PRIVACY POLICY
1. Notice
The following Privacy Policy applies to all users of www.basitoni.com, its associated websites, content, materials, apps, products, services, which are owned and/or operated by Basit Oni, LLC. For the purpose of the General Data Protection Regulation (GDPR), Basit Oni LLC is a company established in the United States with registered office and we are the data controller in respect of the personal data processed in connection with the services.
Please read this policy to understand your rights in relation to your personal data and how we will collect, use, and process your personal data. If you do not agree to the collection, use, and disclosure of information described in the privacy policy. Starting from the IP address and the domain name of the computers used, it will be possible, limited to the purpose of ascertaining responsibility, to trace back further identification data of the user (in particular, name, surname, e-mail address, telephone number, etc.)
2. Data Collection
We collect certain information from you provided by cookies when you use our services. This usage information consist of data, information on your general setting, internet service provider, browser, operating system, model or device type from which you access our services, and time spent accessing or interacting with the services. We collect personal data from you when you submit it or otherwise provide it to us, such as when you email us, sign up to our newsletter or when you make a purchase on our online store located on or through the services, or otherwise interact with our services.
3. Personal data processed
We will use your personal information to manage our relationship with you and to perform our obligations under the contract you conclude with us when you purchase or otherwise request products or services from us. This can cover various activities such as internal accounting, processing your payment, or delivery; to which provide you with the products and services you have requested.
Certain specific information may be required to provide you with gift cards, customization services, or when you reserve a product or a service, purchase products or services by phone, or on our website or a store. In such cases, we could access, collect, store and use your personal information for delivery. During your visit to our store, we may need to collect your information in order to allow you to access our premises, in the interest of safety.
Once you have requested us to create your BasitOni.com profile or via our customer service, your personal information will be linked to this profile, where we will keep all the information you provide to us. This could include personal information we obtain directly from you as well as from other sources in accordance with applicable legislation. This could also include information about the purchases made when checking out as a guest or when checking out using a profile. The information in your BasitOni.com profile is crucial to provide you with the best experience, and in some cases is necessary in order to access to some specific services or to purchase from our website.
In order to keep your personal information accurate, we will take every reasonable step to ensure that personal information we hold is accurate. Subject to your applicable privacy legislation you may have the right to have your information rectified at any time, and in any event please let us know if any of your information needs updating or correcting, and we will make our best efforts to detect and correct inaccurate personal information and delete any duplicate dataset. This may require us to correct typographical errors or inconsistent personal information.
4. Sharing of personal data
We do not sell, rent, lease, provide, or disclose your personal data to any third parties.
5. Minimum Age
The protection of the safety and privacy of minors is very important to us. By registering on the website in the appropriate section, as well as when filling out any data collection forms on the website or when requesting the supply/registration to the newsletter service, the data subject confirms that he/she is 18 years of age or that he/she is not younger than the age indicated by the legislation of the country of residence that provides for other age limits.
6. Data Subject's Rights
In accordance to Nigerian law, the Nigeria Data Protection Regulation provides individuals with eight rights:
-
The right to be informed: Organizations need to tell individuals what data is being collected, how it’s being used, how long it will be kept and whether it will be shared with any third parties. This information must be communicated concisely and in plain language.
-
The right to access: Individuals can submit subject access requests, which oblige organisations to provide a copy of any personal data concerning the individual. Organizations have one month to produce this information, although there are exceptions for requests that are manifestly unfounded, repetitive or excessive.
-
The right to rectification: If the individual discovers that the information an organization holds on them is inaccurate or incomplete, they can request that it be updated. As with the right to access, organizations have one month to do this, and the same exceptions apply.
-
The right to erasure (also known as ‘the right to be forgotten’): Individuals can request that organizations erase their data in certain circumstances, such as when the data is no longer necessary, the data was unlawfully processed or it no longer meets the lawful ground for which it was collected. This includes instances where the individual withdraws consent.
-
The right to restrict processing: Individuals can request that organisations limit the way an organisation uses personal data. It’s an alternative to requesting the erasure of data, and might be used when the individual contests the accuracy of their personal data or when the individual no longer needs the information but the organization requires it to establish, exercise or defend a legal claim.
