Menu
Sky Capital & Financial Allied International Limited offers a range of financial products such as Loans, Deposit Fixing, and Wealth Management services tailored to our client’s unique needs.
As a Data Controller under the Nigeria Data Protection Act (NDP Act) 2023, we are committed to safeguarding the confidentiality, integrity, and security of all personal data entrusted to us.
By using our services, you entrust us with your information. We understand the responsibility this carries and are dedicated to processing your data in compliance with the NDP Act 2023, GAID 2025, and other applicable regulations.
We may update this Privacy Policy periodically, and the latest version will always be available on our official platforms.
We process your personal data in line with Section 24 of the NDP Act 2023 and Article 15 of the GAID 2025:
We also uphold accountability by documenting our processing activities, conducting Data Privacy Impact Assessments (DPIAs), and reviewing our practices regularly.
As required under Section 25 of the NDP Act 2023 and Article 16 of the GAID 2025, the Company shall assess and determine the lawful basis for each category of data processing prior to processing personal data.
In accordance with Articles 17 and 18 of the GAID 2025, the Company shall ensure:
| S/N | Purpose | Type of Data | Lawful Basis |
|---|---|---|---|
| 1 | Client identification (KYC) | Name, contact details, NIN, BVN, passport, utility bills | Legal Obligation |
| 2 | Account opening & stockbroking services | Personal, financial, and transaction data | Contract / Legal Obligation |
| 3 | Regulatory reporting (SEC, NGX, CBN) | Financial & transaction records | Legal Obligation |
| 4 | Communication & updates | Email & phone number | Consent / Legitimate Interest |
| 5 | Security & fraud prevention | CCTV images, access logs, device/IP information | Legal Obligation / Legitimate Interest |
| 6 | Employment & HR | Employee records, guarantor details, medical data | Contract / Legal Obligation |
You have the right to request and obtain confirmation as to whether your personal data is being processed, as well as access to the personal data and information about how it is processed. Organizations must provide copies of your data upon request.
You have the right to request correction of inaccurate, incomplete, or outdated personal data. The organization must take reasonable steps to rectify such data without undue delay.
You may request the deletion or removal of your personal data where there is no lawful basis for retaining it, where consent has been withdrawn, or where processing is unlawful—subject to legal and regulatory retention requirements.
You may request a temporary or permanent restriction on the processing of your personal data, particularly where accuracy is contested, processing is unlawful, or you object to the processing.
You have the right to request a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that the data be transmitted to another data controller where technically feasible.
Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
You may object at any time to the processing of your personal data, particularly where the basis is legitimate interest, performance of a task in the public interest, or for direct marketing purposes.
You have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe that your data protection rights have been violated.
You have the right to seek judicial redress where you suffer harm as a result of a breach of data protection laws or where you are dissatisfied with the outcome of a complaint.
You have the right not to be discriminated against for exercising any of your data protection rights.
You have the right to receive clear, concise, and transparent information about the collection and use of your personal data, including the purposes, legal basis, retention period, and recipients.
To exercise these rights, contact our Data Protection Officer (DPO).
We use encryption, access controls, intrusion detection systems, and continuous monitoring to protect your data.
Certain personal data is mandatory for us to comply with regulatory obligations such as KYC and AML/CFT requirements.
In compliance with Article 34 of the GAID 2025, all third-party processors engaged by the Company must enter into a binding Data Processing Agreement (DPA) that clearly defines:
In accordance with Article 45 of the GAID 2025, the Company shall ensure that cross border data transfers occur only under:
When you use our website or online services, we collect technical data (IP address, device type, browser details). Cookies may be used to enhance user experience. You can manage cookie settings via your browser.
Cookies may be used to enhance user experience and can be managed through your browser settings.
Our services are not targeted at children under 13 years. Where processing involves minors, we require verifiable parental or guardian consent in line with Section 31 NDP Act 2023.
Data Controller: SKY CAPITAL ASSET MANAGEMENT LIMITED
Head Office: 10 ANIFOWOSE STREET, VICTORIA ISLAND, LAGOS
Email: info@skycapitallimited.com
Phone: +2347025002871
Data Protection Officer (DPO):
Email: dpo@skycapitallimited.com
In line with Articles 11–14 of the GAID 2025, the Company shall ensure that:
SKY CAPITAL ASSET MANAGEMENT LIMITED reserves the right to review and update this Privacy Policy in line with regulatory changes or operational requirements.
Notice of significant updates will be communicated via our website or direct communication.