Your Privacy Choices & Data Subject Rights Portal
Self-service guidance and official procedures for exercising your statutory privacy rights under GDPR, UK GDPR, CCPA/CPRA, and NDPA across the Ozikol ecosystem.
1. Core Principles: Data Sovereignty & Self-Determination
At Ozikol, data privacy is not a compliance afterthought; it is an architectural cornerstone. We believe that organizations and individuals possess an inherent right to sovereignty over their personal and corporate records. Whether you are protected under the European Union General Data Protection Regulation (GDPR), the UK Data Protection Act 2018 (UK GDPR), the California Consumer Privacy Act (CCPA/CPRA), or the Nigeria Data Protection Act 2023 (NDPA), Ozikol provides direct, transparent mechanisms to exercise your legal rights without delay or artificial hurdles.
2. Exhaustive Catalog of Statutory Data Subject Rights
Depending on your geographic location and statutory jurisdiction, you are entitled to exercise the following legal rights:
- Right of Access & Information: You have the right to receive confirmation of whether personal data concerning you is being processed, along with a detailed copy of all categories of personal information held in our records.
- Right to Rectification: You have the right to request the immediate correction of inaccurate, outdated, or incomplete personal data. Most profile information can be edited directly within your account settings.
- Right to Erasure (""Right to be Forgotten""): You have the right to request the permanent deletion of your personal records where data is no longer necessary for the purposes collected, where consent has been withdrawn, or where processing is unlawful. Certain financial transaction and gate security records must be preserved for statutory tax and legal liability periods.
- Right to Restriction of Processing: You have the right to request the temporary freezing or restriction of personal data processing while accuracy disputes or legal claims are investigated.
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format (JSON or CSV) and to transmit that data to another provider without hindrance.
- Right to Object: You have the right to object at any time to data processing carried out under the legal grounds of legitimate interests, including direct marketing and operational profiling.
- Right to Opt-Out of Automated Decision-Making: You have the right to request human review of any automated algorithmic decision that produces legal or significantly impactful consequences (such as automated visitor gate clearance refusals).
3. Dual-Tier Data Architecture: Tenant Records vs. Central Records
To exercise your rights effectively, it is essential to understand Ozikol's dual-tier operational structure:
| Data Scope | Data Controller | How to Exercise Your Rights |
|---|---|---|
| Organization Tenant Records: Member rosters, estate resident directories, dues assessments, gate visitor logs, staff rotas, and security incident reports. | Your Subscribing Organization (e.g. your Estate Management Board, Club Executive, or Employer). | Contact your organization administrator or estate manager directly. If you cannot reach them or encounter difficulties, Ozikol's DPO will assist in facilitating your request with the organization. |
| Ozikol Central Platform Records: Central billing accounts, enterprise subscription contracts, central helpdesk support tickets, and direct contact inquiries. | Ozikol Cloud Global (Central Platform Controller). | Submit your request directly to the Ozikol Legal & Governance Desk via our Data Subject Rights Desk. |
4. Step-by-Step Data Subject Access Request (DSAR) Procedure
When submitting a formal Data Subject Access Request (DSAR) to Ozikol Central, our standardized compliance workflow ensures rapid and secure processing:
- Submission: Submit your request via our Enterprise Helpdesk Form selecting category ""Data Privacy & DSAR"". Include your full name, associated email address, and the specific rights you wish to exercise.
- Cryptographic Verification: To protect against identity fraud, we verify the requester's identity via a two-factor cryptographic email challenge or signed institutional token before any records are disclosed or modified.
- 48-Hour Acknowledgment: Our Data Protection team issues a formal acknowledgment and unique compliance tracking reference within 48 business hours.
- 30-Day Fulfillment SLA: All verified DSAR requests are completed within thirty (30) calendar days at zero cost to the requester. If an exceptionally complex request requires an extension (up to 60 additional days as permitted by law), you will be notified within the first 30 days.
5. In-App Notification & Communication Preferences
You can customize your notification and communication preferences directly without filing a formal DSAR:
- Push Notifications: Configurable at any time via your device settings (iOS Settings > Ozikol, Android App Info > Notifications).
- Transactional Emails: Essential account receipts, dues statements, and password resets are strictly operational and cannot be unsubscribed while maintaining an active account.
- Community Announcements: Toggle opt-in preferences for general announcements, sports club updates, and social polls in your member profile settings.
6. Global DPO Contact & Independent Supervisory Authorities
If you have questions regarding this policy or wish to escalate a privacy concern, please contact our Data Protection Officer:
Ozikol Legal & Governance Desk:
100 Bishopsgate, London EC2N 4AG, United Kingdom
Web Portal: Submit Legal & Privacy Request
You also have the statutory right to lodge a complaint with the relevant regulatory supervisory authority: in the UK, the Information Commissioner's Office (ICO) at ico.org.uk; in Nigeria, the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng; or the Data Protection Authority in your respective EU member state.