01
Information We Collect
We collect information you provide directly to us, information
generated when you use our services, and information from trusted
third parties.
Information you give us
- Contact details — name, email address, phone number, company name.
- Account data — login credentials, profile information, preferences.
- Business data — project briefs, files and documents you upload to our systems.
- Communications — messages, support tickets and feedback you send us.
- Payment details — billing address and payment method (card details are processed by our PCI-compliant payment provider, never stored by us).
Information collected automatically
- Device & usage — IP address, browser type, operating system, referring URL, pages viewed, time on page.
- Cookies & similar — see the Cookies section.
- Log data — server logs recording requests, errors and security events.
Information from third parties
- Authentication providers (Google, Microsoft, Facebook) when you choose to sign in with them.
- Analytics providers that give us aggregated usage insights.
- Public sources, where legally permitted.
02
How We Use Your Information
We use your information to:
- Provide, operate and improve our services and website.
- Create and manage your account and authenticate your sessions.
- Process payments and send invoices and receipts.
- Respond to your enquiries, support tickets and requests.
- Send essential service notifications (security alerts, confirmations, password resets).
- Send marketing communications — only where you have opted in, and with a one-click unsubscribe in every message.
- Detect, prevent and investigate fraud, abuse and security incidents.
- Comply with legal obligations and enforce our agreements.
- Analyse aggregated usage to improve performance and user experience.
We do not sell your personal data, and we do not
use your data to train third-party AI models without your explicit consent.
03
Legal Basis for Processing
Where data protection laws (including the GDPR and the Nigeria Data
Protection Act) apply, we rely on the following legal bases:
- Contract — to deliver the services you have engaged us for.
- Legitimate interests — to operate and secure our business, provided your rights are not overridden.
- Consent — for marketing emails and non-essential cookies. You may withdraw consent at any time.
- Legal obligation — to keep records required by tax, accounting and other laws.
04
How We Share Information
We share personal data only with:
- Service providers — hosting (Truehost), email delivery, payment processing, analytics and support tools, each bound by confidentiality and data-processing agreements.
- Professional advisers — lawyers, auditors and insurers, where necessary.
- Authorities — where required by law, court order or to protect our legal rights.
- Successors — in connection with a merger, acquisition or sale of assets, subject to the same protections.
All third-party processors are required to implement appropriate
technical and organisational safeguards and to process data only
on our documented instructions.
05
Cookies & Similar Technologies
We use cookies and similar technologies for essential functionality,
remembering preferences, security, and — where you consent — analytics
and marketing.
| Category |
Purpose |
Consent |
| Strictly necessary |
Login sessions, CSRF protection, load balancing. |
Not required |
| Preferences |
Remembering language, theme and layout choices. |
Optional |
| Analytics |
Aggregated traffic and behaviour measurement. |
Required |
| Marketing |
Measuring campaign performance, personalising messages. |
Required |
You can clear or block cookies in your browser settings at any time.
Blocking strictly necessary cookies may prevent parts of the site
from working correctly.
06
Data Retention
We keep personal data only as long as needed for the purposes described
in this policy, or as required by law:
- Account data — until your account is deleted, plus a short grace period.
- Transaction records — typically seven years to comply with tax and accounting rules.
- Support tickets — up to three years after resolution.
- Log data — up to twelve months for security and troubleshooting.
- Marketing preferences — until you unsubscribe.
07
Your Rights
Depending on where you live, you may have the right to:
Access
Request a copy of the data we hold about you.
Rectification
Correct inaccurate or incomplete data.
Erasure
Ask us to delete your data where no legal basis requires retention.
Restriction
Ask us to restrict processing while a concern is resolved.
Portability
Receive your data in a machine-readable format.
Objection
Object to processing based on legitimate interests, or to direct marketing.
To exercise any of these rights, email
privacy@zengitech.com.
We aim to respond within thirty days. You may also lodge a complaint
with your local data-protection authority.
08
How We Protect Your Data
We use layered technical and organisational safeguards, including:
- Encryption in transit (HTTPS/TLS) for all traffic to and from our services.
- Hashed and salted passwords — no plaintext credentials are ever stored.
- Role-based access controls and least-privilege permissions for staff.
- Regular security updates, vulnerability monitoring and dependency audits.
- Logging and alerting for suspicious activity, including failed login attempts.
- Backups stored separately from production systems.
09
Children's Privacy
Our services are not directed to children under 13 (or the equivalent
age in your jurisdiction), and we do not knowingly collect personal data
from them. If you believe we have, contact us and we will delete it.
10
Changes to This Policy
We may update this policy from time to time. Material changes will be
announced on this page and, where appropriate, by email. The
"Last updated" date at the top of the page reflects the most recent
revision. Continued use of our services after a change means you
accept the revised policy.
11
Contact Us
Questions about this policy or your personal data? We're happy to help.
Data controller: Zengi Technologies, Kano, Nigeria.