Privacy Policy

1. Information we collect

We collect only the information needed to provide and improve our services:

• Account information. Your name, email address, phone number, company or organisation name, and the password and credentials you set when you register an account.
• Order and payment information. Details of the engagements you request, order references, billing details, and the transaction records associated with your payments. Card and bank details are handled by our payment processor — we do not store full card numbers on our servers.
• Usage information. How you interact with our site and project dashboard, including pages visited, features used, and actions taken, so we can operate and improve the service.
• Device and log information. IP address, browser type, operating system, referring pages, and timestamps collected automatically through server logs and similar technologies.

2. How we use your information

We use the information we collect to:

• Create and manage your account and authenticate your access.
• Scope, deliver, and support the engagements and deliverables you request.
• Process payments, issue invoices and receipts, and maintain accounting records.
• Communicate with you about your projects, respond to enquiries, and send service-related notices.
• Maintain the security and integrity of our systems, prevent fraud and abuse, and meet our legal and regulatory obligations.
• Analyse usage to improve the performance, reliability, and design of our services.

3. Sharing & disclosure

We do not sell your personal data. We share data only with trusted service providers who help us operate, and only to the extent necessary:

• TransactPay — our third-party payment processor, which handles card and bank transactions securely on our behalf.
• ImageKit — the content delivery network (CDN) used to store and serve media assets efficiently.

We may also disclose information where required by law, to enforce our agreements, or to protect the rights, safety, and property of Tech Xtra, our clients, or others.

4. Data security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These include encryption in transit, access controls, and the use of vetted processors. No method of transmission or storage is completely secure, so while we work hard to protect your data, we cannot guarantee absolute security.

5. Your rights under the NDPR

Under the Nigeria Data Protection Regulation (NDPR) and the Nigeria Data Protection Act, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data, subject to our legal and record-keeping obligations.
• Object to or restrict certain processing of your data.
• Request a portable copy of the data you provided to us, where applicable.
• Withdraw consent at any time, without affecting processing carried out before withdrawal.

To exercise any of these rights, contact us using the details in section 8. You also have the right to lodge a complaint with the Nigeria Data Protection Commission.

6. Cookies & similar technologies

We use cookies and similar technologies to keep you signed in, remember your preferences, secure the service, and understand how our site is used. You can control or disable cookies through your browser settings, though some features may not work as intended if you do.

7. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we do, we will revise the “Last updated” date above and, where appropriate, notify you. Continued use of our services after an update means you accept the revised policy.

8. Contact us

For questions about this policy or your personal data, contact us:

Registered in Nigeria on 02 May 2025 as a Private Company Limited by Shares. Stamp Duty Certificate No. 2025-0605-70298-51816.

9. Governing law

This Privacy Policy is governed by the laws of the Federal Republic of Nigeria, including the NDPR and the Nigeria Data Protection Act.