Your Rights

Your Rights Under Nigerian Data Protection Law

As a data subject under the Nigeria Data Protection Regulation, you have the following rights:

• Right to Access: You may request a copy of the personal data we hold about you. We will provide this within 30 days of your request.
• Right to Rectification: You may request that we correct any inaccurate or incomplete personal data we hold about you.
• Right to Deletion (Erasure): You may request that we delete your personal data. Please note that certain data (such as KYC data and transaction records) must be retained to comply with CBN regulations and cannot be deleted upon request until the mandatory retention period has expired.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, and machine-readable format so that you can transfer it to another service provider. Data portability will be provided in CSV or JSON format for data you have directly provided to us.
• Right to Object: You may object to the processing of your personal data where we rely on legitimate interest as the legal basis. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time. This will not affect the lawfulness of processing carried out before the withdrawal.
• Right to Restrict Processing: You may request that we limit how we process your personal data in certain circumstances, such as while we verify the accuracy of your data or assess an objection you have raised.

How to Exercise Your Rights

To exercise any of these rights, please contact us at:

• Email: hello@subsecute.com
• Subject line: "Data Subject Request — [Your Right]"

We will acknowledge your request within 7 days and respond substantively within 30 days. If we need more time due to the complexity of your request, we will notify you and provide a reason for the extension.

We may need to verify your identity before processing your request. We will never charge a fee for exercising your rights unless your request is manifestly unfounded or excessive.

Account Deletion

You may request full deletion of your account by emailing hello@subsecute.com. Upon account deletion:

• Your account and login credentials will be permanently deactivated.
• Your wallet balances must be withdrawn before deletion can proceed.
• Active subscriptions will be cancelled.
• API logs and activity logs will be deleted according to their standard retention schedules.

Complaints & Dispute Resolution

If you believe that your data protection rights have been violated, you have the right to:

1. Contact us first — Please reach out to us at hello@subsecute.com. We will investigate your complaint and respond within 30 days.