Privacy Policy

1. Introduction

Indow Technologies Limited ("we", "us", or "our"), registered in the Federal Republic of Nigeria, is committed to safeguarding the privacy of our website visitors, clients, and partners.

This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you interact with our website, request bookings, or use our digital services. This policy is drafted in strict compliance with the Nigeria Data Protection Act (NDPA), 2023 and the Nigeria Data Protection Regulation (NDPR).

2. The Data We Collect

We only collect personal data that is necessary to provide you with our consultation booking services and technical deliverables. This includes:

• Contact Metadata: Name, email address, telephone number, and company name.
• Project Scope & Needs: Service interest selection, estimated budget, and text descriptions of your project requirements.
• Scheduling Coordinates: Selected appointment date and time slot.
• Security Indicators: Google reCAPTCHA v3 bot-risk scores and transaction verification logs to prevent malicious submissions.
• Analytical Logs: IP address, geographic region (e.g. Africa/Lagos timezone checks for local currency formatting), browser user-agent, and site navigation details.

3. Legal Bases for Processing Data

Under Section 25 of the NDPA 2023, we process your personal data under the following legal bases:

• Consent: When you explicitly fill out and submit our contact form, book a consultation, or subscribe to our newsletter.
• Contractual Obligation: When processing is necessary to draft, execute, or deliver services under our consulting or development agreements.
• Legal Compliance: To comply with regulatory mandates, tax laws, or cybercrime preventative measures in Nigeria.
• Legitimate Interests: To prevent spam/malicious bot attacks (via reCAPTCHA checks) and to optimize website performance.

4. How We Use Your Data

We process your data for the following specific purposes:

• To manage, confirm, schedule, and assign consultants to your scheduled appointments.
• To synchronize lead opportunities directly with our Zoho CRM modules for client onboarding.
• To dispatch email receipts and administrator alerts via secure SMTP/Resend integrations.
• To verify client authenticity and mitigate spam submissions.
• To maintain audit and security logs in our database for operational integrity.

5.Data Sharing & Cross-Border Transfers

We do not sell, rent, or trade your personal data. We only share your data with trusted third-party service providers (Data Processors) to execute core functionalities:

• Supabase / PostgreSQL Cloud: To host our application database under strict access control and Row Level Security (RLS).
• Zoho CRM: To record client lead cards under secure OAuth token environments.
• Resend API: To process and deliver transaction booking receipts and updates.
• Google APIs: To verify reCAPTCHA v3 bot scores.

Cross-Border Transfers: Where your data is processed or stored outside Nigeria (such as cloud hosting infrastructure), we ensure such processors maintain adequate data protection measures in compliance with Section 41 of the NDPA 2023.

6.Data Security & Retention

We implement state-of-the-art technological and organizational security policies, including end-to-end SSL encryption for data in transit, database level encryption, and service role authorization keys to prevent unauthorized access.

Retention: We retain booking and client data only as long as necessary to fulfill the purposes outlined in this policy or to comply with statutory audit guidelines under Nigerian financial and tax frameworks.

7. Your Rights under Nigerian Law

Under the NDPA 2023, you hold the following rights regarding your personal data:

• Right to Access: You can request details of the personal data we hold about you.
• Right to Rectification: You can request correction of any inaccurate or incomplete personal records.
• Right to Erasure ("Right to be Forgotten"): You can request deletion of your data when consent is withdrawn.
• Right to Object/Restrict: You can object to data processing for direct marketing or specific analytics.
• Right to Data Portability: You can request a copy of your data in a structured, machine-readable format.

To exercise any of these rights, please contact our Data Protection Coordinator at hello@indowtechnologies.com.

8. Regulatory Authority

If you believe our processing of your data violates the provisions of the Nigeria Data Protection Act 2023, you have the right to lodge a formal complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.