Privacy Policy
How Kingstown Technologies Ltd collects, uses and protects your personal data, and the rights you have under the Nigeria Data Protection Act 2023.
- Last updated
- 1 Oct 2026
- Data controller
- Kingstown Technologies Ltd
- Governing law
- NDPA 2023
- Regulator
- Nigeria Data Protection Commission
1.Who we are and what this covers
Kingstown Technologies Ltd (RC 0000000) is the data controller for personal data collected through this website. This policy covers visitors to our website, people who contact us or book a call, newsletter subscribers and job applicants.
When we build software for clients, we usually process data on their behalf as a data processor. That processing is covered by our contract with the client, not by this policy.
2.Data we collect
- Enquiries: your name, company, email, phone number, project details, budget range and any file you attach.
- Discovery calls: your name, email and the time you book.
- Job applications: your name, contact details, CV, portfolio links and cover note.
- Newsletter: your email address.
- Website usage: pages visited, device and browser type, approximate location and referral source, collected only with your consent.
3.Why we use it and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Replying to enquiries and preparing proposals | Steps before entering a contract |
| Scheduling and holding discovery calls | Steps before entering a contract |
| Assessing job applications | Legitimate interests |
| Sending our newsletter | Consent (you can unsubscribe at any time) |
| Website analytics | Consent (via our cookie banner) |
| Keeping records for tax and legal purposes | Legal obligation |
5.International transfers
Some providers store data outside Nigeria. Where we transfer data abroad, we rely on the safeguards permitted by the NDPA 2023, such as adequacy, contractual clauses or your consent.
6.Security and retention
We protect your data with encryption in transit, access controls and two-factor authentication on our systems. If a breach puts your rights at risk, we will notify the Nigeria Data Protection Commission within 72 hours and tell you without undue delay.
| Data | How long we keep it |
|---|---|
| Enquiries that do not become projects | 24 months after last contact |
| Client records | 6 years after the project ends (tax and legal) |
| Job applications | 12 months, unless you agree we can keep it longer |
| Newsletter | Until you unsubscribe |
| Analytics | 14 months |
7.Your rights
- Access the personal data we hold about you
- Correct data that is wrong or incomplete
- Ask us to delete your data
- Restrict or object to how we use it
- Receive your data in a portable format
- Withdraw consent at any time
How to make a request
Email privacy@kingstowntech.com. We reply within 30 days. If you are unhappy with our response, you can complain to the Nigeria Data Protection Commission.
8.Contact us
Questions about this policy or your data: privacy@kingstowntech.com, or write to Kingstown Technologies Ltd, Victoria Island, Lagos, Nigeria. General enquiries: hello@kingstowntech.com.
Have a project in mind?
Tell us what you want to build. We will come back with clear next steps, a timeline and a price range.