Privacy
Policy.

Kurindeta Ltd ("we", "us", or "our") operates the website www.kurindeta.ng and provides Business Intelligence, Data Analytics, Corporate Training, Web Development, Brand Identity, and GRC Solutions services ("Services"). This Privacy Policy describes how we collect, use, share, and protect information in relation to our website and Services.

By accessing or using our website, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you do not agree, please do not use our website or Services.

Information you provide directly:

• Name, email address, phone number, and job title submitted through our contact forms or enquiry pages.
• Company name, industry, and project details provided when requesting a quote or proposal.
• Payment and billing information processed when purchasing training courses or consulting engagements.
• Profile data created when registering for online training or accessing client portals.
• Communications, feedback, or any other content you send to us via email or forms.

Information collected automatically:

• Standard server logs (e.g., basic device connection metadata and time of request) required purely for network security, server health, and system delivery.
• We do not log personal browsing activity, construct individual user profiles, or track site usage patterns.

Information from third parties:

• Information from LinkedIn or other professional networks if you contact us through those platforms.
• Referral data from partners or event organisers who share your details with your consent.

We use personal data we collect for the following purposes:

• To respond to enquiries and provide the Services you have requested.
• To process payments and manage client accounts and engagements.
• To deliver and administer training programmes and issue certificates.
• To send service-related communications such as project updates, invoices, and support responses.
• To send marketing communications where you have given consent or where we have a legitimate interest (you can opt out at any time).
• To comply with legal obligations under Nigerian law and applicable international regulations.
• To protect the security and integrity of our systems and prevent fraud.

We process your data under the legal bases of: contract performance (when delivering Services), legitimate interests (for business operations and analytics), consent (for marketing and cookies), and legal obligation (for compliance matters).

We do not sell, rent, or trade your personal data to third parties. We may share your information only in the following circumstances:

• Service providers and subcontractors who assist us in delivering our Services (e.g., cloud hosting providers, payment processors, email platforms), subject to appropriate data processing agreements.
• Professional advisors such as lawyers, accountants, and auditors where necessary for our operations.
• Regulatory bodies, law enforcement, or government agencies where required by law, court order, or regulatory authority under the Nigeria Data Protection Act (NDPA) 2023 or other applicable laws.
• A successor entity in the event of a merger, acquisition, or sale of all or part of our business, with prior notice to you.

Any third-party service providers we engage are contractually required to keep your data confidential, process it only as instructed, and apply appropriate security measures.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and our servers.
• Restricted access to personal data on a need-to-know basis within our team.
• Regular security assessments and vulnerability reviews of our systems.
• Secure, access-controlled data storage hosted with reputable cloud providers.
• Staff training on data protection and confidentiality obligations.

While we strive to protect your data, no method of transmission over the Internet is 100% secure. We encourage you to use a strong, unique password for any accounts and to notify us immediately if you believe your data has been compromised.

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, and for up to 7 years after your last interaction with us for legal and tax compliance purposes, unless a longer retention period is required by Nigerian law.

Subject to applicable law, including the Nigeria Data Protection Act (NDPA) 2023, you have the following rights in relation to your personal data:

• Right of Access, to obtain a copy of the personal data we hold about you.
• Right to Rectification, to have inaccurate or incomplete data corrected.
• Right to Erasure, to request deletion of your data in certain circumstances.
• Right to Restrict Processing, to limit how we use your data in certain situations.
• Right to Data Portability, to receive your data in a structured, machine-readable format.
• Right to Object, to object to processing based on legitimate interests, including direct marketing.
• Right to Withdraw Consent, at any time, where processing is based on your consent.

To exercise any of these rights, please contact us using the details in the "Contact Us" section below. We will respond to your request within 30 days. We may need to verify your identity before fulfilling any request.

We do not use tracking cookies, web beacons, advertising IDs, or third-party analytics services (such as Google Analytics) on our website. We do not track your browsing activity across other websites or construct behavioural profiles.

If any strictly necessary session tokens are ever set by our web framework purely to render the page securely or maintain an active form session, they contain no tracking capability and expire automatically when you close your browser..

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. We will indicate the date of the most recent revision at the top of this page.

Where changes are material, we will notify you by email (if you have provided your address) or by posting a prominent notice on our website at least 14 days before the changes take effect. Your continued use of our website or Services after any changes constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please contact our Data Protection Officer at: