Effective Date: 10th May, 2025
1. Introduction
Orga ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our HR management platform ("Orga" or "the Software"). By accessing Orga, you consent to the practices described herein.
2. Information We Collect
We collect the following data to provide and improve our services:
A. Data You Provide:
- Account Information: Name, email, phone number, company details.
- Employee Data: Salary details, bank information, attendance records, performance reviews.
- Recruitment Data: Job applications, CVs, interview notes.
B. Automatically Collected Data:
- Usage Data: IP address, device type, browser, login times.
- Cookies: Session cookies for functionality (you can disable these in browser settings).
3. How We Use Your Data
We process your information to:
- Deliver and maintain the Software (e.g., payroll processing, attendance tracking).
- Improve user experience and develop new features.
- Comply with legal obligations (e.g., tax filings under Nigerian law).
- Communicate updates, security s, or support responses.
4. Data Sharing & Disclosure
We do not sell your data. Limited sharing occurs only with:
- Your Consent: For integrations (e.g., banking for payroll).
- Service Providers: Trusted third parties (e.g., cloud hosting, payment processors) bound by confidentiality agreements.
- Legal Requirements: If mandated by Nigerian authorities (e.g., NDPR, FIRS).
5. Data Security
We implement measures to protect your data, including:
- Encryption: SSL/TLS for data transmission.
- Access Controls: Role-based permissions within your organization.
- Audits: Regular security assessments.
6. Your Rights Under NDPR
Under the Nigeria Data Protection Regulation (NDPR), you may:
- Request access to or deletion of your personal data.
- Correct inaccuracies in your records.
- Withdraw consent (may limit service functionality).
- To exercise these rights, contact dpo@orga.ng.
7. Data Retention
We retain data only as long as necessary:
- Active Accounts: Until termination or deletion request.
- Legal Requirements: E.g., payroll records for 6 years under Nigerian tax laws.
8. International Transfers
Data is primarily stored in Nigeria. For cross-border transfers (if applicable), we ensure equivalent protection via Standard Contractual Clauses (SCCs).
9. Updates to This Policy
We may update this policy periodically. You will be notified via email or in-app s for material changes.
10. Contact Us
For questions or data requests:
Data Protection Officer
Email:dpo@orga.ng
Address: 197a Moshood Olugbani St, VI Lagos
Key Compliance Notes:
- Aligns with NDPR, PRA (Pension Reform Act), and PAYE regulations.
- Customize retention periods based on Nigerian labor/tax laws.
- Consult a Nigerian legal expert for final review.
Need sections on employee consent mechanisms or breach notification protocols? Let me know!