Crownshield Security is a private security company incorporated under the laws of the Federal Republic of Nigeria, with its registered office at Suite 209, Millennium Plaza, Central Business District, Abuja.
In the course of its operations, the Company collects, processes, stores, and transmits a wide range of information, including personal data relating to employees and clients, as well as highly sensitive operational and security-related information.
Given the nature of the Company’s services, particularly in areas such as surveillance, personnel deployment, risk management, and incident response, the information handled by Crownshield Security is often confidential, strategic, and, in some cases, critical to the safety of individuals and the protection of property.
The improper handling of such information, whether through negligence, unauthorised disclosure, or inadequate safeguards, may expose the Company and its clients to significant operational, legal, and reputational risks.
Crownshield Security therefore recognises that data protection and information security are not merely administrative obligations, but core components of its professional responsibility and operational integrity. The Company is committed to ensuring that all information entrusted to it is handled with the highest standards of care, in a manner that preserves confidentiality, ensures accuracy, and prevents unauthorised access or misuse.
This Policy establishes the framework through which Crownshield Security governs the collection, use, storage, protection, and disposal of information. It reflects the Company’s commitment to lawful processing, ethical data management, and compliance with applicable legal and regulatory requirements, including the Nigeria Data Protection Act 2023.
This Policy applies to all employees, management, contractors, consultants, and any authorised representatives acting on behalf of Crownshield Security. Every individual who has access to information in the course of the Company’s operations bears responsibility for ensuring that such information is handled in accordance with the standards set out in this Policy.
The purpose of this Policy is to provide a clear and comprehensive framework for the responsible management of information within Crownshield Security. It is designed to ensure that all data handled by the Company is processed in a lawful, secure, and transparent manner, and that appropriate safeguards are in place to protect against unauthorised access, disclosure, alteration, or loss.
This Policy further seeks to promote a culture of accountability and awareness in relation to data protection. By establishing clear expectations and standards, the Company aims to ensure that all personnel understand their responsibilities and are equipped to handle information in a manner that aligns with legal requirements and professional best practices.
In addition, the Policy reinforces the Company’s commitment to maintaining the trust of its clients, partners, and stakeholders by ensuring that all information entrusted to it is treated with the highest level of confidentiality and care.
This Policy applies to all categories of information handled by Crownshield Security in the course of its operations. This includes:
The Policy applies regardless of the form in which the information is held. Whether information is stored electronically, maintained in physical records, or communicated verbally in the course of business activities, it must be handled in accordance with the provisions of this Policy.
The obligations set out herein apply to all individuals acting on behalf of Crownshield Security, including permanent staff, temporary personnel, contractors, and consultants. Compliance with this Policy is a condition of engagement with the Company.
Crownshield Security collects and processes information strictly for legitimate operational, administrative, and legal purposes. Such purposes include the delivery of security services, the management of personnel, communication with clients and stakeholders, and compliance with applicable regulatory requirements.
All information must be collected through lawful and transparent means. The Company ensures that data is obtained only to the extent necessary for the purpose for which it is required, and that individuals whose data is collected are treated fairly and with due regard for their rights.
The processing of information must at all times be consistent with the purpose for which it was originally collected. Under no circumstances shall information be used for purposes that are incompatible with the Company’s operations or that may result in unfair or improper treatment of any individual.
Personnel are expected to exercise sound judgment in the handling of data and to ensure that all processing activities are carried out responsibly and in accordance with established procedures.
Information collected by Crownshield Security is used solely in connection with its legitimate business activities. This includes the provision of security services, coordination of operational activities, administration of personnel matters, and compliance with legal and regulatory obligations.
The Company maintains strict controls to ensure that information is not used for personal benefit, unauthorised surveillance, or any purpose that falls outside the scope of its operations.
Any misuse of data, whether intentional or arising from negligence, is considered a serious breach of this Policy.
All personnel are required to ensure that the use of information is appropriate, proportionate, and consistent with the Company’s ethical standards and legal obligations.
Confidentiality is a fundamental obligation within Crownshield Security. All information obtained or generated in the course of the Company’s operations is to be treated as confidential unless expressly authorised for disclosure.
Personnel are required to exercise discretion in all matters involving sensitive information. Confidential information must not be disclosed to unauthorised persons, whether within or outside the Company.
Particular care must be taken to avoid discussing sensitive matters in public or unsecured environments.
The duty of confidentiality extends beyond the period of employment or engagement. Individuals who have had access to confidential information during their association with the Company remain bound by this obligation even after their relationship with the Company has ended.
Crownshield Security is committed to implementing and maintaining appropriate technical and organisational measures to safeguard information. These measures are designed to protect against unauthorised access, prevent data loss, and ensure the integrity of information systems.
Access to sensitive information is controlled and restricted to authorised personnel. The Company maintains systems and procedures to ensure that information is stored securely and that access is monitored and managed effectively.
The Company also undertakes periodic reviews of its information security practices to ensure that they remain effective in addressing evolving risks and technological developments.
Personnel are required to comply with all established security procedures and to take reasonable steps to protect the information within their control.
Access to information within Crownshield Security is granted strictly on the basis of necessity. Only individuals who require access to specific information for the performance of their duties shall be authorised to do so.
The Company adopts a controlled approach to access management in order to minimise the risk of unauthorised disclosure or misuse of data.
Personnel are expected to respect access limitations and must not attempt to access information beyond what is required for their role.
Any misuse of access privileges, including unauthorised viewing, sharing, or alteration of data, shall be treated as a serious violation of this Policy.
Crownshield Security retains information only for as long as it is necessary to fulfil the purpose for which it was collected or to comply with applicable legal and regulatory obligations.
Once information is no longer required, it shall be securely disposed of in a manner that prevents unauthorised access, recovery, or misuse.
The Company ensures that both electronic and physical records are handled in accordance with established procedures for secure disposal.
Personnel involved in the management of records are required to ensure that retention and disposal practices are carried out responsibly and in compliance with this Policy.
Any unauthorised access to, disclosure of, or loss of information constitutes a data breach and must be treated with urgency and seriousness.
All personnel are required to report any actual or suspected breach immediately upon becoming aware of it.
Upon notification of a breach, the Company shall take prompt steps to:
Where required by law or regulatory obligations, the Company shall notify relevant authorities and affected parties in a timely and appropriate manner.
Failure to report a known or suspected data breach shall itself constitute a serious violation of this Policy.
Compliance with this Policy is mandatory for all personnel of Crownshield Security.
The Company maintains oversight of data protection practices through internal monitoring and periodic review of its systems and procedures.
Any breach of this Policy shall be treated as a serious matter and may result in disciplinary action, including termination of employment or engagement.
Where necessary, the Company may also pursue legal remedies in accordance with applicable laws.
Personnel are encouraged to seek clarification where uncertainty arises and to report any concerns relating to data protection or information security without delay.
This Policy shall be reviewed periodically to ensure that it remains effective, relevant, and aligned with the Company’s operational needs and legal obligations.
Amendments may be made as necessary to reflect changes in regulatory requirements, technological developments, or organisational practices.
Crownshield Security is committed to maintaining the highest standards of data protection and information security.
The Company recognises that safeguarding information is essential to maintaining trust, protecting its clients and personnel, and preserving its reputation as a reliable and professional security service provider.
For any questions, clarifications, or to report concerns relating to this Policy, please contact Crownshield Security through:
Email: [email protected]
Telephone: +234 708 625 0990
Office Address: Suite 209, Millennium Plaza, Central Business District, Abuja, Nigeria.
