Data Protection & Data Management Policy
Big Talk Productions Limited
1. Our Commitment
Big Talk Productions Limited recognises that responsible data management is fundamental to trust.
We are committed to collecting, using, storing, sharing, and disposing of personal and business information responsibly and in accordance with applicable Nigerian data-protection and privacy requirements.
Our approach is guided by the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, retention control, confidentiality, integrity, and accountability.
2. Scope
This Data Policy applies to personal data and relevant business information processed by Big Talk Productions in connection with:
- Our website
- Digital products
- Customer relationships
- Service engagements
- Project production
- Business operations
- Communications
- Marketing
- Suppliers and contractors
- Employees and prospective employees
- Other individuals whose information we lawfully process
3. Data We Aim to Collect
We seek to collect only information that is reasonably necessary for a defined and legitimate business purpose.
We do not seek to collect excessive personal information simply because it may be technically available.
Where a service can reasonably be provided without particular personal information, we will seek to avoid requiring that information.
4. Purpose Limitation
Personal data should be collected for specific, explicit, and legitimate purposes.
Information collected for one purpose should not subsequently be used for an incompatible purpose without an appropriate lawful basis or other permission required by law.
5. Data Minimisation
We aim to limit personal information to what is adequate, relevant, and reasonably necessary for the purpose for which it is processed.
6. Accuracy
We take reasonable steps to ensure that personal data under our control is accurate and appropriately maintained.
Where an individual identifies inaccurate or incomplete information, we will take reasonable steps to correct it.
7. Data Security
We use appropriate technical and organisational measures based on the nature and risk of the data involved.
These measures may include:
- Access controls
- Password protection
- Authentication measures
- Secure systems
- Restricted access to confidential information
- Appropriate cloud and device security
- Backups
- Staff or contractor confidentiality requirements
- Secure disposal procedures
- Monitoring and incident-response measures
Security measures may change as technology, risks, and our operations develop.
8. Access Control
Access to personal and confidential information should be limited to people who require access for legitimate business purposes.
Where appropriate, access may be granted according to role, project responsibility, contractual necessity, or other authorised business need.
9. Confidentiality
Employees, contractors, consultants, suppliers, and other authorised persons who have access to confidential information may be required to maintain confidentiality and use such information only for authorised purposes.
10. Third-Party Processors
We may engage third-party providers to provide technology, hosting, payment processing, communications, storage, analytics, production, or other services.
Where such providers process personal data on our behalf, we seek to ensure appropriate contractual and operational safeguards are in place.
11. International Processing
Where our technology or service providers process information outside Nigeria, we will take reasonable steps to ensure that applicable data-protection requirements concerning international transfers are addressed.
12. Data Retention
Information should not be retained indefinitely without a legitimate reason.
We seek to establish appropriate retention periods based on:
- The purpose for which information was collected
- Contractual requirements
- Legal and regulatory obligations
- Accounting and tax requirements
- Dispute resolution
- Security considerations
- Legitimate business requirements
When retention is no longer justified, information should be securely deleted, destroyed, anonymised, or otherwise disposed of as appropriate.
13. Data Subject Requests
Individuals whose personal data we process may have rights under applicable law.
Requests concerning personal data may include requests for access, correction, objection, restriction, portability, or deletion where applicable.
Requests should be submitted to:
We may need sufficient information to verify the identity of the person making a request.
14. Data Breaches and Security Incidents
Big Talk Productions maintains procedures intended to identify, assess, contain, investigate, and respond to data-security incidents.
Where a breach creates obligations to notify individuals, regulators, customers, or other parties, we will make such notifications as required by applicable law.
15. Privacy by Design
Where reasonably practicable, privacy and data-protection considerations should be incorporated into the design of new products, services, websites, processes, campaigns, and technologies.
We seek to consider:
- What information is genuinely necessary
- Why it is required
- Who needs access
- How long it should be retained
- What risks may arise
- How those risks can be reduced
16. Responsible Use of Data
Personal data must not be used for unlawful, discriminatory, fraudulent, abusive, or unauthorised purposes.
Personnel and third parties with access to company data are expected to handle such information responsibly.
17. Policy Review
This Data Policy may be reviewed periodically to reflect changes in our business, technology, regulatory requirements, and recognised data-protection practices.
18. Contact
For questions concerning this Data Policy or data-protection practices at Big Talk Productions Limited:
Big Talk Productions Limited
66 Ogunfowodu Street, Escobar, Ogijo, Ogun State, Nigeria
Email: [email protected]
Phone: 09118376916
Big Talk Productions Limited — responsible media begins with responsible data.