Nyota Global Holdings Inc.

1. Introduction

Nyota Global Holdings Inc. (\"we,\" \"us,\" \"our\") is committed to protecting the privacy and security of personal data. This Privacy Policy explains how we collect, use, store, and protect your information in compliance with applicable data protection regulations including GDPR.

2. Data We Collect

We collect: (a) Information you provide directly — name, email, phone, company information, and details shared during consultations; (b) Account information — login credentials and profile data; (c) Payment information — processed securely through Stripe (we do not store card details); (d) Usage data — how you interact with our website and client portal; (e) Documents — files you upload to the client portal.

3. How We Use Your Data

We use personal data to: provide and improve our services; communicate with you about your account and services; process payments; comply with legal obligations; protect our legitimate business interests; and send relevant updates with your consent.

4. Legal Basis for Processing (GDPR)

We process personal data based on: contractual necessity; legitimate interests; legal obligations; and your consent where applicable. You may withdraw consent at any time.

5. Data Sharing

We do not sell personal data. We may share data with: our affiliated entity Forever Young Enterprise LLC for service delivery; payment processors (Stripe); cloud service providers for data storage; and legal/regulatory authorities when required by law.

6. Data Security

We implement appropriate technical and organizational measures including encryption, access controls, and regular security assessments to protect your data.

7. Your Rights

You have the right to: access your data; rectify inaccurate data; erase your data; restrict processing; data portability; object to processing; and lodge a complaint with a supervisory authority. To exercise these rights, contact [email protected].

8. Data Retention

We retain personal data only as long as necessary for the purposes outlined in this policy or as required by law. Account data is retained for the duration of the client relationship plus any legally required retention period.

9. Cookies

Our website uses essential cookies for authentication and session management. We do not use tracking cookies without your consent.

10. International Data Transfers

If data is transferred internationally, we ensure appropriate safeguards are in place in accordance with applicable data protection laws.

11. Contact

For privacy inquiries, contact our Data Protection Officer at [email protected].