Privacy Policy – Obzidian Oil Ltd

Last updated: November 2025

1. Introduction

Obzidian Oil Ltd (“we”, “our”, “us”) respects your privacy and is committed to protecting Personal Data in accordance with the Nigeria Data Protection Act 2023 (NDPA) and applicable guidance issued by the Nigeria Data Protection Commission (NDPC). This Privacy Policy explains how we collect, use, store, disclose and protect Personal Data when you access our website, submit enquiries, or engage with our products and services.

By using our website, you agree to the terms of this Privacy Policy.

2. Scope

This Privacy Policy applies to:

  • visitors to our website,
  • prospective and existing customers,
  • suppliers, agents and service partners,
  • job applicants who submit information through the site.

3. Definitions

  • Personal Data / Personal Information: information relating to an identifiable individual as defined under the NDPA.
  • Processing: any operation performed on Personal Data including collection, storage, transfer, deletion or disclosure.
  • Data Subject: an identified or identifiable natural person.
  • Controller / Processor: as determined under the NDPA.

4. Personal Data We Collect

We may collect:

a) Information you provide to us

  • Name, company, role or job title
  • Contact information (email, phone number, address)
  • Enquiry details, project requirements, RFQs or order information
  • Recruitment information (CVs, qualifications, certifications)

b) Information collected automatically

  • IP address and device identifiers
  • Browser type, pages visited, access times
  • Cookies and analytics data

c) Information from third parties

  • Business directories
  • Compliance screening providers
  • Credit reference or due-diligence agencies

5. Lawful Bases for Processing

We process Personal Data based on one or more lawful grounds under the NDPA, including:

  • Performance of a contract (responding to enquiries, fulfilling orders)
  • Legal obligation (industry regulation, accounting, tax compliance)
  • Legitimate interests (website security, business administration)
  • Consent (where explicitly required, e.g., optional marketing)

6. How We Use Personal Data

We use Personal Data to:

  • respond to requests, quotations and supply enquiries
  • manage customer accounts and business relationships
  • comply with oil & gas regulatory requirements
  • improve website performance and user experience
  • conduct fraud prevention, sanctions compliance and due diligence
  • communicate product or service updates (with opt-out option)
  • manage recruitment applications

7. Data Sharing and Disclosure

We may share Personal Data with:

  • logistics partners, agents and subcontractors
  • regulatory bodies and authorities where required by law
  • payment service providers and financial institutions
  • IT hosting, analytics and security service providers
  • legal or professional advisers
    We do not sell Personal Data.

8. International Transfers

Where Personal Data is transferred outside Nigeria, we will ensure compliance with the NDPA requirements, including appropriate safeguards, contractual protections or permitted transfer mechanisms.

9. Data Retention

We retain Personal Data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, including:

  • regulatory and compliance periods under petroleum sector law
  • financial record-keeping and tax requirements
  • recruitment retention limits
    At the end of the retention period, data will be securely deleted or anonymised.

10. Data Subject Rights

Under the NDPA, you have the right to:

  • request access to your Personal Data
  • request correction or updating
  • request deletion (“erasure”) where applicable
  • object to processing or withdraw consent
  • request data portability
  • lodge a complaint with the Nigeria Data Protection Commission

To exercise these rights, contact us using the details below. We may need to verify your identity before responding.

11. Data Security

We implement technical and organisational controls appropriate to our operations, including:

  • access controls and authentication
  • encryption and secure storage
  • network and cybersecurity safeguards
  • staff confidentiality obligations and training

12. Cookies and Tracking Technologies

Our website may use cookies and analytics tools to improve functionality and user experience. You can manage cookie preferences through your browser settings. A detailed Cookie Policy can be provided if required.

13. Links to Third-Party Sites

Our website may contain links to external websites. We are not responsible for their privacy practices and encourage you to review their policies.

14. Children’s Data

Our website and services are not intended for children and we do not knowingly collect Personal Data from individuals under 18.

15. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Material changes will be communicated via the website. Continued use of the website indicates acceptance.

16. Contact Details & Data Protection Officer

If you have questions, wish to exercise your rights, or have concerns about data protection, contact:

Obzidian Oil Ltd
8 Osatohan Way, Ajah, Lagos / P.O.Box 72874 Victoria Island Lagos
Email: info@obzidianenergy.com
Data Protection Officer / Privacy Contact: info@obzidianenergy.com