NDPR & GDPR Compliance Statement

Sunnyday Gadgets complies with the Nigeria Data Protection Regulation (NDPR) and the General Data Protection Regulation (GDPR) applicable to customers and data subjects residing within Nigeria, the EU, or the EEA.

Your Data Protection Rights:

As a data subject under NDPR and GDPR, you have the right to:

Access your data: You may request a copy of the personal data we hold about you.
Correct your data: You may request corrections to inaccurate or incomplete data.
Delete your data: You can request erasure of your data when it’s no longer necessary or if you’ve withdrawn consent.
Restrict processing: You can request us to limit how we process your data.
Object to processing: You may object to processing for direct marketing or other legitimate interests.
Data portability: You have the right to request your data in a structured, machine-readable format.

Legal Basis for Processing

We collect and process your personal data based on:

Consent: You have given us permission to process your data for specific purposes.
Contractual necessity: Processing is necessary to fulfill a purchase or service.
Legal obligation: We may process your data to comply with tax, regulatory, or legal requirements.
Legitimate interest: We may use data to improve our services and marketing efforts, as long as it doesn’t override your privacy rights.

Data Transfers & Storage

All personal data is stored securely on servers managed by us or trusted service providers. If your data is transferred outside Nigeria or the EU, we ensure appropriate safeguards are in place, such as standard contractual clauses or equivalent legal mechanisms.

Security Measures

We use secure HTTPS protocols, firewalls, data encryption, access controls, and regular audits to protect your data against unauthorized access, breaches, or misuse.