DATA PRIVACY POLICY
INTRODUCTION
At MMTech Solutions we are committed to safeguarding your personal data and respecting your rights, including your right to privacy and data protection. This applies whether you are visiting our website, using our mobile applications for iPhone or Android (collectively, the “Sites”), or engaging with our services provided through the Sites or our customer service platforms (together referred to as the “Services”), regardless of your location.
When we use terms like ‘we,’ ‘our,’ or ‘us,’ we are referring to MMTech Solutions. “Personal data” refers to any information that identifies you, such as your name, email address, telephone number, payment details, or customer service inquiries. Please note that this notice does not apply to information that has been anonymized or aggregated to the extent that it can no longer be used to identify you.
Please also note that this Privacy Policy only applies to the use of your personal information obtained by us, it does not apply to your personal information collected during your communications with third parties.
PURPOSE OF THIS POLICY
This Privacy Policy is designed to help you make informed decisions when using our Sites and Services. It outlines your rights regarding the processing of your personal information and provides details about the nature of the personal information we process. It also explains how you can request the deletion, update, transfer, or access to your personal information.
We encourage you to take a moment to read and understand this Privacy Policy. Please note that it should be read alongside our Terms of Use. Additionally, this Privacy Policy may be updated periodically, so we recommend checking it regularly. If you have any comments or questions about this Policy, please email us at legal@mmtech-solutions.com.
We employ robust measures to protect your information in compliance with Saint Lucia's Data Protection Act (DPA) Cap 8.18, enacted in 2011. For users in the European Union, we also adhere to internationally recognized privacy standards, including the EU Data Protection Law 2018, detailed at https://ec.europa.eu/info/law/law-topic/data-protection_en. Our commitment ensures alignment with both local data protection frameworks and international standards, reflecting our dedication to safeguarding your data.
CONSENT FOR DATA PROTECTION/RETENTION
By providing us with your Personal Data or clicking the "accept" button, you acknowledge and accept this Policy and consent to the saving, processing, and use of your Personal Data to the extent permitted by law. Should your Personal Data need to be transferred to a third party for marketing purposes or processed further in a manner requiring additional consent, we will explicitly seek your approval.
To provide our services and products to you, we may retain your information for the duration of the service and your consent, as well as to comply with applicable legal, tax, or other regulatory requirements. This includes managing or defending any claims, requests, or complaints involving you, us, or third parties.
When there is no valid reason to retain your Personal Data, we will delete or anonymize it. If immediate deletion is impracticable due to backend storage limitations, we will implement all reasonable measures to protect your data until deletion becomes feasible.
You retain the right to withdraw your consent at any time, whether before, during, or after the processing of your Personal Data.
DATA WE MAY COLLECT ABOUT YOU
To better serve you, recommend suitable financial products, and keep you informed about our services, we need to collect certain personal data. Without this information, we may be unable to provide you with effective support. The personal data we collect may include, but is not limited to:
- Personal Details: Your name, address (including proof of address), contact information (e.g., email and phone numbers), gender, marital status, date and place of birth, nationality, employer, job title and so on.
- Identification Details: Identification numbers issued by government bodies or agencies, such as your BVN, government-issued IDs (e.g., international passport, driver's license, voter’s card), tax identification number, and other relevant identifiers.
This information enables us to tailor our services to your needs and ensure compliance with applicable regulations.
HOW IS YOUR PERSONAL DATA COLLECTED?
We collect data from and about you through various methods, including:
- Direct Collection
You may provide us with your Identity, Contact, and Transaction Data by filling out forms or communicating with us digitally (via our website or social media), by post, phone, email, or other means. This includes personal data you provide when you:
- Apply for our products or services.
- Create an account on our website.
- Subscribe to our services or publications.
- Request marketing information to be sent to you.
- Attend one of our events.
- Automatic Collection
When you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions, and patterns. This data is gathered using cookies, server logs, and similar technologies. Also, we may receive Technical Data about you from other websites using our cookies.
- Cookies: Cookies are small data files created when you visit a website, containing a unique, anonymous number. They do not store personal information and cannot identify individual users. You can choose not to accept cookies by adjusting your browser settings; refer to your browser’s help files for guidance. We use session cookies as needed to support website functionality.
