Last updated: August 24, 2026
PRIVACY POLICY
This Privacy Policy explains how Dimitts Integrated Nigeria collects, uses, stores, discloses, protects and otherwise processes personal data in connection with our business operations. This Policy is intended to comply with the Nigeria Data Protection Act, 2023 (NDP Act), applicable regulations and directives issued by the Nigeria Data Protection Commission (NDPC), including the NDP Act General Application and Implementation Directive (GAID) 2025, as applicable. The NDP Act establishes rights for data subjects and obligations for organisations that determine or process personal data. By interacting with Dimitts, submitting information to us, using our website or engaging our services, you acknowledge that you have read and understood this Privacy Policy.
PERSONAL DATA
Depending on the nature of your relationship with Dimitts, we may collect and process different categories of personal information.
Clients and prospective clients
We may collect:
Job applicants and recruitment candidates
Where you apply for a position through Dimitts, we may collect:
We will only request information that is reasonably relevant to the recruitment process or required for legitimate business, contractual or legal purposes.
Employees and consultants
For our employees, consultants and contractors, we may process:
Training participants
For professional training and certification programmes, we may collect:
Website visitors
When you visit our website, we may collect certain technical information, including:
HOW WE COLLECT PERSONAL DATA
We may obtain personal data:
Where we receive personal data from a third party, we will take reasonable steps to ensure that the data was collected and shared lawfully.
PURPOSES FOR WHICH WE PROCESS PERSONAL DATA
Dimitts may process personal data for the purposes of carrying out its recruitment/HR services, payroll management services, business advisory and consulting services, professional training and certifications, and for other general business administration.
LAWFUL BASIS FOR PROCESSING
Dimitts will process personal data only where there is a lawful basis for doing so.
Depending on the circumstances, the lawful basis may include:
The NDPC recognises consent, contract and legal obligation among the lawful bases for processing, together with other lawful grounds provided by the NDP Act. Where we rely on consent, you may withdraw your consent, subject to applicable legal or contractual limitations.
RECRUITMENT DATA
Because recruitment is one of our core services, Dimitts may process significant amounts of candidate information.
By submitting your CV or application to Dimitts, you understand that your information may be reviewed for current and future employment opportunities that reasonably correspond with your qualifications and preferences.
Where appropriate, candidate information may be shared with a prospective employer for recruitment purposes.
We will not knowingly sell candidates' personal information to third parties.
Candidates are responsible for ensuring that the information supplied to Dimitts is accurate, complete and up to date.
PAYROLL AND EMPLOYEE DATA
Where Dimitts provides payroll management services to an organisation, we may receive and process employee personal information from that organisation. In such circumstances, Dimitts may act as a Data Processor on behalf of the client. We will process such information only for the agreed purposes and in accordance with applicable contractual, legal and data protection requirements. Payroll information will be treated as confidential and access will be limited to authorised personnel who require the information for legitimate business purposes.
SHARING OF PERSONAL DATA
Dimitts does not sell personal data.
However, we may disclose personal data where reasonably necessary to provide our services or comply with legal obligations.
Recipients may include:
Where we engage third-party processors, we will take reasonable steps to ensure that they provide appropriate safeguards for personal data.
INTERNATIONAL OR CROSS-BORDER DATA TRANSFERS
Some of our technology, cloud, recruitment, consulting or business service providers may operate outside Nigeria.
Where personal data is transferred outside Nigeria, Dimitts will take appropriate steps to ensure that such transfer is undertaken in accordance with applicable Nigerian data protection requirements and appropriate safeguards.
The NDPC's current framework recognises specific requirements and safeguards for cross-border transfers and processing.
COOKIES AND WEBSITE TECHNOLOGIES
Our website may use cookies and similar technologies to:
Where applicable, you may manage cookie preferences through your browser or available website cookie controls.
Some cookies may be necessary for the proper functioning of the website and cannot be disabled without affecting certain website features.
DATA RETENTION
Dimitts will retain personal data only for as long as reasonably necessary for the purpose for which it was collected, or as required by contractual, legal, regulatory, accounting or legitimate business requirements.