-
The right to data portability: Individuals are permitted to obtain and reuse their personal data for their own purposes across different services. This right only applies to personal data that an individual has provided to data controllers by way of a contract or consent.
-
The right to object: Individuals can object to the processing of personal data that is collected on the grounds of legitimate interests or the performance of a task in the interest/exercise of official authority. Organisations must stop processing information unless they can demonstrate compelling legitimate grounds for the processing that overrides the interests, rights and freedoms of the individual or if the processing is for the establishment or exercise of defence of legal claims.
-
Rights related to automated decision-making including profiling: The NDPR includes provisions for decisions made with no human involvement, such as profiling, which uses personal data to make calculated assumptions about individuals. There are strict rules about this kind of processing, and individuals are permitted to challenge and request a review of the processing if they believe the rules aren’t being followed
Requests should be addressed to the company by sending an e-mail message to info@basitoni.com, with the subject line labeled "Privacy"
7. Nigerian Data Protection Act 2023
The NDPA is the principal Act on data protection and privacy issues in Nigeria. The Act establishes the Nigeria Data Protection Commission to regulate the deployment of technology and organisational measures to facilitate data protection and promote awareness of the obligation of data controllers and data processors. It is the omnibus privacy law that applies in the country.
8. Third-Party and External Websites
Basit Oni's website uses social plug-ins, which are special tools that incorporate social network functionality directly into the Website (e.g. the Instagram's "Like" function). All social plug-ins on the website are identified by the respective logo owned by the social network platform. When visiting a page on our website and interacting with the plug-in (e.g. by clicking the "Like" button) or leaving a comment, the corresponding information is transmitted by the browser directly to the social networking platform (in this case Instagram) and stored there. For information on the purpose, type and methods of collection, processing, use and storage of personal data by the social networking platform, as well as on how to exercise one’s rights, please refer to the social network privacy policy at Instagram Data Policy.
Basit Oni's website may also contain links, including hyperlinks, widgets, banners, cross-references to external sites and/or platforms operated by parties other than Basit Oni. For information on the purposes, type and manner of collection, processing, use and storage of personal data by such platforms, please consult their respective privacy policies.
Third parties often use cookies so they can serve you with adverts for services. You should be aware that even if you encounter an advertisement, link, and/or references to a third-party website through our services, we do not control them, their websites, or their policies/practices regarding the use of their websites, transaction policies, and/or any rule they have regarding the use of cookies. We also do not control their collection, use, or disclosure of your information; including personal data. We assume no responsibility or liability for the content and activities of third-party websites.
9. Data Retention
Our general approach is to retain your personal information only for as long as it is needed. When you have a BasitOni.com profile, a potential customer profile or subscribe to our newsletters, we generally retain your personal information for 5 years from the last interaction you initiated with us. We may retain personal information for a shorter or longer time, for instance, where we are obliged to do so in accordance with relevant legal, tax and accounting requirements.
Last interaction shall be defined as the last contact you initiated which is traceable by our systems. Last contact could be the last time a call, sales email, or meeting was proposed to you and to which you responded favorably. For instance, clicking on a link included in an email (except for a link to unsubscribe from receiving marketing content), to attend an appointment in our store is considered a last contact. Conversely, opening an email or visiting our website without logging in would not qualify as last contact. Before deleting your personal information from your BasitOni.com or potential customer profile, we will contact you to inform you of such deletion and you may ask us to keep your personal information. By not answering you agree to the deletion of any personal information that we are not legally obliged to keep for longer in accordance with legal, tax and accounting requirements.
We will destroy your personal information without delay once it is no longer necessary (e.g., if the purposes of collection/use of the personal information have been accomplished, if the statutory retention period expires) in a way that prevents such personal information from being restored or recovered. If printed on paper, the personal information will be destroyed by shredding, incinerating, or some other similar method and, if saved in electronic form, the personal information will be destroyed by technical methods which ensure that the personal information cannot be restored or recovered thereafter. In specific circumstances we may also retain your personal information for longer according to the applicable statute of limitations so that we have an accurate record of your dealings with us in the event of any complaints or challenges.
10. Changes in Privacy Policy
This Privacy Policy may be changed over time. Therefore, we invite users to periodically consult this page. As of May 9th, 2024, this is our current Privacy Policy.