Data Protection

Our Commitment

As a specialty finance company handling sensitive identity and financial information, AccessBridge Capital Limited treats data protection as a core operating principle — not an afterthought. This page summarizes how we approach the protection of personal data across our Insurance Premium Financing, Travel & Airfare Financing, and Inheritance & Probate Financing products.

Regulatory Framework

Our data protection practices are designed with reference to the Nigeria Data Protection Act 2023 (NDPA), the Nigeria Data Protection Regulation 2019 (NDPR), and guidance issued by the Nigeria Data Protection Commission (NDPC). Where we process data of individuals outside Nigeria, we also have regard to internationally recognized data protection principles.

Data Protection Principles

We aim to process personal data in a manner that is:

• Lawful, fair, and transparent — processed on a valid legal basis, and clearly explained to data subjects;
• Purpose-limited — collected for specified, explicit, and legitimate purposes related to our financing products;
• Minimized — adequate, relevant, and limited to what is necessary;
• Accurate — kept up to date, with inaccuracies corrected without delay;
• Storage-limited — retained only for as long as necessary;
• Secure — protected using appropriate technical and organizational measures (see our Security page);
• Accountable — supported by internal policies, records, and training that demonstrate compliance.

Data Protection Officer

AccessBridge Capital designates a Data Protection Officer (DPO), or equivalent responsible function, to oversee our data protection compliance program, act as a point of contact for data subjects and regulators, and advise on data protection impact assessments and breach response.

Data Subject Rights

Individuals whose data we process may, subject to applicable law, request access to, correction of, deletion of, or restriction on their personal data, object to certain processing, request data portability, and lodge a complaint with the relevant supervisory authority. Full detail is provided in our Privacy Policy.

Data Breach Notification

We maintain an incident response process to detect, contain, and assess any suspected personal data breach. Where a breach is likely to result in a risk to the rights and freedoms of affected individuals, we will notify the Nigeria Data Protection Commission and affected individuals within the timeframes required by applicable law.

Data Protection Impact Assessments

Before launching new products, features, or data processing activities that may present a higher risk to individuals (for example, new underwriting or scoring models), we conduct data protection impact assessments to identify and mitigate risks.

Third-Party Processors

Where third parties process personal data on our behalf (such as identity verification, hosting, or email delivery providers), we enter into data processing agreements that require appropriate confidentiality, security, and data handling commitments consistent with the NDPA/NDPR.

Filing a Complaint

If you believe your personal data has been processed unlawfully, you may first contact us using the details below so that we may investigate and resolve your concern. You also retain the right to lodge a complaint directly with the Nigeria Data Protection Commission (NDPC).

Contact Us

This page is a general-purpose template summarizing common data protection practices and does not constitute legal advice. AccessBridge Capital should formally designate a Data Protection Officer, register with the Nigeria Data Protection Commission where required, and have this page reviewed by qualified legal counsel before publishing.