– Statement Details

Nawiri Financial Consulting agrees to:

1. Comply with the requirements of the Services Agreement in the provision of services to the Data Controller.
2. Process and use the personal data only to the extent strictly necessary to perform its obligations or as otherwise.
3. Only disclose the personal data to the Data Processor’s employees and personnel that have a need to access the Data for the Data Processor’s compliance, while the Data Processor shall ensure that all such employees and personnel are bound by a confidentiality agreement.
4. Take all reasonable steps to ensure the reliability of all its employees and personnel who have access to the Data.
5. Implement, maintain and operate adequate and appropriate technical and organizational measures to:

1. Protect the security, confidentiality, integrity and availability of the Data, and
2. Protect against unauthorized or unlawful processing of the Data and against accidental loss, destruction or the making vulnerable of, or damage to, the Data.

6. Comply with its obligations under Data Protection Law, and shall take such steps as are requested by Data Controller to enable the Data Controller to comply with the Data Controller’s obligations under Data Protection Law.

– Use of Personal Information

We may use and analyze your information for the following purposes:

• Responding to any of your queries or concerns.
• In business practices including quality control, training and ensuring effective systems operations.
• Market research, data science, statistical and analytical purposes, survey and other scientific or business purposes.
• Provide aggregated data (which do not contain any information which may identify you as an individual) to third parties for research and scientific purpose.
• Your information may also be used for other purposes for which you give your permission or where the law allows us to use it.
• To administer any of our online platforms/websites.

We aim to only process personal information in a manner that is adequate, relevant and not excessive, considering our purposes of use.

– Retention of Information

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, the need to comply with our internal policy and the applicable legal, regulatory, tax, accounting, or other requirements.

Anonymized information that can no longer be associated with you may be held indefinitely.

We will get your express consent before we share your personal data with any third party for direct marketing purposes.

– Sharing your Personal Information

We may share information about you with:

• Partners or agents involved in delivering the products and services you’ve ordered or used.
• Partners or agents that conduct performance and customer satisfaction surveys and any other surveys related to the products or services provided to you.
•  If we’re reorganised or sold to another organisation, we may transfer any personal information we hold about you to that organisation.
• At your option, and only with your consent, we may also share your information with partner organizations we’ve chosen carefully, so they can contact you about their products and services.
• Where appropriate, before disclosing personal information to a third party, we contractually require the third party to take adequate precautions to protect that data and to comply with applicable law.
• In the event of a merger/acquisition or company reorganization, your personal information may be part of the transferred assets and are likely to be disclosed to the new company.