Privacy at a glance
- We collect the information you give us (for example through our consultation form, live chat, course enrolment or checkout) and limited technical data when you use our website.
- We use it to respond to you, deliver our consultancy and training services, process payments, keep our website secure and, where you agree, to send marketing and measure our advertising.
- We never sell your personal data.
- We process personal data in line with the Nigeria Data Protection Act 2023 (NDPA) and, where it applies to you, the EU/UK General Data Protection Regulation (GDPR).
- You can access, correct or delete your data, object to processing and withdraw consent at any time by emailing datafied@datafiedtech.com.
01Who we are
This website, datafiedtech.com, is operated by Datafied Technologies (Datafied Technologies Limited; RC: 7022749), a data and AI company registered in Nigeria with its registered office at 12 Ebitu Ukiwe Street, Jabi, Abuja ("Datafied", "we", "us" or "our").
We operate two business arms:
- Datafied Consultancy, which delivers data strategy, data engineering, business intelligence, AI and automation services to organisations; and
- Datafied Academy, which provides data and AI training courses to individuals and teams.
For the purposes of the NDPA (and the GDPR where applicable), Datafied is the data controller of the personal data described in this policy, except where we process data on behalf of our clients as explained in Section 14.
02Scope of this policy
This policy applies to personal data we process when you:
- visit or browse datafiedtech.com, including the Datafied Academy pages;
- submit our consultation form, book an appointment, use our live chat, or contact us by email, phone or social media;
- create an account, enrol in a course, make a purchase, leave a review or earn a certificate with Datafied Academy;
- join our affiliate programme or subscribe to our newsletter;
- are a client, prospective client, supplier or partner of Datafied, or a representative of one; or
- attend our training sessions, workshops, webinars or events.
This policy does not cover personal data contained in datasets that our clients provide to us for consultancy projects. That data is handled under our client agreements (see Section 14).
03Personal data we collect
3.1Information you give us
| Source | Personal data |
|---|---|
| Consultation form and enquiries | Full name, work email address, phone number, company name, the service you are interested in, and the details you share about your project. |
| Appointment bookings | Name, email address, phone number, preferred date and time, and any notes you add to the booking. |
| Live chat | Name and email address (if provided), the content of the conversation and the time it took place. |
| Academy account and courses | Name, email address, username, password (stored in encrypted form), profile details, course enrolments, lesson progress, quiz and assignment results, certificates issued, and reviews you post. |
| Purchases and payments | Name, email address, billing address, phone number, order details, and transaction records. Card and wallet details are entered directly with our payment processors (Stripe or PayPal); we do not see or store your full card number. |
| Affiliate programme | Name, email address, payout details, referral links, and the referrals and commissions attributed to you. |
| Newsletter | Email address and, where provided, your name and subscription preferences. |
| Client engagements | Business contact details of your staff, contract and billing information, meeting notes, and the correspondence needed to deliver our services. |
| Job applications | CV, cover letter, contact details, qualifications, employment history and any other information you choose to send us. |
3.2Information collected automatically
When you visit our website we, and the service providers described in Section 6, automatically collect:
- your IP address and approximate location derived from it (country or city level);
- browser type and version, device type, operating system and screen size;
- pages visited, links clicked, time spent on pages, referring website and the date and time of your visit; and
- identifiers stored in cookies and similar technologies.
3.3Information from third parties
We may receive personal data about you from:
- payment processors, which confirm whether a payment succeeded;
- analytics and advertising partners (such as Google and Meta), in aggregated or pseudonymised form;
- a colleague or partner who refers you to us; and
- publicly available professional sources, such as your company website or LinkedIn profile, when we research a business enquiry.
3.4Sensitive personal data
We do not intentionally collect sensitive personal data (such as health information, religious or political beliefs, biometric data or details of criminal records) through our website. Please do not include such information in forms, chats or messages. If you do, we will only use it where necessary to respond to you, and we will delete it when it is no longer needed.
