1. Who we are
This policy explains how AMMAZZA Integrated Services Ltd (RC-1157527) (“AMMAZZA”, “we”, “us”) collects and uses personal data. We are the data controller for the personal data described here. For any privacy question or request, email [email protected].
We process personal data in line with the Nigeria Data Protection Act 2023 (NDPA), the Nigeria Data Protection Regulation (NDPR) and guidance from the Nigeria Data Protection Commission (NDPC).
[TODO] If AMMAZZA has appointed a Data Protection Officer, add their name or role and contact details here.
2. Data we collect
- Enquiries: your name, contact details, company and the content of your message, including anything you submit through the contact form on this website.
- Job applications: your CV, contact details and any other information you choose to send us.
- Employment verification requests: details of the requesting organisation and person, the employee concerned, and the consent provided.
- Clients, suppliers and partners: business contact details, contract and invoicing information, and bank details needed for payment.
- Website visits: our hosting provider records basic technical information (such as IP address, browser type and pages requested) in server logs for security and maintenance.
3. Why we use it, and our lawful basis
We use personal data to respond to enquiries, consider job applications, answer verification requests, provide our services, manage contracts and payments, and meet our legal, tax and regulatory obligations. Depending on the purpose, we rely on one or more of these lawful bases under the NDPA: your consent; performance of a contract with you, or steps you ask us to take before entering one; compliance with a legal obligation; and our legitimate interests, where these are not overridden by your rights.
4. Contact form
When you send a message through the contact form, the details you enter (your name, email address, company if given, the topic and your message) are emailed to us by our website hosting provider. We use them only to reply to your enquiry and to keep a record of our correspondence. To limit spam, the server also keeps a scrambled (hashed) form of your connection’s IP address and the times of recent messages for a short period; it isn’t stored with your message. [TODO: name your hosting and email providers, and update this section if enquiries are also sent to a CRM.]
5. Cookies and similar technology
This website does not use advertising or analytics cookies. It stores one small value in your browser for the length of your visit so the loading screen only appears once; this is not shared with anyone. The contact form does not set cookies. [TODO: update this section if you add analytics or other tracking.]
6. Employment verification
We only share an employee’s details with a third party when the employee has consented, or where the law requires it. We share only the details the consent covers.
7. Sharing
We do not sell personal data. We share it only where necessary: with service providers who support our operations (such as email, hosting, form, payroll and accounting providers) under written terms that require them to protect it; with professional advisers; and with regulators, law enforcement or courts where the law requires.
8. International transfers
Some of our service providers may process data outside Nigeria. Where this happens, we take the steps the NDPA requires to make sure your data receives an adequate level of protection.
9. How long we keep it
We keep personal data only as long as we need it for the purpose it was collected for, and for any period the law requires, for example for tax and employment records. Unsuccessful job applications are normally deleted within twelve months unless you ask us to keep them on file. [TODO: confirm retention periods.]
10. Security
We use appropriate technical and organisational measures to protect personal data against loss, misuse, and unauthorised access or disclosure. If a breach is likely to put your rights at risk, we will notify the NDPC and, where required, you, as the NDPA requires.
11. Your rights
Under the NDPA you have the right to be informed about how we use your data; to access it; to have it corrected or deleted; to restrict or object to certain processing; to data portability; to withdraw consent at any time where we rely on consent; and not to be subject to decisions based solely on automated processing that significantly affect you. To make a request, email [email protected]. We will respond within the time the law allows.
If you are not satisfied with how we handle your data, you can complain to the Nigeria Data Protection Commission (ndpc.gov.ng).
12. Changes
We may update this policy from time to time. The date at the top of this page shows when it was last changed.