Effective Date: 11 November 2025
01. Introduction & Scope
This Privacy Policy explains how Ascenvatra (referred to as "The Company," "We," "Us," or "Our"), a provider of advanced Software Crafting and IT Solutions (including Web Development, AI, Automation, and IT Consultancy), collects, uses, protects, and discloses your Personal Data.
This policy applies to all visitors, clients, and users of our website [Your Website URL] and our services. We are committed to protecting your privacy in compliance with the Nigeria Data Protection Act (NDPA) 2023 and other applicable laws.
02. Personal Data We Collect
We only collect Personal Data that is adequate, relevant, and limited to what is necessary for the specified purposes.
Category of Data Examples of Data Collected Source of Collection A. Contact/Client Data Name, email address, phone number, company name, job title. Directly from you via our Contact Us form, consultation requests, or service agreements. B. Technical Usage Data IP address, browser type, operating system, pages visited, time spent on the site, and referrer URL. Automatically via cookies, Google Analytics, and server logs. C. Financial Data Payment status, billing address, and invoice details. Directly from you (for billing purposes only, we do not store full payment card details). D. Project Data Project requirements, functional specifications, and initial creative assets. Directly from you when you engage us for development or consultancy.
03. Legal Basis and Purpose of Processing
Under the NDPA, we must have a lawful basis to process your Personal Data.
Lawful Basis Purpose of Processing Data Used Performance of a Contract To deliver the specific Web Development, Mobile Apps, or IT Consultancy services you have hired us for. Categories A, C, D Consent To send you marketing, newsletters, or company updates. Categories A Legitimate Interest To improve our website, services, and user experience (e.g., analyzing website traffic to fix bugs). Categories B Legal Obligation To comply with tax laws or regulatory requirements in Nigeria. Categories A, C
Note on Consent: Where processing is based on consent, your consent is freely given, specific, informed, and unambiguous. You have the right to withdraw your consent at any time by contacting us.
04. Data Subject Rights (Your Rights)
As a Data Subject under the NDPA, you have the following rights regarding your Personal Data:
- Right to Be Informed: The right to know how your data is being processed (covered by this policy).
- Right of Access: The right to request a copy of the Personal Data we hold about you.
- Right to Rectification: The right to request correction of inaccurate or incomplete Personal Data.
- Right to Erasure (Right to be Forgotten): The right to request the deletion of your Personal Data when it is no longer necessary for the purpose for which it was collected.
- Right to Object: The right to object to the processing of your data, particularly for direct marketing.
- Right to Restriction of Processing: The right to request that we limit the way we use your data.
- Right to Data Portability: The right to receive your data in a structured, commonly used, and machine-readable format.
To exercise any of these rights, please contact our Data Protection Contact Person (Section 7).
05. Data Security and Retention
- Security Measures: We implement appropriate technical and organizational measures to prevent unauthorized access, accidental loss, destruction, or damage to your Personal Data. This includes data encryption, secure access controls, and regular review of our security practices.
- Data Retention: We will retain your Personal Data only for as long as is necessary to fulfill the purposes outlined in this policy, or as required by Nigerian law (e.g., tax records). Once the data is no longer needed, it will be securely deleted or anonymized.
06. Sharing Your Personal Data (Third Parties)
We will not sell or lease your Personal Data to third parties. We only share your data in the following limited circumstances:
- Service Providers: We use third-party tools to operate our business (e.g., website hosting, email service providers, analytics platforms like Google Analytics). These parties are bound by confidentiality agreements and are restricted from using your data for any purpose other than providing services to Ascenvatra.
- Legal Compliance: If required to do so by Nigerian law, legal proceedings, or a governmental request (e.g., by the Nigeria Data Protection Commission (NDPC)).
- Client Project Scope: In the course of a project, we may share client-provided information with subcontractors (developers, designers) who are under strict confidentiality agreements for the purpose of fulfilling the service contract (Category D).
07. Data Protection Contact Person
If you have any questions about this Privacy Policy, your rights, or how we process your Personal Data, please contact the person responsible for data protection at Ascenvatra:
- Name: Tomi Adeyeye, Data Protection Contact
- Email: privacy@ascenvatra.com
- Address: 41 Omoniyi Estate, Akure, Ondo State
08. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new policy on this page and updating the Effective Date at the top.