Your Data Rights

1. Overview of Your Rights

When you register on our platform, apply for the EEWYLA training, or join a cooperative through Oriyon International Limited, we collect and process your personal information. The Nigeria Data Protection Act (NDPA) 2023 guarantees you specific statutory rights to protect your privacy and personal data.

This page explains what those rights are, how they apply to the information we hold, and how you can make a formal request to exercise them.

2. Right to be Informed

You have the right to know what personal data we collect about you, why we collect it, how we use it, how long we store it, and who we share it with. We fulfill this right through our comprehensive Privacy Policy and our Cookie Notice.

3. Right of Access

You have the right to ask us whether we are processing your personal data and to request a copy of the specific data we hold. This is often referred to as a "Data Subject Access Request" (DSAR). We will provide this information in a clear, easy-to-understand format within 30 days.

4. Right to Rectification

If you discover that any personal data we hold about you is inaccurate, out of date, or incomplete (such as a misspelled name, an old address, or incorrect cooperative details), you have the right to ask us to correct it. You may also update certain information directly through your LMS dashboard.

5. Right to Erasure ("Right to be Forgotten")

You may request that we delete or erase your personal data from our systems under certain circumstances, including:

• The data is no longer necessary for the purpose it was originally collected.
• You withdraw your consent and there is no other legal basis for us to continue processing it.
• You object to the processing and there are no overriding legitimate grounds for us to continue.

Note: We may be legally required or permitted to retain certain records for regulatory, financial auditing, or legal compliance purposes, in which case we will notify you of these obligations.

6. Right to Restrict Processing

You have the right to ask us to pause or restrict the processing of your personal data. This means we can continue storing your data but must stop active operations on it. This applies if:

• You challenge the accuracy of the data and want us to pause processing while we verify it.
• The processing is unlawful, but you object to deletion and request restriction instead.
• We no longer need the data, but you require it to establish, exercise, or defend a legal claim.

7. Right to Data Portability

You have the right to obtain your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV) so that you can easily transfer it to another organization or service provider without hindrance from us.

8. Right to Object

You have the right to object to us processing your personal data, including:

• Processing for direct marketing purposes (which you can opt out of at any time).
• Processing based on our legitimate business interests, unless we can demonstrate compelling legitimate grounds that override your rights and freedoms.

9. Rights Related to Automated Decision-Making

You have the right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects or similarly affects you. If automated decisions are made (such as automated grading or application scoring), you have the right to request human intervention, express your point of view, and contest the decision.

10. Right to Withdraw Consent

Where we process your data based on your explicit consent (such as voluntary newsletter subscription or specific marketing consent), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any data processing that occurred prior to your withdrawal.

11. How to Exercise Your Rights

To submit a formal request to exercise any of the rights listed above, please use the following contact details:

To protect your privacy and security, we are required to verify your identity before processing your request. Please include copy of a Nigerian government-issued ID (e.g. NIN, voter's card, or passport) or apply using the verified email address linked to your Oriyon LMS account.

Timeline: We will acknowledge your request within 5 business days and provide a full response or action update within 30 days. For extremely complex requests, we may extend this by an additional 30 days, in which case we will notify you of the delay and the reasons for it.

12. Lodging a Complaint with the NDPC

If you believe that we have not handled your personal data in compliance with the Nigeria Data Protection Act 2023, or if we fail to respond to your rights request within the statutory timeframe, you have the right to lodge a formal complaint with the Nigeria Data Protection Commission (NDPC).

We encourage you to contact our Data Protection Officer at dpo@oriyoninternational.com or submit a grievance through our Grievance & Complaints Form first. We are committed to working with you directly to resolve any privacy concerns.