NDPR Data Privacy Notice

Last Updated: July 9, 2026

1. Purpose of This Notice

This Data Privacy Notice is issued in compliance with the Nigeria Data Protection Regulation (NDPR) 2019 and the Nigeria Data Protection Act (NDPA) 2023. It supplements our general Privacy Policy and specifically addresses how XNY Farms Limited, as a Data Controller, processes the personal data of its customers, website visitors, and business contacts within Nigeria.

2. Data Controller Information

XNY Farms Limited is registered in Nigeria (CAC Registration Number: 1107007) and acts as the Data Controller for personal data collected through xnyfarms.com and related business operations.

Registered Address: 41 Babaponmile Street, Onipetesi, Mangoro, Ikeja, Lagos, Nigeria
Contact Email: xnyfarms@gmail.com

3. Categories of Data Subjects

This notice applies to:

• Retail customers who purchase products through our website
• Wholesale/business customers who submit inquiries or enter supply agreements with us
• Website visitors
• Job applicants and business partners who submit information to us

4. Categories of Personal Data Processed

• Identity data (name, contact details)
• Transaction data (order history, payment confirmation references)
• Business data (company name, business registration details, for wholesale clients)
• Technical data (IP address, browser information)
• Communication data (emails, inquiry form submissions)

We do not knowingly collect special category data (such as health or biometric data) through our website.

5. Lawful Basis for Processing

In line with NDPR Article 2.2 and the NDPA 2023, we process personal data based on:

• Consent freely given by the data subject
• Necessity for the performance of a contract (e.g., order fulfillment)
• Compliance with a legal obligation (e.g., tax and financial reporting)
• Legitimate interest, balanced against your rights and freedoms

6. Cross-Border Data Transfer

Where personal data is transferred outside Nigeria (for example, to cloud-hosting or payment-processing partners with servers located abroad), we ensure such transfers comply with NDPR requirements, including verification that the receiving country or organization maintains an adequate level of data protection, or that appropriate safeguards (contractual clauses) are in place.

7. Data Protection Officer / Compliance Contact

Any inquiries, complaints, or requests relating to data protection can be directed to:

Kenechi Onyiah
Email: xnyfarms@gmail.com
Phone: +234 806 013 8299

8. Your Rights Under the NDPR/NDPA

As a data subject, you have the right to:

• Be informed about how your data is processed
• Access your personal data held by us
• Request rectification of inaccurate data
• Request erasure of your data, subject to legal retention requirements
• Restrict or object to processing in certain circumstances
• Data portability, where technically feasible
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your data protection rights have been violated

9. Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes outlined in this notice, or as required under Nigerian tax, financial, and corporate record-keeping laws.

10. Security Measures

We have implemented technical and organizational measures, including secure payment processing through licensed third-party providers, to protect personal data against unauthorized access, loss, or misuse.

11. Updates to This Notice

This notice may be reviewed and updated periodically to reflect changes in our data processing activities or applicable Nigerian data protection law.