AEDC PRIVACY POLICY

Abuja Electricity Distribution Plc (AEDC) is fully committed to complying with the provisions of the Nigeria Data Protection Regulation, 2019 (NDPR) and other privacy and data protection legislations as far as protection of your privacy and personal data are concerned. This Privacy Policy outlines the type of information we collect about you, what we will use them for and your privacy as well as data protection rights while interacting with AEDC.

1. Types of data we collect about you

We collect data that you voluntarily provide to us when expressing an interest in obtaining information about us or our products and services, when participating in activities on our website (such as signing up for a prepaid meter) or during Customer Enumeration Exercise.

The data we collect depends on the context of your interaction with us or our website, the choices you make and the products and features you use. Important data we collect include: your first and last name, email address, postal address, phone number and other similar contact data.

We do not collect payment data, as we do not process your payment. When you make purchases of electricity tokens, your payment details (such as debit card number, etc.) are handled by banks/payment processors.

2. Cookies

Cookies are small text files stored on your computer or mobile devices whenever you visit a website. Their function include storing your login and session status, memorizing your preferences to tailor your experiences while visiting our website and to help us analyze our website traffic. They allow us identify when users are logged on or return to our website and test new content.

Apart from when you elect to disclose and share with us, we cannot access your computer or any other information about you with cookies.

Kindly refer to our Cookie Policy for more information on cookies.

 

3. Why and how we use your data

We need a valid reason to collect and use your data. It is called the “lawful basis for processing”. AEDC may use your data under the following circumstances:

• When we have your consent. However, you may withdraw your consent at any time by contacting us via the details provided below;
• When we have a contractual obligation;
• When we have a legal obligation;
• When we want to protect vital interests;
• When it is necessary in furtherance of public interests;
• When we have a legitimate interest.

The use and collection of your personal data by AEDC is guided by certain principles, which require that personal data should:

• be obtained for a specified and lawful purpose and shall not be processed in any manner incompatible with such purpose;
• be adequate, relevant and limited to what is necessary to fulfill the purpose of processing;
• be processed fairly, lawfully and in a transparent manner;
• be processed in accordance with data subject’s rights;
• be accurate and where necessary, up-to-date. In the event data is inaccurate, steps should be taken to rectify or erase such data;
• be kept safe from unauthorized processing, accidental loss, damage or destruction using adequate technical and organizational measures;
• not be kept for longer than necessary for the purpose of processing.

We may use your information for any of the activities listed below:

• to deliver our services and to provide you with information about them;
• to deal with your requests, complaints and enquiries;
• to help us understand what kind of services you might use;
• to research and innovate.

4. How we protect your data

We are strongly committed to keeping your data/information safe. And to achieve this, we design our services with your safety in mind. We also have dedicated teams to look after data security and privacy.

5. Where we store your information

We store your data on electronic mediums on our premises. However, some companies that provide services to us run their services from outside Nigeria. We only let that happen if we are satisfied with their levels of security. Keep in mind that when you give us data, it could be transferred, stored or processed in a location outside Nigeria.

6. How long we keep your data

We will only keep your data for as long as it is necessary for the purposes set out in this policy, unless a longer retention period is required or permitted by law (such as tax, accounting or other legal requirements) or our company’s policies.

When we have no ongoing legitimate business need to process your data, we will either permanently delete or anonymize it, or if this is not possible (for example, because your data has been stored in backup archives), then we will securely store your data and isolate it from any further processing until deletion is possible.

7. Data Sharing

We may process or share data based on the following legal basis:

• Consent:We may process your data if you have given us consent to use your data for specific purpose.
• Legal Obligations:We may disclose your information where we are legally required to do so in order to comply with applicable laws, our policies, governmental requests, or legal processes such as in response to a court order or as evidence in litigation (including in response to public authorities to meet national security or law enforcement requirements).
• Public Interests: We may disclose your information where we believe it is necessary to investigate, prevent, or take action regarding suspected fraud, situations involving potential threats to the safety of the community or the country (including terrorism), potential threats to the safety of any person and other illegal activities/crime.
• Protection of Vital Interests: We may disclose your information where we believe it is necessary to protect your vital interests or that of another person.

More specifically, we may need to process your data or share your data in the following situations:

• Vendors, Contractors and Other Third-Party Service Providers:We may share your data with third-party vendors, service providers, contractors or agents who perform services for us or on our behalf and require access to such information to do that work. Examples include: payment processing, data analysis, email delivery, hosting services, and marketing efforts.
• Business Transfers:We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.

Please note that we do not share, sell, rent or trade any of your information with third parties for their promotional or marketing purposes.

8. Your data protection rights

In Nigeria, you have certain rights under the Nigerian Data Protection Regulation 2019 (NDPR). These may include the right:

• to request access and obtain a copy of your data;
• to request rectification of your data;
• to request for deletion of your data;
• to withdraw consent for processing in cases where consent has previously been given;
• to request for erasure of your data;
• to restrict the processing of your data;
• if applicable, to data portability;
• In certain circumstances, you may also have the right to object to the processing of your data. To make such a request, please use the contact details provided below. We will consider and act upon any request in accordance with applicable data protection and privacy laws.

In the event of any violation of your privacy and data protection rights, you can lodge a complaint with the Nigeria Data Protection Bureau (NDPB) or any other privacy and data protection regulatory body that may be established from time to time.

If you would at any time like to review or change the information in your account or terminate your account, you can:

• Contact our Call Centre on 08039070070
• Or send an email to the Data Protection Officer (DPO) via the email provided below

 

Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, some information may be retained in our files to prevent fraud, troubleshoot problems, assist with any investigations, comply with regulatory directives, enforce our Terms of Use and/or comply with legal requirements.

9. Change or update of this Policy

We may change or update this policy whenever the need arises. We will post any revision we make to this policy on this page and such revised or updated policy becomes effective as at the time it is posted. We will notify you when any changes to this policy have been made. We urge you to check this page from time to time for updates to this policy.

10. Contact

If you need more information or have questions, comments, requests or enquiries about this privacy policy, you may contact our Data Protection Officer via email: data.protection@abujaelectricity.com or by post to:

Data Protection Officer

Abuja Electricity Distribution Plc (AEDC)
No.1 Ziguinchor Street, Off IBB Way, Wuse Zone 4, Abuja-FCT
Nigeria.