- Embedded Content from Other Websites
Our website may include embedded content (e.g., videos, images, articles). Embedded content from other websites functions as if you were visiting those websites directly. These websites may collect data about you, use cookies, employ third-party tracking, and monitor your interaction with the embedded content, including tracking your interaction if you are logged into an account on their platform.
By using our website and services, you consent to these data collection practices.
FAILURE TO PROVIDE PERSONAL DATA
If we are required by law or under the terms of a contract to collect your personal data and you fail to provide it when requested, we may be unable to fulfill the contract we have with you or are attempting to establish (for example, providing services). In such cases, we may need to cancel the product or service you have with us. Should this occur, we will inform you at the time.
CONFIDENTIALITY AND SECURITY OF YOUR PERSONAL INFORMATION
We are dedicated to safeguarding the personal information you entrust to us and take reasonable precautions to protect it from loss, misuse, or alteration. To ensure the security of the personal information under our control, we have implemented comprehensive information security policies, rules, and technical measures to protect against:
- Unauthorized access;
- Improper use or disclosure;
- Unauthorized modification; and
- Unlawful destruction or accidental loss.
All employees and data processors (individuals or entities processing personal information on our behalf) with access to your personal information are obligated to maintain its confidentiality. To uphold global standards, we comply with Information Security Management Systems (ISMS) and have implemented both digital and physical security measures to minimize the risk of data privacy breaches.
If you have chosen a password to access specific parts of our website or mobile application, it is your responsibility to keep this password confidential. We strongly advise against sharing your password with anyone. Your vigilance plays an essential role in ensuring the security of your personal information.
PURPOSES FOR WHICH WE WILL USE YOUR PERSONAL DATA
We use your personal data primarily to operate our websites, provide the services you’ve requested, and manage our relationship with you. Below, we have outlined a table describing how we plan to use your personal data, the legal bases we rely on for processing, and, where applicable, our legitimate interests.
Please note that, depending on the specific purpose, we may process your personal data under more than one lawful basis. If you require further details about the specific legal basis we are relying on for any particular use of your data, please feel free to contact us.
To register you as a new member or address queries from existing members, which may involve contacting you via telephone, email, or both.
(a) Identity
(b) Contact
Performance of a contract with you.
To process and deliver services to you online, including:
(a) Managing payments, fees, and charges.
(b) Collecting and recovering money owed to us.
(a) Identity
(b) Contact
(c) Transaction
(d) Marketing and Communications
(a) Performance of a contract with you
(b) Necessary for our legitimate interests (to recover debts due to us).
To manage our relationship with you, which may include:
(a) Notifying you about changes to our terms or privacy policy.
(b) Requesting that you leave a review or participate in a survey.
(a) Identity
(b) Contact
(c) Profile
(d) Marketing and Communications
(a) Performance of a contract with you.
(b) Necessary to comply with a legal obligation.
(c) Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services).
To administer and protect our organization and this website, including troubleshooting, data analysis, testing, system maintenance, support, reporting, and data hosting.
(a) Identity
(b) Contact
(c) Technical
(a) Necessary for our legitimate interests, including the operation of our organization, provision of administration and IT services, network security, fraud prevention, and in the context of business reorganization or group restructuring.
(b) Necessary to comply with a legal obligation.
To deliver relevant website content and advertisements to you, and to measure or understand the effectiveness of the advertisements we serve.
(a) Identity
(b) Contact
(c) Profile
(d) Usage
(e) Marketing and Communication
(f) Technical
Necessary for our legitimate interests, including studying how customers use our products/services, developing and improving them, growing our organization, and informing our marketing strategy.
To use data analytics to improve our website, products/services, marketing efforts, and enhance customer relationships and experiences.
(a) Technical
(b) Usage
Necessary for our legitimate interests, including defining customer segments for our products and services, keeping our website updated and relevant, developing our organization, and informing our marketing strategy.
To make suggestions and recommendations to you about goods or services that may be of interest to you, including through telephone contact.
(a) Identity
(b) Contact
(c) Technical
(d) Usage
(e) Profile
Necessary for our legitimate interests, including developing our products/services and growing our organization.
