Data Protection Policy
1. Purpose
This Data Protection Policy sets out how Northern Valley Investments collects, handles, and safeguards personal data in accordance with applicable Namibian data protection legislation, including the Electronic Transactions Act and any applicable provisions of the Namibia Data Protection Bill.
2. Scope
This policy applies to all personal data processed by Northern Valley, including data relating to:
• Clients and prospective clients:
• Website visitors
• Newsletter subscribers
• Employees and contractors
• Suppliers and service providers
• Clients and prospective clients:
• Website visitors
• Newsletter subscribers
• Employees and contractors
• Suppliers and service providers
3. Data Protection Principles
Northern Valley is committed to processing personal data in accordance with the following principles:
• Lawfulness, fairness, and transparency — data is processed on a valid legal basis and individuals are informed
• Purpose limitation — data is collected for specified, explicit purposes and not used incompatibly
• Data minimisation — only data that is necessary for the stated purpose is collected
• Accuracy — data is kept accurate and up to date
• Storage limitation — data is not kept longer than necessary
• Integrity and confidentiality — data is protected against unauthorised access, loss, or destruction
• Lawfulness, fairness, and transparency — data is processed on a valid legal basis and individuals are informed
• Purpose limitation — data is collected for specified, explicit purposes and not used incompatibly
• Data minimisation — only data that is necessary for the stated purpose is collected
• Accuracy — data is kept accurate and up to date
• Storage limitation — data is not kept longer than necessary
• Integrity and confidentiality — data is protected against unauthorised access, loss, or destruction
4. Types of Data Processed
Northern Valley may process the following categories of personal data:
• Identification data: full name, job title, company name
• Contact data: email address, phone number, postal address
• Technical data: IP addresses, browser information, website usage analytics
• Financial data: billing information and payment records (processed via secure third-party payment providers)
• Project data: briefs, feedback, and communications related to service delivery
5. Data Storage and Security
Personal data is stored on secure systems with access restricted to authorised personnel only. We implement the following security measures:
• Password-protected systems and encrypted file storage
• Secure email communications for sensitive information
• Regular review of access rights and permissions
• Staff awareness of data protection responsibilities
In the event of a data breach that poses a risk to individuals, we will notify affected parties and relevant authorities as required by law.
• Password-protected systems and encrypted file storage
• Secure email communications for sensitive information
• Regular review of access rights and permissions
• Staff awareness of data protection responsibilities
In the event of a data breach that poses a risk to individuals, we will notify affected parties and relevant authorities as required by law.
6. Data Transfers
Where personal data is transferred to or processed by third-party service providers (e.g. cloud hosting, email marketing tools), we ensure that appropriate data processing agreements are in place and that providers maintain adequate security standards.
7. Individual Rights
Individuals whose data we process have the right to:
• Be informed about how their data is used
• Access a copy of the personal data we hold about them
• Request correction of inaccurate or incomplete data
• Request erasure of their data where there is no longer a lawful basis for processing
• Object to processing based on legitimate interests
• Withdraw consent for marketing at any time
To exercise any of these rights, please submit a written request to us using the contact details below. We will respond within 30 days.
• Be informed about how their data is used
• Access a copy of the personal data we hold about them
• Request correction of inaccurate or incomplete data
• Request erasure of their data where there is no longer a lawful basis for processing
• Object to processing based on legitimate interests
• Withdraw consent for marketing at any time
To exercise any of these rights, please submit a written request to us using the contact details below. We will respond within 30 days.
8. Cookies and Website Tracking
Our website uses cookies and analytics tools to understand how visitors interact with our site. This data is collected in aggregate and does not identify individuals directly. You can manage cookie preferences in your browser settings.
9. Third-Party Links
Our website may contain links to external websites. We are not responsible for the data protection practices of third-party sites and encourage you to review their policies.
10. Policy Review
This policy is reviewed annually or whenever there are significant changes to our data processing activities or applicable legislation.
11. Contact Us
For data protection enquiries, to exercise your rights, or to raise a concern, please contact:
Northern Valley Investments
Email: info@northern-valley.com
Phone: +264 (0) 81 841 5725
Address: Windhoek, Namibia
If you are unsatisfied with our response, you may contact the relevant Namibian regulatory authority.
Northern Valley Investments
Email: info@northern-valley.com
Phone: +264 (0) 81 841 5725
Address: Windhoek, Namibia
If you are unsatisfied with our response, you may contact the relevant Namibian regulatory authority.
Our commitment to excellence, customer satisfaction, and innovative solutions has earned us the trust of businesses across Namibia.
Quick Links
Copyright+©+2026+Northern Valley, All rights reserved