) to protect our rights, privacy, safety or property, and/or that of yours or others; and
(g) to allow us to pursue available remedies or limit the damages that we may sustain.
If so required, we may process your name, your contact information, your correspondence with CAP Plc., your use of any of our products and/or services and any other information mentioned in this Statement or otherwise provided to us by you, if such is required for one of the purposes mentioned in the previous paragraph.
We may process this information for our legitimate business purposes.
2. Cookies and similar tracking technology
3. With whom do we share your personal data?
We may disclose your personal data to:
- Any competent law enforcement body, regulatory, government agency, court, or other third party where we believe disclosure is necessary:
(i) as a matter of applicable law or regulation;
(ii) to exercise, establish or defend our legal rights; or
(iii) to protect your vital interests or those of any other person;
- An actual or potential buyer (and its agents and advisers) in connection with any actual or proposed purchase, merger, or acquisition of any part of our business, provided that we inform the buyer it must use your personal data only for the purposes disclosed in this Privacy Statement; and
- Other persons if you have consented to, or instructed us our suppliers to make the disclosure.
4. Where do we store your personal data?
Your personal data may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection laws that are different to the laws of your country (and, in some cases, may not be as protective).
Our servers are in the European Economic Area, although our group companies and third-party suppliers operate around the world. This means that when we collect your personal data we may process it in any of these countries, subject to the following paragraph.
Countries outside the European Economic Area do not always have strong data protection laws. However, we will always take steps to ensure that your information is used by third parties in accordance with this policy and that we comply with applicable legal requirements to ensure adequate protection for your information. We will ensure that if your data are transferred to another country, it will continue to receive adequate protection, through CAP Plc’s own Privacy Rules for Customer, Supplier and Business Partner Data or through contractual arrangements with third parties. This may include implementing the European Commission’s Standard Contractual Clauses for transfers of personal information, which require the recipient of data to protect personal information they process in accordance with European Union data protection law.
We may also transfer or disclose your personal data to our third-party suppliers, professional advisers, and to such other persons as we consider necessary for the administration of the services and our business.
5. How do we secure your personal data?
We use appropriate technical and organizational measures to protect the personal information about you that we collect and process. The measures we use are designed to provide a level of security appropriate to the risk of processing your personal data.
We have implemented a security policy that guards against unauthorized access. Data on our secure pages is encrypted using SSL technology. Your browser may indicate (and you should check) that the page is secure. It may be able to configure your browser to give a warning message when you first access any secure page on the site.
All your data will be encrypted at all times whilst in transit over the Internet. SSL is special software that automatically encrypts any data sent by you on our secure pages. Our server then reads the data using a private key. This means that your data, be it debit or credit card information or any other personal details, is turned into code that can only be decoded with the private key or password. All parts of the services that require you to enter personal data are secure.
Where we have given you (or where you have chosen) credentials which enable you to access certain parts of our services (such as usernames and passwords), you are responsible for keeping these confidential.
The transmission of information via the internet is not completely secure. Although we will do what we reasonably can to protect your personal data, we cannot guarantee the security of any personal data that you disclose online. You accept the inherent security implications of using the internet and we will not be responsible for any breach of security unless we have been in breach of applicable laws, and then only to the limits set out in any relevant terms and conditions.
6. How long do we retain personal data?
We retain personal data we collect from you where we have an ongoing legitimate need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax, or accounting requirements).
When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise it or, if this is not possible (for example, because your personal data has been stored in backup archives), then we will securely store your personal data and isolate it from any further processing until deletion is possible.
7. What requests can you make in relation to your personal data?
You have the following rights in relation to your personal data:
- You have the right to access, correct, update, or request deletion of your personal data. In addition, you can object to processing of your personal data, ask us to restrict processing of your personal data or request portability of your personal data. You can exercise these rights by contacting us using the contact details provided below.
- You have the right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the unsubscribe or opt-out link in the emails we send you. To opt-out of other forms of marketing, then please contact us using the contact details provided below.
- Similarly, if we have collected and process your personal information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal data conducted in reliance on lawful processing grounds other than consent.
- Whilst we would prefer you to come to us first with any complaints, you have the right to complain to a data protection authority about our collection and use of your personal data. For more information, please contact your local data protection authority.
We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.
8. Links to other websites and social media
We also offer the opportunity to create an account with us through your social network account (such as Facebook). This will save you time in creating the account, as your sign-on credentials will be imported from your social network account. Please note that when you use this “social sign-on” option, we may receive certain information via the social network, such as your name, age, location, preferences, occupation, and other information from your public profile. This information is not requested by us but is provided by the social network using the social sign-on option. When you use the social sign-on option, we will only import the information that is necessary for the creation of your account with us and will, upon receipt of any other information, delete the other information received through the social network. After having created your account, you will have the opportunity to supplement it with any information you want to share with us.
9. May persons below the age of 18 provide personal data?
Persons below the age of 18 may only provide personal data to us if they have written permission of one of their parents or their legal guardian who has read this Privacy Statement.
10. How to contact us
If you have any questions or concerns about our use of your personal data, please contact us using the following details:
Mail: The Data Processing Officer
Chemical & Allied Products Plc. 2, Adeniyi Jones Avenue, Industrial Estate, Ikeja, Lagos, Nigeria.