Privacy Policy

Profitech Nigeria Limited (“Profitech”, “the Company”, “we”, “us”, or “our”) respects your privacy and is committed to protecting the personal data you share with us. This Privacy Policy explains how we collect, use, store, share, and safeguard your personal data when you visit our website at profitech.com.ng (the “Website”) or otherwise interact with us through this Website.

This Policy is issued in accordance with the Nigeria Data Protection Act, 2023 (the “NDPA”) and other applicable data protection laws and regulations in Nigeria. It applies to personal data collected through this Website. It does not apply to information collected offline or through channels other than this Website.

By using this Website, you acknowledge that you have read and understood this Policy. If you do not agree with any part of it, please discontinue use of the Website.

If you have questions about this Policy, please contact us using the details in Section 15.

We only process your personal data where we have a lawful basis to do so. Depending on the circumstances, we rely on one or more of the following lawful bases under the NDPA:

• Consent — where you have given clear consent for us to process your personal data for a specific purpose (for example, accepting analytics cookies or submitting an enquiry).
• Contract — where processing is necessary to take steps at your request before entering into a contract, or to perform a contract with you.
• Legal obligation — where processing is necessary to comply with a legal or regulatory obligation to which we are subject.
• Vital interests — where processing is necessary to protect your vital interests or those of another person.
• Public interest — where processing is necessary for the performance of a task carried out in the public interest.
• Legitimate interests — where processing is necessary for our legitimate business interests, except where those interests are overridden by your interests or fundamental rights and freedoms.

Where we rely on your consent, you may withdraw it at any time. Withdrawal will not affect the lawfulness of any processing carried out before you withdrew your consent.

We collect personal data in two main ways: information you provide directly through our forms, and information collected automatically when you use the Website.

3.1 Information You Provide Through Our Forms

Our Website includes several forms through which you may choose to provide personal data directly to us. We only collect this information when you actively complete and submit a form. These forms include:

• Contact form — for general enquiries
• Consultation request form — for requesting a consultation about our services
• Partnership form — for organisations interested in partnering with us
• Message forms — for other communications you may wish to send us
• Career application forms — for applying to roles advertised on our careers page

Depending on the form, the personal data we collect may include your full name, email address, telephone number, organisation or company name, the service or partnership you are interested in, the details of your enquiry, message, or project, information relevant to a job application (including your curriculum vitae and any attachments you choose to provide), how you heard about us, and any other information you voluntarily include.

You are not obliged to provide this information, but if you do not, we may be unable to respond to your enquiry, provide the service requested, or process your application.

3.2 Information Collected Automatically

When you visit our Website, certain technical information is collected automatically, partly through cookies and similar technologies (see Section 5). This may include your Internet Protocol (IP) address, browser type and version, device and operating system information, pages viewed and time spent on them, referring and exit pages, and the date and time of access.

This information helps us understand how visitors use our Website so that we can maintain and improve it. Some of this information is collected only where you have consented to analytics cookies.

We use the personal data we collect for the following purposes:

• To respond to your enquiries, consultation requests, partnership requests, and messages
• To provide the services you request and to fulfil our contractual obligations
• To receive, assess, and respond to job applications submitted through our careers page
• To operate, maintain, secure, and improve our Website
• To analyse Website usage and understand visitor interests, where you have consented to analytics
• To communicate with you in connection with your enquiry, application, or request
• To detect, prevent, and address fraud, spam, security issues, or technical problems
• To comply with applicable laws, regulations, and lawful requests from authorities

We will not use your personal data for purposes that are incompatible with those described above without first obtaining your consent.

Our Website follows a standard procedure of using log files. These files record visitors when they access websites, and doing so is a standard part of hosting and analytics services. The information collected through log files may include IP addresses, browser type, Internet Service Provider, date and time stamps, and referring and exit pages. This information is not linked to any personally identifiable information and is used to analyse trends, administer the Website, and gather general usage information.

We respect your privacy and limit the disclosure of your personal data. We do not sell, rent, or trade your personal data to any third party for marketing or data-mining purposes.

