NDPR Compliance

Last updated 4 June 2026

Nigerian Petroleum Exchange (NipeX)(“NipeX”) is committed to processing personal data lawfully, fairly, and transparently. This statement describes how NipeXPRO aligns with the Nigeria Data Protection Regulation 2019 (NDPR) and the Nigeria Data Protection Act 2023 (NDPA), and complements our Privacy Policy.

1. Our regulatory alignment

We process personal data in accordance with the NDPR and the NDPA and the guidance of the Nigeria Data Protection Commission (NDPC). We observe the core data-protection principles: lawfulness and transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, and accountability. Where required, we file the prescribed annual data-protection audit returns.

2. Lawful basis for processing

We rely on one or more lawful bases recognised under the NDPA — consent, performance of a contract, compliance with a legal obligation, protection of vital interests, performance of a task carried out in the public interest, and legitimate interests — depending on the activity. The applicable basis for each processing activity is set out in our Privacy Policy.

3. Data-subject rights

As a data subject, you are entitled under the NDPR and NDPA to:

• be informed about how your personal data is processed;
• access the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request erasure of your data where there is no overriding lawful reason to retain it;
• object to, or request restriction of, certain processing;
• data portability in a structured, commonly used format; and
• withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact our Data Protection Officer at customersupport@nipex.com.ng. We respond within the statutory timeframe.

4. Data Protection Officer

We have appointed a Data Protection Officer (DPO) responsible for overseeing compliance with applicable data-protection law. The DPO can be reached at customersupport@nipex.com.ng, by phone on 08032850332 or 09038452851, or by post at NNPC-NUIMS (NipeX Office), Post Square Building, Tower B, 3 Ologun Agbaje Street, off Adeola Odeku, Victoria Island, Lagos.

5. Personal-data breach handling

We maintain procedures to detect, report, and investigate personal-data breaches. Where a breach is likely to result in a risk to the rights and freedoms of data subjects, we will notify the Nigeria Data Protection Commission within 72 hours of becoming aware of it, and affected data subjects without undue delay, in line with the NDPA.

6. Cross-border transfer

Personal data is primarily processed and stored within Nigeria. Where data is transferred outside Nigeria — for example to a cloud or service provider — we ensure the transfer relies on a lawful mechanism permitted under the NDPA, such as an adequacy determination or appropriate contractual safeguards, so that your data continues to receive an equivalent level of protection.

7. Audits and accountability

We conduct periodic data-protection impact assessments for high-risk processing, maintain records of processing activities, and engage licensed Data Protection Compliance Organisations where required to support our annual audit obligations. Our third-party processors are bound by contracts that require equivalent standards of protection.

8. Complaints

If you believe your data-protection rights have been infringed, please contact our DPO first so we can resolve the matter. You also have the right to lodge a complaint directly with the Nigeria Data Protection Commission (NDPC).