This policy explains how Sastech Consults (“we”) handles personal data collected through www.sastech.com.ng. We are the data controller for this data. We follow the Nigeria Data Protection Act 2023 (NDPA) and guidance from the Nigeria Data Protection Commission (NDPC).
1. What we collect
- Contact form: your name, email, and optionally your business name and phone or WhatsApp number, plus the message you write.
- Bookings: if you book a call, Calendly collects your name, email and any answers you give on the booking form.
- WhatsApp and email: anything you send us through these channels.
- Website analytics: we use Vercel Web Analytics, which counts page views without cookies and without identifying you personally.
2. Why we use it, and our lawful basis
- To reply to your enquiry and arrange calls (your consent, and steps you ask us to take before a contract).
- To deliver services if you become a client (performance of a contract).
- To understand how the website is used and improve it (legitimate interest, using anonymous data).
- To meet legal, tax and accounting duties (legal obligation).
We do not sell your data, and we do not use it for automated decisions that affect you.
3. Who we share it with
We use trusted service providers who process data on our behalf: Vercel (website hosting and analytics), Resend (sending contact-form emails), Zoho (business email), Calendly (booking) and Meta (WhatsApp). Some of these providers store data outside Nigeria. Where that happens, we rely on the transfer safeguards allowed under the NDPA.
4. How long we keep it
Enquiries that do not become projects are kept only as long as we need them to reply and follow up, then deleted. Client records are kept for as long as the law requires for tax and accounting.
5. Your rights
Under the NDPA you can ask us to:
- give you a copy of the personal data we hold about you;
- correct data that is wrong or incomplete;
- delete your data, or restrict how we use it;
- move your data to another provider in a usable format;
- stop using your data for a purpose you object to, or withdraw consent at any time.
Email privacy@sastech.com.ng. We will reply within the time the law allows. If you are unhappy with our answer, you can complain to the Nigeria Data Protection Commission.
6. Cookies
Our website does not set advertising or tracking cookies. Our analytics are cookieless. The booking calendar on our contact page only loads from Calendly if you choose to open it, and Calendly may then set its own cookies under its own policy.
7. Security
We use encrypted connections (HTTPS), access controls and two-factor authentication on the accounts that hold your data. No system is perfectly secure, so if a breach affecting your data occurs, we will notify you and the NDPC where the law requires.
8. Client data in systems we build
When we build or run systems for clients, the client is usually the controller of their customers' data and we act as their processor under a written data processing agreement. This policy covers our own website only.
9. Changes
We may update this policy. The date at the top shows the latest version.
10. Contact
Sastech Consults, Lagos, Nigeria. Privacy: privacy@sastech.com.ng.