Privacy Policy
Effective Date: 00 March 2026
Issued by The Fiduca Investment Ltd (trading as Countam)
Introduction: This Policy describes how Countam collects, uses, stores, and protects personal and business information in accordance with the Nigeria Data Protection Regulation (NDPR) and guidelines of the Nigeria Data Protection Commission (NDPC).
Information Collected:
Business identifiers (company name, RC number, industry)
Personal details (name, email, phone number)Financial and transactional data entered into Countam
Device and usage data (IP address, browser, login timestamps)
Purpose of Processing: We process data to:
a) Provide accounting and reporting services.
b) Process payments and subscriptions.
c) Support customer service and troubleshooting.
d) Comply with statutory obligations to FIRS, LIRS, and CBN.
Legal Basis for Processing
User consent.
Performance of contract.
Legal compliance with tax and financial regulations.
Data Retention
Financial records are kept for seven (7) years as required by law. Inactive accounts are deleted after two (2) years of inactivity.
Security Measures
Data is encrypted at rest and in transit, stored on secure cloud servers, and access is restricted to authorised staff. Regular audits and penetration tests are conducted.
Data Sharing
We share data only with trusted third-party processors (e.g., Paystack, Flutterwave, cloud hosts). All third parties are bound by confidentiality and NDPR-compliant contracts.
Your Rights: Under NDPR you have the right to:
Access and request copies of your data.
Request correction or deletion.
Withdraw consent at any time.
Complain to the NDPC if you believe your rights are violated.
CBN and Financial Data Compliance
Countam complies with Central Bank of Nigeria regulations on data security for electronic payments and financial transactions.
Data Breach Procedure
Any breach will be reported to affected users and the NDPC within 72 hours in accordance with NDPR requirements.
Children’s Data
Countam does not intentionally collect data from children under 18 years of age.
Data Protection & Processing Policy
Effective Date: 00 March 2026
Purpose
This policy defines Countam’s responsibilities as both a Data Controller and Data Processor for customer information handled through its software and operations.
Principles of Data Processing
Countam adheres to the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.
Roles and Responsibilities
The Board of The Fiduca Investment Ltd is responsible for ensuring overall compliance.
The Data Protection Officer (DPO) monitors compliance, conducts audits, and handles requests.
All employees handling data must sign confidentiality agreements and attend annual training.
Third-Party Processors
Countam engages processors for hosting, payment, and communication. Each processor is audited for NDPR compliance and bound by a Data Processing Agreement.
Data Backup and Recovery
Daily backups are performed; data is retained for 30 days and can be restored within 8 hours of loss. Backups are stored within regions approved by the NDPC.
Data Subject Requests
All requests for access, correction, or erasure shall be responded to within 30 days.
Breach Management
Security incidents are recorded, investigated, and escalated immediately to the DPO. Material breaches are reported to NDPC and affected individuals within 72 hours.
Audits and Compliance
Annual audits are performed by independent NDPR-licensed Data Protection Compliance Organisations (DPCOs).
Compliance. Confidence. Growth
Support hours: Mon – Fri, 9am – 5pm WAT (excluding public holidays). Ticket replies within 24 working hours
+234 916 111 7925
Fiduca Investment Limited, RC-8087538.
58 Raymond Njoku Street, Ikoyi, Lagos, Nigeria
© 2025 Copyright Countam.