When personal data is no longer required, we will take reasonable steps to securely delete, destroy, anonymise or otherwise dispose of it.
The NDP Act's data protection principles include storage limitation, requiring personal data not to be retained longer than necessary for the relevant lawful purpose.
DATA ACCURACY
Dimitts seeks to maintain accurate and up-to-date personal information. You are encouraged to notify us where information previously supplied to us is inaccurate, incomplete or has changed. The NDP Act requires personal data to be accurate, complete and, where necessary, kept up to date.
CHILDREN'S DATA
Our services are primarily intended for adults and organisations.
We do not knowingly collect personal information from children except where such collection is necessary for a legitimate service, programme or engagement and is undertaken in accordance with applicable legal requirements and appropriate safeguards.
Where consent is required for processing a child's personal data, Dimitts will take appropriate steps to obtain consent from the relevant parent, guardian or legally authorised person.
DIRECT MARKETING AND COMMUNICATIONS
Where permitted by applicable law, Dimitts may use contact information to send:
Where consent is required, we will obtain appropriate consent. You may opt out of marketing communications at any time by using the unsubscribe option provided or contacting us directly.
DATA BREACHES
Dimitts maintains procedures for identifying, assessing, managing and responding to personal data breaches.
Where a breach occurs that is likely to result in a risk to the rights and freedoms of individuals, Dimitts will take appropriate action in accordance with applicable law, including notification to the NDPC within the applicable statutory period where required.
The NDP Act provides for notification to the Commission within 72 hours of becoming aware of a qualifying breach, while the current implementation framework also addresses communication with affected data subjects where the breach presents a high risk.
Where appropriate, we will take steps to:
AUTOMATED DECISION-MAKING
Dimitts may use digital tools to support recruitment, administration, data analysis or other business activities. Where automated processing is used in a manner that produces significant effects on an individual, Dimitts will take appropriate steps to comply with applicable data protection requirements and respect relevant data subject rights.
Recruitment decisions will not be based solely on automated processing where applicable law requires meaningful human involvement.
THIRD-PARTY WEBSITES
Our website may contain links to third-party websites, platforms or services. Dimitts is not responsible for the privacy practices, security or content of third-party websites. We encourage users to review the privacy policies of third-party platforms before providing personal information to them.
CONFIDENTIALITY
Dimitts recognises that information supplied by clients, employees, candidates and business partners may be confidential. We will take reasonable steps to ensure that confidential personal information is accessed and disclosed only for legitimate purposes and by authorised persons. Employees, consultants, contractors and relevant service providers may be required to comply with confidentiality and data protection obligations.
COMPLAINTS AND PRIVACY CONCERNS
If you believe that Dimitts has improperly processed your personal data, we encourage you to contact us first so that we can investigate and attempt to resolve your concern. Your complaint should provide sufficient information to enable us to investigate the issue. Where a concern cannot be resolved satisfactorily, you may have the right to seek assistance or lodge a complaint with the Nigeria Data Protection Commission (NDPC) or another competent authority, in accordance with applicable law.
The NDP Act provides mechanisms for data subjects to seek remedies and recourse in relation to data protection concerns.
CHANGES TO THIS PRIVACY POLICY
Dimitts may periodically update this Privacy Policy to reflect:
Where material changes are made, we may provide an appropriate notice through our website or other communication channels.
The updated version will indicate the date on which it was last revised.
CONTACT US
If you have questions about this Privacy Policy, wish to exercise your data protection rights or have a privacy-related complaint, please contact us.
GOVERNING LAW
This Privacy Policy shall be governed by and interpreted in accordance with the laws of the Federal Republic of Nigeria, including the Nigeria Data Protection Act, 2023, applicable regulations and directives issued by the Nigeria Data Protection Commission, and other applicable laws.
Where Dimitts provides services to clients or individuals in other jurisdictions, additional privacy requirements may apply depending on the nature, location and circumstances of the processing.
ACKNOWLEDGEMENT
By using the Dimitts website, submitting information to Dimitts, applying for recruitment opportunities, registering for our training programmes, engaging our consulting services or otherwise providing personal information to us, you acknowledge that you have had the opportunity to read and understand this Privacy Policy.