YOUR LEGAL RIGHTS
You have certain rights under the law regarding your personal data. These rights include:
- Access: You have the right to request access to the personal data we hold about you, commonly known as a “data subject access request.” This allows you to obtain a copy of your personal data and verify that we are processing it lawfully.
- Correction: You can request the correction of any incomplete or inaccurate personal data we hold about you. We may need to verify the accuracy of the new data you provide.
- Erasure: You can request the deletion or removal of your personal data if there is no legitimate reason for us to continue processing it. You also have the right to request erasure if you’ve successfully objected to processing, if we’ve processed your data unlawfully, or if we are required to erase it to comply with local law. However, we may not always be able to fulfill this request due to legal reasons, which we will notify you of if applicable.
- Objection to Processing: You can object to the processing of your personal data when we rely on legitimate interests (or those of a third party) if there is something about your particular situation that makes you feel your fundamental rights and freedoms are being impacted. You can also object to processing for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to continue processing your data that override your rights and freedoms.
- Restriction of Processing: You may request that we restrict the processing of your personal data in the following circumstances:
- To verify its accuracy.
- If the processing is unlawful but you do not want it deleted.
- If you need the data to establish, exercise, or defend legal claims, even if we no longer need it.
- If you have objected to processing and we need to determine whether we have overriding legitimate grounds to continue processing it.
- Data Portability: You have the right to request the transfer of your personal data to you or to a third party in a structured, commonly used, machine-readable format. This right applies only to automated data you’ve initially consented to provide or that we use to perform a contract with you.
- Withdrawal of Consent: If we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. However, withdrawing consent will not affect the lawfulness of any processing conducted before the withdrawal. Please note that if you withdraw consent, we may no longer be able to provide certain products or services to you.
LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA
We will only process your personal data when we have a legal basis to do so. The specific legal basis will depend on the purpose for which we have collected and are using your personal data. The legal grounds for processing your data may include:
- Consent: This applies when you have provided explicit consent for the processing of your personal data for one or more specific purposes.
- Performance of Contract: This applies when processing is necessary to fulfill a contract to which you are a party, or to take steps prior to entering into a contract with you.
- Vital Interests: This applies when processing is necessary for the protection of your vital interests.
- Compliance with Legal Obligation: This applies when we are required by law to process your personal data to comply with a legal obligation.
- Public Interest: This applies when processing is necessary for the performance of a task or function carried out in the public interest.
- Legitimate Interest: This applies when processing is necessary for the legitimate interests of our business, such as to manage and conduct our operations, provide you with the best services, and ensure the most secure experience for you.
DISCLOSURES OF YOUR PERSONAL DATA
We may need to share your personal data with authorized third parties in accordance with our standard contractual terms when you have purchased a service.
We will only disclose your personal data to the following:
- Third-Party Service Providers and Partners: These are entities that assist us in using your personal data for purposes such as supporting website functionality, delivering services, or marketing and promoting our goods and services to you.
- Regulators, Law Enforcement, and Government Agencies: This includes regulators, law enforcement bodies, courts, or other third parties, when necessary to comply with applicable laws or regulations, or to exercise, establish, or defend our legal rights. We will notify you of such disclosures where possible and appropriate.
- Third Parties in the Event of a Business Transaction: If we sell, transfer, or merge parts of our organization or assets, authorized third parties may lawfully receive controlled access to your personal data.
We require all third parties to ensure the security of your personal data and to process it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes. They are only permitted to process your data for specified purposes and in accordance with our instructions.
THIRD-PARTY LINKS
Our website may contain links to third-party websites, plug-ins, and applications. By clicking on these links or enabling these connections, third parties may collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices. When you leave our website, we encourage you to read the privacy notice of every website you visit.
DATA BREACH NOTIFICATION
In the event of a security breach that leads to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to your personal data, we will report the details of the breach to the relevant authority within 72 (seventy-two) hours of becoming aware of the breach. Additionally, we will notify you, the data subject, within 7 (seven) days of discovering the breach. This notification will include information about the breach, the potential risks to your rights and freedoms, and the steps we are taking to address and remedy the breach.
COMPLAINTS
If you believe that your personal data has not been handled appropriately, or if you are dissatisfied with our response to any requests you have made regarding the use of your personal data, you have the right to lodge a complaint with us. The contact details for filing a complaint is:
E-mail: legal@mmtech-solutions.com