Privacy Policy

Last updated: [date]

Draft structure. Have a Nigerian lawyer review this policy before publishing.

Who we are

InfoSec.ng ([legal entity name and address]) is the data controller for personal data collected on this website.

What we collect

Newsletter: your email address and, if you give it, your first name. Forms: what you choose to tell us. Analytics: anonymised usage data, only if you accept analytics cookies.

Why we use it

Your consent for the newsletter and analytics cookies, and our legitimate interest in replying to your messages. [Confirm the lawful bases with your lawyer.]

How long we keep it

[Set a retention period for each type of data.]

Who we share it with

Our email provider ([MailerLite or Kit]) and our hosting provider ([hosting provider]). We never sell your data.

Transfers outside Nigeria

Some of our providers store data outside Nigeria. [Describe the safeguards the NDPA requires.]

Your rights

You can ask to access, correct or delete your data, withdraw your consent, or object to how we use it. Email [privacy@infosec.ng].

Complaints

If you are unhappy with how we handle your data, you can complain to the Nigeria Data Protection Commission (NDPC).