04How we use your personal data
We use your personal data to:
- Respond to enquiries – reply to consultation requests, chats, emails and calls, and schedule meetings you request.
- Deliver our services – prepare proposals, enter into and perform consultancy contracts, and deliver training.
- Run Datafied Academy – create and manage your account, give you access to courses, track progress, issue certificates and provide learner support.
- Process payments – take payment, issue receipts and invoices, handle refunds and prevent payment fraud.
- Manage our affiliate programme – track referrals and pay commissions.
- Communicate with you – send service messages such as booking confirmations, receipts, course updates and changes to our terms.
- Marketing – send newsletters and offers where you have agreed or where the law allows (see Section 12).
- Measure and improve – understand how our website is used, measure the effectiveness of our advertising and improve our content and services.
- Keep things secure – protect our website against spam, bots, fraud and attacks, including through reCAPTCHA and Cloudflare.
- Recruit – assess job applications.
- Meet legal obligations – keep accounting and tax records, respond to lawful requests from authorities, and establish, exercise or defend legal claims.
We do not use your personal data to make decisions based solely on automated processing that produce legal or similarly significant effects on you.
05Legal bases for processing
We only process personal data where we have a lawful basis under the NDPA (and the GDPR where applicable):
| Purpose | Lawful basis |
|---|---|
| Responding to enquiries and booking consultations | Taking steps at your request before entering into a contract; our legitimate interest in responding to business enquiries. |
| Delivering consultancy services and Academy courses; processing payments | Performance of a contract with you (or with the organisation you represent). |
| Accounting, tax and responding to authorities | Compliance with a legal obligation. |
| Website security, fraud and spam prevention | Our legitimate interest in keeping our website and users safe. |
| Analytics and advertising cookies (Google Analytics, Meta Pixel) | Your consent, which you may withdraw at any time. |
| Newsletters and marketing emails | Your consent; or, for existing clients and learners, our legitimate interest in telling you about similar services (you can opt out at any time). |
| Improving our services and content | Our legitimate interest in developing our business. |
| Recruitment | Taking steps at your request before entering into an employment contract; our legitimate interest in hiring. |
Where we rely on legitimate interests, we have balanced those interests against your rights and freedoms. You can ask us for more information about this assessment, and you have the right to object (see Section 11).
08International data transfers
Some of our service providers, including Google, Meta, Cloudflare, Stripe and PayPal, store or process data on servers outside Nigeria, including in the United States and the European Union.
When we transfer personal data outside Nigeria, we do so in line with the cross-border transfer requirements of the NDPA. That means relying on one or more of the following:
- the recipient country having adequate data protection laws;
- appropriate safeguards such as standard contractual clauses or binding corporate rules adopted by our providers;
- the transfer being necessary to perform a contract with you or at your request; or
- your explicit consent, after being informed of the possible risks.
You can contact us for more information about the safeguards we use.
09How long we keep your data
We keep personal data only for as long as necessary for the purposes described in this policy, including to meet legal, accounting and reporting requirements:
| Data | Retention period |
|---|---|
| Enquiries and chats that do not lead to an engagement | Up to 24 months from our last contact with you. |
| Client contracts, project correspondence and invoices | For the duration of the relationship and up to 6 years afterwards, to meet tax, accounting and limitation-period requirements. |
| Academy accounts, progress and certificates | While your account is active. Certificate records are kept so that certificates can be verified, unless you ask us to delete them. |
| Order and payment records | Up to 6 years after the transaction. |
| Newsletter subscriptions | Until you unsubscribe. We keep a record of your opt-out so we do not contact you again. |
| Job applications | Up to 12 months after the recruitment process ends, unless you are hired or agree to us keeping your details longer. |
| Analytics and advertising data | As set by the provider (Google Analytics data is retained for up to 14 months). |
When data is no longer needed, we securely delete or anonymise it.
