Data Protection & GDPR

Our role

For personal data about website visitors and prospects, iDegin Technologies Ltd acts as a data controller. For Customer Content processed within the workspaces we run for organisations, we act as a data processor under the organisation’s instructions.

Lawful bases for processing

We process personal data on the bases of performing our contract with you, your consent (for example, connecting an account or enabling notifications), our legitimate interests in operating and improving the Service safely, and compliance with our legal obligations. These bases mirror both Nigeria’s data protection law and the GDPR.

Your rights

Subject to the law that applies to you, you have the right to:

• Access the personal data we hold about you.
• Ask us to correct data that is wrong or incomplete.
• Ask us to delete your personal data in certain circumstances.
• Object to or restrict certain processing, and withdraw consent you have given.
• Request a copy of certain data in a portable format.

International transfers

Onita AI is operated from Nigeria and our providers may store and process data in other countries, including the United States and the European Union. When we transfer personal data internationally, we rely on appropriate safeguards and contractual protections, consistent with Nigeria’s data protection law and, where applicable, the GDPR.

Complaints and contact

If you believe we have mishandled your data, you can complain to the Nigeria Data Protection Commission (NDPC), or to your local supervisory authority if you are in the EU or UK. To exercise your rights or ask a data-protection question, contact iDegin Technologies Ltd at legal@onitaapp.com.