Privacy Policy

PrimeGRC Ltd (“we”, “us” or “our”) is committed to protecting the personal data of visitors to our website and individuals who interact with us in a professional or business capacity, including prospective and existing clients, business partners, professional contacts and individuals who apply for roles through our website.

Please read this Privacy Policy carefully to understand how we collect, use and protect your personal data, as well as your rights in relation to the processing of your personal data. We reserve the right to update or revise this Privacy Policy at any time. Any changes will be published on this page.

What Personal Data Do We Collect and For What Purposes?

a) Through our website

You are not required to provide personal data to browse our website. However, you may voluntarily provide personal data when you:

  • Contact us through the website
  • Request information about our services
  • Request meetings, consultations, or proposals
  • Subscribe to professional communications
  • Apply for a job through our website

Depending on your interaction, we may collect:

  • First name and surname
  • Email address
  • Phone number
  • Company name
  • Any information you choose to include in messages or submissions

We process this information solely to respond to your request or manage our professional relationship with you.

b) Job Applications Submitted Through Our Website

If you apply for a role with PrimeGRC Ltd through our website, we will process personal data contained in your application, which may include:

  • Identification and contact details
  • Curriculum vitae (CV)
  • Employment history, qualifications and professional experience
  • Information provided during interviews or assessments

Your personal data is processed only for recruitment and selection purposes, including assessing your suitability for a role and communicating with you regarding your application.

Further information on how we process personal data submitted through job applications is provided in our Recruitment Privacy Policy, accessible via the tab above.

c) Through Professional Engagements

Where you engage with us as a client, business partner or professional contact, we may process personal data exchanged in the course of delivering advisory or consulting services. Such processing is limited to what is necessary for legitimate business and contractual purposes.

Use of Cookies

We use strictly necessary cookies on our website to ensure its proper functioning and security.

Strictly Necessary Cookies support:

  • Website navigation and session management
  • Security and system integrity

We do not use analytics, marketing, tracking or profiling cookies. As only necessary cookies are used, user consent is not required under the Nigeria Data Protection Act (NDPA).

How We Share and Protect Your Personal Data

We do not sell, rent or otherwise disclose personal data collected through our website or professional engagements.

Personal data may be shared only with:

  • Trusted third-party service providers (e.g. hosting or email service providers) acting under our instructions
  • Regulatory or law enforcement authorities where required by law

Where service providers are located outside Nigeria, data transfers are carried out in compliance with applicable data protection laws and safeguarded through lawful mechanisms such as adequacy decisions or Standard Contractual Clauses.

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or disclosure.

How Long We Retain Your Personal Data

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, including legal, regulatory, recruitment and contractual requirements.

Recruitment data relating to unsuccessful applicants is retained for a limited period and securely deleted thereafter.

Your Rights

Under the NDPA, you have the right to:

  • Request access to your personal data
  • Request correction of inaccurate or incomplete data
  • Request erasure of your personal data
  • Restrict or object to processing
  • Withdraw consent where processing is based on consent
  • Request data portability, where applicable

You may exercise these rights by contacting us using the details provided below.

You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your personal data has been processed unlawfully.

Our Contact Details

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or raise a concern, please contact us at:

dataprotection@primegrc.com.ng