10How we protect your data
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration, including:
- encryption of data in transit using HTTPS/TLS;
- two-step verification and strong passwords on our business accounts;
- access to personal data restricted to staff and contractors who need it, under confidentiality obligations;
- regular software updates, security monitoring and firewall protection through Cloudflare; and
- careful selection of service providers with strong security practices.
No method of transmission or storage is completely secure. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the Nigeria Data Protection Commission within 72 hours of becoming aware of it, where required, and inform you without undue delay where the breach is likely to result in a high risk to you.
11Your rights
Under the NDPA (and the GDPR where applicable), you have the right to:
- Be informed about how your personal data is used, which is the purpose of this policy;
- Access your personal data and receive a copy of it;
- Rectification – have inaccurate or incomplete data corrected;
- Erasure – ask us to delete your data where there is no good reason for us to keep it;
- Restriction – ask us to limit how we use your data in certain circumstances;
- Object to processing based on our legitimate interests, and to direct marketing at any time;
- Data portability – receive data you provided to us in a structured, commonly used, machine-readable format, or have it sent to another organisation;
- Withdraw consent at any time, without affecting the lawfulness of processing carried out before you withdrew it;
- Not be subject to a decision based solely on automated processing that produces legal or similarly significant effects on you; and
- Lodge a complaint with the Nigeria Data Protection Commission (see Section 17).
How to exercise your rights
Email datafied@datafiedtech.com with the subject line "Data Protection Request". Academy learners can also update most account details directly from their profile.
We may need to verify your identity before acting on your request. We will respond without undue delay and within the time required by law, normally within 30 days. Exercising your rights is free of charge, unless a request is manifestly unfounded or excessive.
12Marketing communications
We send marketing emails, such as newsletters, course launches and offers, only where you have subscribed or agreed to receive them. If you are an existing client or learner, we may also tell you about similar services, unless you opt out.
You can unsubscribe at any time using the link in any marketing email, or by emailing us. Unsubscribing does not stop service messages such as receipts, booking confirmations or important updates about your account or engagement.
13Children's privacy
Our consultancy services are intended for businesses and adults. Datafied Academy accounts are intended for learners aged 18 and over. A learner under 18 may only enrol with the consent and supervision of a parent or guardian, who must complete the enrolment and accept responsibility for the learner's use of the platform.
We do not knowingly collect personal data from children without appropriate consent. If you believe a child has provided us with personal data without that consent, please contact us and we will delete it.
14Client data we process on your behalf
As part of our consultancy work, clients may give us access to databases, spreadsheets, CRM systems or other datasets that contain personal data about their customers, employees or other individuals. In these cases:
- the client is the data controller and Datafied acts as a data processor;
- we process that data only on the client's documented instructions and for the purposes of the engagement, under a written agreement that includes data protection terms;
- we keep the data confidential, apply appropriate security measures and limit access to the project team;
- we do not use client data to train AI models for other clients or for our own purposes; and
- at the end of the engagement we return or securely delete the data, as agreed with the client.
If you are an individual whose data is held by one of our clients, please contact that organisation directly to exercise your rights. We will support our clients in responding to such requests.
15Third-party links
Our website contains links to third-party websites and services, such as LinkedIn, X (Twitter), Instagram, YouTube and our payment providers. We are not responsible for the privacy practices of these third parties, and we encourage you to read their privacy policies.
16Changes to this policy
We may update this policy from time to time to reflect changes in our services, technology or legal requirements. The "Last updated" date at the top shows when it was last revised. If we make material changes, we will let you know by posting a notice on our website or, where appropriate, by email.
17Contact us and complaints
If you have any questions about this policy or how we handle your personal data, please contact us:
If you are not satisfied with our response, you have the right to complain to the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng. If you are in the European Union or United Kingdom, you may also complain to your local data protection authority.
Please also read our Terms of Service.
