Legal
Data Protection
Last updated: [Insert date]
This page explains DAAT Limited's approach to protecting personal data, specifically in relation to DAAT Finance and DAATECH Digital Trust services. Placeholder text below should be reviewed and finalised by qualified legal counsel before publication.
Data controller / processing responsibilities
DAAT Limited acts as the data controller for personal information collected directly from customers, and as a data processor where it processes data on behalf of a lending, verification or data partner under a data sharing arrangement.
Lawful processing
We process personal data only where we have a lawful basis to do so, such as performance of a contract, consent, a legal obligation, or our legitimate interests, balanced against your rights.
Consent, where applicable
Where DAATECH Digital Trust services involve sharing your data with a third party, this is done on a consent basis. You may withdraw consent at any time, which may limit our ability to provide certain services.
Purpose limitation
Personal data is collected for specified, explicit purposes and is not further processed in a way incompatible with those purposes.
Data minimisation
We collect only the personal data that is adequate, relevant and necessary for the purpose it is collected for.
Data security
We apply technical and organisational safeguards appropriate to the sensitivity of the data involved, including access controls and secure storage, to protect personal data against unauthorised access, alteration, disclosure or destruction.
Customer data rights
Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and may object to or request restriction of certain processing. Contact us using the details below to exercise these rights.
Third-party processors
We may engage third-party service providers to process personal data on our behalf, such as hosting or verification providers. These providers are required to protect personal data in line with this policy and applicable law.
Data sharing
Personal data may be shared with lending partners, verification and data partners, or regulators, as described in our Privacy Policy, and, in the case of DAATECH Digital Trust, on a consent basis.
Data breach handling
In the event of a data breach affecting your personal data, we will assess the risk and take appropriate steps to contain and remediate it, and will notify affected individuals and relevant authorities where required by applicable law.
Privacy / data protection contact
For data protection queries, contact us at info.daatech@gmail.com or +265 999 979 169.