Data Protection

Last updated: August 2026.

Our commitment

Soundscape Ventures is committed to handling personal data lawfully, fairly and transparently as required by the Nigeria Data Protection Act 2023 (NDPA), the Nigeria Data Protection Regulation 2019 (NDPR), and the guidance issued by the Nigeria Data Protection Commission (NDPC).

Lawful basis for processing

We rely on one or more of the following bases set out in section 25 of the NDPA: your consent; performance of a contract you are party to; compliance with a legal obligation; protection of vital interests; performance of a task in the public interest; and our legitimate interests, where these are not overridden by your rights.

Your data subject rights

• Right of access — to know what data we hold about you.
• Right to rectification — to correct inaccurate or incomplete data.
• Right to erasure — to ask us to delete your data where the law allows.
• Right to restrict or object — to limit how we use your data in certain situations.
• Right to data portability — to receive your data in a structured, machine-readable format.
• Right to withdraw consent — at any time, without affecting prior lawful processing.
• Right to lodge a complaint — with the Nigeria Data Protection Commission (NDPC).

How to make a request

Send an email to dpo@soundscapeventures.ng with "Data Subject Request" in the subject line. Include enough information for us to identify you and the request you are making. We will respond within one (1) month, as required by the NDPA.

Data Protection Officer (DPO)

We have designated a Data Protection Officer to oversee our compliance with the NDPA. You can reach the DPO directly at dpo@soundscapeventures.ng.

Security & breach notification

We protect personal data with technical and organisational measures appropriate to the risk — including encryption in transit, access controls, vendor due diligence and ongoing staff training. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the NDPC within 72 hours and, where required, notify you directly.

Cross-border transfers

Where we transfer personal data outside Nigeria, we ensure transfers are permitted under Part VIII of the NDPA — to jurisdictions with adequate protection, under approved contractual safeguards, or with your explicit consent.

Regulator

Nigeria Data Protection Commission (NDPC) · ndpc.gov.ng.