1. Data We Collect

We collect “Personal Data” and “Sensitive Personal Data” (where applicable), including:

• Identity Data: Name, date of birth, and digital copies of formal IDs for prize verification.
• Contact Data: Email address, phone number, and social media handles.
• Financial Data: Payment details (processed securely via 3rd-party gateways like Paystack/Flutterwave; we do not store full card numbers).

2. Legal Basis for Processing

We process your data based on:

• Consent: When you sign up or join a challenge.
• Contract: To deliver design services or prize money.
• Legal Obligation: To comply with Nigerian tax and anti-fraud laws.

3. Data Minimization & Retention

We follow the principle of Data Minimization. We only collect what is strictly necessary.

• ID Documents: These are used solely for one-time verification and are permanently deleted within 30 days of a successful claim.
• Account Data: Retained as long as your account is active. You may request deletion at any time via support@oozezi.com.

4. Your Rights as a Data Subject

Under the NDPA, you have the right to:

• Access a copy of your data.
• Rectify inaccurate information.
• Erasure (the “Right to be Forgotten”).
• Data Portability (moving your data to another platform).
• Withdraw Consent at any time.

5. Data Security

We utilize industry-standard encryption (SSL/TLS) for all data transfers. In the event of a data breach, we are committed to notifying the Nigeria Data Protection Commission (NDPC) and affected users within 72 hours of discovery.