We may share your personal data with:

• Service providers who perform functions on our behalf and who are bound by appropriate confidentiality and data protection obligations. This includes providers of website hosting, content management, email delivery, analytics, and security services.
• Professional advisers such as lawyers, auditors, or consultants, where necessary.
• Regulatory or governmental authorities, where we are required to disclose personal data to comply with a legal or statutory obligation.

We require all third parties who process personal data on our behalf to apply appropriate security measures and to process personal data only as instructed and in line with applicable law.

Some of the service providers we use to operate this Website are located outside Nigeria, and your personal data may therefore be transferred to, stored in, or processed in countries other than Nigeria. For example, our Website hosting, content management, email delivery, and analytics services may be provided by organisations based outside Nigeria.

Where we transfer your personal data outside Nigeria, we take steps to ensure that it is afforded a level of protection consistent with the requirements of the NDPA. These steps may include entering into data processing agreements containing appropriate safeguards and ensuring that personal data is transmitted securely.

Where personal data is transferred to a recipient in a country that does not provide an adequate level of data protection, we will take reasonable steps to ensure that your personal data is handled securely and that you are informed of any associated risks.

We take the security of your personal data seriously. We implement appropriate organisational, technical, and physical measures designed to protect personal data against unauthorised access, loss, theft, disclosure, misuse, or alteration.

These measures include, among others, the use of secure connections, access controls limiting personal data to authorised personnel on a need-to-know basis, measures to protect our forms from spam and automated abuse, and the use of reputable service providers that maintain their own security safeguards.

While we strive to protect your personal data, no method of transmission over the internet or method of electronic storage is completely secure. We therefore cannot guarantee absolute security, but we are committed to taking reasonable measures to protect your data.

We retain your personal data only for as long as is reasonably necessary for the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. For example, enquiry and consultation records are kept for as long as needed to manage our relationship with you, and job application data is retained for the duration of the recruitment process and a reasonable period thereafter.

When your personal data is no longer required, we will take reasonable steps to securely delete or anonymise it.

Subject to the conditions set out in the NDPA, you have the following rights in relation to your personal data:

1. Right of access — to request access to the personal data we hold about you.
2. Right to rectification — to request the correction or updating of inaccurate or incomplete personal data.
3. Right to erasure — to request the deletion of your personal data in certain circumstances.
4. Right to restrict processing — to request that we limit the processing of your personal data in certain circumstances.
5. Right to object — to object to the processing of your personal data, including for direct marketing purposes.
6. Right to withdraw consent — to withdraw your consent at any time where we rely on consent to process your personal data.
7. Right to data portability — to request a copy of certain personal data in a structured, commonly used format.
8. Right in relation to automated decision-making — to object to decisions based solely on automated processing where such decisions produce legal or similarly significant effects.
9. Right to lodge a complaint — to lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your data protection rights have been infringed.

To exercise any of these rights, please contact us using the details in Section 15. We may need to verify your identity before responding to your request.

Protecting the privacy of children is important to us. Our Website is not directed at children, and we do not knowingly collect personal data from children. We encourage parents and guardians to monitor and guide their children’s online activity.

If you believe that a child has provided us with personal data, please contact us immediately, and we will take reasonable steps to remove such information from our records.

If you have any complaint regarding this Policy or the way we handle your personal data, please contact us using the details in Section 15. We will investigate and work towards the prompt resolution of all complaints relating to the use and disclosure of personal data, in line with the NDPA.

If you are not satisfied with the outcome, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).

We may update this Policy from time to time to reflect changes in technology, our practices, or legal and regulatory requirements. The most current version will always be available on this page, with the “Last updated” date revised accordingly.

Where we make material changes to how we collect or process your personal data, we will provide notice through our Website or by other appropriate means. Your continued use of the Website after such changes take effect constitutes your acknowledgement of the updated Policy.

If you have any questions, requests, or concerns regarding this Policy or how we process your personal data, please contact us: