Privacy Policy

Who we are

AfriGensys Solutions Limited is a technology company incorporated in Nigeria, operating the website afrigensys.com and the digital products and services offered under it. References to "we", "us", or "our" in this policy refer to AfriGensys Solutions Limited.

We are the data controller for the personal data described in this policy, and we handle it in accordance with the Nigeria Data Protection Act 2023 (NDPA).

What information we collect

When you submit the contact form on this website, we collect:

• Your full name
• Your email address
• Your organisation, if you choose to provide it
• The subject and message you provide

We do not ask you for any other personal data. Some technical information, such as your IP address and details your browser sends, is processed automatically to deliver this website and to protect the contact form from spam; see "How your data is processed" below. For the GlobalPathway platform privacy policy, please visit globalpathway.afrigensys.com/privacy.

How we use your information

We use the information you submit solely to:

• Respond to your enquiry or message
• Follow up on any business or partnership discussions you initiate

We do not use your data for marketing, sell it to third parties, or share it with any organisation outside of what is required to operate this service.

The NDPA requires us to name the lawful basis for this. Where your enquiry is about work or a partnership you may enter into with us, handling it is a step you have asked us to take before any contract. For everything else, including general enquiries and the security checks described below, we rely on our legitimate interest in answering messages sent to us and in keeping this website and its contact form safe from abuse.

How your data is processed

This website is served through Cloudflare. As with any website, delivering a page to you means your IP address and the details your browser sends with each request (such as its type and version) pass through Cloudflare's network, which also uses them to protect the site from attacks and automated traffic. For details of Cloudflare's data practices, see their privacy policy at cloudflare.com/privacypolicy.

Contact form submissions are sent directly to an endpoint we operate ourselves, running on that same Cloudflare network. We do not use any third-party form-collection service, so your submission is never stored on an external platform.

To keep automated spam off the contact form, it uses Cloudflare Turnstile, a check that runs in your browser to tell people from bots. It loads only once you start using the form, so visitors who never use the form never load it, and it does not run at all if JavaScript is turned off. While it runs, Turnstile sends Cloudflare your IP address and technical details of your browser and connection, such as its user agent and TLS fingerprint. When you submit, our endpoint confirms the result with Cloudflare, again passing your IP address. Cloudflare processes this information on our behalf to protect the form, and on its own account to improve its bot detection; it states that the purpose is to detect and block bots, not to identify, profile or target individuals. A failed or missing check never stops your message from being delivered. For details, see Cloudflare's Turnstile privacy addendum at cloudflare.com/turnstile-privacy-policy.

Every submission is also screened automatically for spam. The few that show signs no genuine sender produces are discarded; anything else that looks like spam is still delivered to us, marked so that a person reviews it. We make no other automated decisions about you and do no profiling. If you think a message you sent did not reach us, email us directly and a person will reply.

To notify our team of a new submission we use Resend (resend.com), a transactional email provider, to deliver its contents to our business inbox. Resend acts as a data processor on our behalf solely for that email delivery. For details of Resend's data practices, see their privacy policy at resend.com/legal/privacy-policy.

We receive your submission as a standard email and store it only as long as is necessary to respond to and resolve your enquiry.

How long we keep your data

We retain contact form submissions for as long as is reasonably necessary to handle your enquiry, and no longer than 12 months after the matter is resolved, unless we are required by law to retain it for longer.

Your rights

Under Part VI of the NDPA, you have the right to:

• Find out whether we hold personal data about you, and get a copy of it
• Have inaccurate, out-of-date or incomplete data corrected
• Have your data deleted
• Have our processing of your data restricted while a request or objection is resolved
• Object to processing of your data
• Withdraw consent at any time where processing is based on consent
• Not be subject to a decision based solely on automated processing that significantly affects you

To exercise any of these rights, contact us at hello@afrigensys.com. We will respond within 30 days.

If you believe we have handled your data in breach of the NDPA, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng. We would welcome the chance to put things right first, so please tell us too.

Changes to this policy

We may update this privacy policy from time to time. The "Last updated" date at the top of this page will reflect any changes. We encourage you to review this page periodically. Continued use of this website after changes constitutes acceptance of the updated policy.

Contact

If you have any questions about this privacy policy or how we handle your data: