Privacy Policy

Nigerian Export Import Bank understands that your privacy is important and cares about how your personal data is used and shared online. We respect the privacy of everyone who visits our website and uses our online services.

We are committed to respecting, securing and protecting your personal data. We are also committed to being transparent about what we collect from you and how we use it.

This privacy policy covers information practices, including how we use, obtain share and secure the personal information you provide and your legal rights.

Your Rights

Under the Nigerian Data Protection Act (NDPA), you have several rights about your personal data. This policy has been designed to uphold your rights where we act as a data processor:

• Right of access – you have the right to request a copy of the information that we hold about you.
• Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.
• Right to be forgotten – in certain circumstances you can ask for the data we hold about to be erased from our record.
• Right to restriction of processing – where certain conditions apply to have a right to restrict the processing.
• Right of portability – you have the right to have the data we hold about you transferred to another organization.
• Right to object – you have the right to object to certain types of processing such as direct marketing.
• Right to object to automated processing, including profiling – you also have the right not to be subject to automated processing or profiling.
• Right to judicial review – if we refuse your request under rights of access, we will provide you with a reason to why. You have the right to complain as detailed below.
• Your right to complain – if you wish to make a complaint about how your personal data is being processed or how your complaint has been handled, you have the right to lodge a complaint directly to our in-house data officer or with the supervisory authority.

If we are unable to help, or you are not satisfied with our response, you also have the right to lodge a complaint with the Nigeria Data Protection Commission – No 5, Donau Crescent Maitama, Abuja, Nigeria.

• By telephone – 09160615551
• Via its website – ndpc.gov.ng

What data do we collect from you?

By expressing an interest in our services, visiting our websites or registering to use our service, we may collect personal information from you:

• Bio-data
• Contact information such as name, company name, address, phone number and email address.
• Financial information for Vendors/Suppliers.
• System information, such as IP Address, browser type and version, and operating system relating to information gathering tools such as cookies.
• Other information such as the number of people within your organization using our service.

How we use your data

The data we collect is used to educate and inform customers about our product and to improve our service.

We may also collect personal information about our prospective and existing customers, employees, vendors, and service providers.

The information collected is used to provide services to our customers.

These may include but not limited to any of the following:

• Provision of NEXIM Services and Support
• Providing customer support
• Managing customer relationships
• Developing and improving our services
• Compliance with governmental, legislative and regulatory bodies, and investigating complaints about the use of our services

We process personal information for certain business purposes, which include some or all the following:

• Where the processing enables us ensure efficient transactional purposes
• Where the processing enables us to enhance, modify, personalize or otherwise improve our services/communications for the benefit of our customers
• To better understand how people interact with our websites

We ensure that we only process data in the interests of our commission in conducting and managing our business to enable us to give customers the best service/products and secure experiences. This is known as "Legitimate Interests".

How we protect your personal information

We store and process your personal information on our computers in Nigeria. Where we need to transfer your data to another country, such country must have an adequate data protection law. We will seek your consent where we need to send your data to a country without an adequate data protection law. We protect your information using physical, technical, and administrative security measures to reduce the risks of loss, misuse, unauthorized access, disclosure and alteration. Some of the safeguards we use are firewalls and data encryption, physical access controls to our data centers, and information access authorization controls.

How We Share your information within NEXIM and other users

During your interaction with our website or premises, we may provide other Ministries, Departments, Agencies (MDA), other organs of government, private sector operators performing government functions, with information such as your name, contact details, or other details you provide us for the purpose of performing our statutory mandate to you or third parties.

We work with third parties, especially government agencies to perform NEXIM services and implement its mandate. In doing so, a third party may share information about you with us, such as your email address or mobile phone number. You accept that your pictures and testimonials on all social media platforms about NEXIM can be used for limited promotional purposes by us. This does not include your trademark or copyrighted materials. From time to time we may send you relevant information such as news items, enforcement notice, statutorily mandated notices and essential information to aid the implementation of our mandate. We may also share your personal information in compliance with National or international laws; crime prevention and risk management agencies and service providers.

Security

We will always hold your information securely. To prevent unauthorized access to your information, we have executed strong controls and security safeguards at the technical and operational levels. This site uses Secure Sockets Layer/Transport Layer Security (SSL/TLS) to ensure secure transmission of your personal data. You should see the padlock symbol in your URL address bar once you are successfully logged into the platform. The URL address will also start with https:// depicting a secure webpage. SSL applies encryption between two points such as your PC and the connecting server. Any data transmitted during the session will be encrypted before transmission and decrypted at the receiving end. This is to ensure that data cannot be read during transmission.

NEXIM has also taken measures to comply with global Information Security Management Systems (ISMS) we therefore have put in place digital and physical security measures to limit or eliminate possibilities of data privacy breach incidents.

Data Confidentiality Rights

Your information is regarded as confidential and will not be divulged to any third party except under legal and/or regulatory conditions. You have the right to request sight of, and copies of any and all information we keep on you, if such requests are made in compliance with the Freedom of Information Act and other relevant enactments. While NEXIM is responsible for safeguarding the information entrusted to us, your role in fulfilling confidentiality duties includes, but is not limited to, adopting and enforcing appropriate security measures such as non-sharing of passwords and other platform login details, adherence with physical security protocols on our premises, dealing with only authorized officers of the Agency.

Links to Other Websites and Premises

Certain transaction processing channels may require links to other websites or Organizations other than ours. Please note that NEXIM is not responsible and has no control over websites outside its domain. We do not monitor or review the content of other party's websites which are linked from our website or media platforms. Opinions expressed or materials appearing on such websites are not necessarily shared or endorsed by us, and NEXIM should not be regarded as the publisher of such opinions or materials. Please be aware that we are not responsible for the privacy practices, or content of these sites. We encourage our users to be aware of when they leave our site and to read the privacy statements of these sites. You should evaluate the security and trustworthiness of any other site connected to this site or accessed through this site yourself, before disclosing any personal information to them. NEXIM will not accept any responsibility for any loss or damage in whatever manner, howsoever caused, resulting from your disclosure to third parties of personal information.

Governing Law

This Privacy Policy is made pursuant to the Nigeria Data Protection Act (2023) and other relevant Nigerian laws, regulations or international conventions applicable to Nigeria. Where any provision of this Policy is deemed inconsistent with a law, regulation or convention, such provision shall be subject to the overriding law, regulation or convention.