Privacy Policy

Fadac Resources (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what information we collect when you visit https://fadacresources.com (“Website”) or engage our services, how we use and share it, your rights under Nigerian and Canadian law, and how we safeguard your data. We operate in Nigeria and Canada and comply with Nigeria’s Data Protection Act 2023 (NDPA) and Canada’s PIPEDA, ensuring transparency, security, and control over your information.



1. Controller & Contact Details

  • Controller:
    • Fadac Resources and Services Limited (Nigeria)
    • Fadac Resources and Services Inc. (Canada)
  • Registered Addresses:
    • Lagos, Nigeria
    • Ontario, Canada
  • DPO / Privacy Contact:


2. Scope & Applicability

  • Territorial Scope: Applies to processing of personal data of individuals in Nigeria (NDPA) and Canada (PIPEDA). Processing outside these jurisdictions remains subject to respective laws if it involves local data subjects
  • Material Scope: Covers personal data collected via our Website, email, phone, or service delivery.


3. Categories of Personal Data Collected

  1. Identity & Contact Data: Name, job title, company, email, phone, mailing address.
  2. Professional Data: Résumé/CV, qualifications, skills, work history.
  3. Technical & Usage Data: IP address, device/browser type, pages visited, timestamps (via cookies and analytics tools).
  4. Marketing Preferences: Opt-in status, newsletter subscriptions, event registrations.
  5. Special Category Data: (Only if explicitly provided) e.g. diversity metrics for reporting, with separate consent.
  6. No Payment Card Data: Collected directly by Stripe, GoCardless, or Zoho Payments; we only receive transaction amount and date.


4. Lawful Bases for Processing

We rely on the following under NDPA and PIPEDA:

  • Consent: Clear opt-in for marketing, profiling, or special category data
  • Contractual Necessity: To perform engagement contracts (e.g., recruitment, consulting).
  • Legal Obligation: To comply with employment, tax, and reporting laws in Nigeria and Canada.
  • Legitimate Interests: For Website maintenance, fraud prevention, service improvement—after balancing against your rights


5. Purposes of Processing

  • Service Delivery: Recruitment, payroll, HR advisory, outsourcing and talent acquisition.
  • Communications: Responding to enquiries, sending transactional and support emails.
  • Marketing & Events: Sending newsletters, webinar invites, whitepapers—only with your consent.
  • Operational: Analytics, security monitoring, fraud detection, business continuity.


6. Cookies & Tracking

We use:

  • Essential Cookies: Session management, security.
  • Performance Cookies: Google Analytics to track Website usage (IP anonymized)
  • Marketing Pixels: LinkedIn and Facebook pixels (only after opt-in).
    You can manage preferences via the cookie banner or browser settings.


7. Data Sharing & International Transfers

  • Service Providers: Background check vendors, payroll processors, cloud hosting—under data-processing agreements.
  • Clients/Employers: Candidate data shared when applying for roles.
  • Regulators & Legal: Tax authorities, law enforcement if required by law.
  • Cross-Border Transfers: Between Nigeria and Canada under Model Clauses or adequacy (Canada is deemed adequate by EU)

8. Data Retention Periods

  • Job Applications & CVs: Up to 5 years after last contact (unless you request earlier deletion).
  • Client Records & Contracts: Minimum 7 years (tax and audit requirements).
  • Website Analytics: 12 months rolling.
  • Marketing Lists: Until opt-out.


9. Data Subject Rights

Subject to identity verification and any applicable exemptions, you may:

  1. Access: Obtain a copy of your personal data
  2. Rectification: Correct inaccurate or incomplete data
  3. Erasure (“Right to be Forgotten”): Request deletion where no longer needed
  4. Restriction: Block or suppress processing under certain conditions
  5. Objection: Object to processing based on legitimate interests or marketing.
  6. Portability: Receive data in structured, machine-readable format
  7. Withdraw Consent: At any time for marketing or profiling.
  8. Complaint: Lodge with NDPC (Nigeria) or OPC (Canada) or a relevant provincial body.

To exercise any right, contact hello@fadacresources.com. We’ll respond within 30 days (may extend by 2 months if complex)



10. Security Measures

We implement technical and organizational safeguards, including:

  • AES-encrypted storage and TLS for data in transit.
  • Access controls, MFA for all admin accounts.
  • Regular penetration testing and staff training.
  • Incident response plan with breach notification within 72 hours where required by law


11. Children’s Data

We do not knowingly collect personal data from individuals under 16. If discovered, we’ll delete it promptly.



12. Changes to This Policy

We may update this Policy; the “Effective Date” above will reflect the latest version. Significant changes will be notified via our Website and, where appropriate, by email.