Effective Date: 1 August 2025

Last Updated: 31 August 2026

BarupTech Solutions Ltd (“BarupTech”, “we”, “us”, or “our”) is committed to protecting the privacy and personal data of all individuals who interact with us. This Privacy Policy explains how we collect, use, store, share and protect your personal data in accordance with the Nigeria Data Protection Act, 2023 (NDPA) and other applicable laws.

By using our website (https://baruptech.com.ng), services, or contacting us, you acknowledge that you have read and understood this Privacy Policy.

1. Who We Are (Data Controller)

BarupTech Solutions Ltd is the Data Controller responsible for your personal data.

2. Personal Data We Collect

We may collect the following categories of personal data:

  • Identity Data: Full name, company name, job title
  • Contact Data: Email address, phone number, physical address
  • Technical Data: IP address, browser type, device information, operating system
  • Usage Data: Pages visited, time spent on pages, referring URLs
  • Communication Data: Messages you send us via contact forms, email, or WhatsApp
  • Project/Business Data: Information you provide when requesting quotes or services
  • Marketing Data: Preferences regarding receiving marketing communications

We do not intentionally collect sensitive personal data (such as health, biometric, religious or political data) unless you voluntarily provide it and we have a lawful basis to process it.

3. How We Collect Your Data

  • Directly from you (contact forms, quote requests, emails, phone calls, WhatsApp)
  • Automatically when you visit our website (cookies and similar technologies)
  • From third parties (e.g. analytics providers) where permitted by law

4. Lawful Bases and Purposes of Processing

Under the NDPA 2023, we process your personal data only when we have a lawful basis. The main bases we rely on are:

Purpose Lawful Basis
Responding to enquiries and providing quotes Performance of a contract / Steps prior to entering a contract
Delivering our services and managing projects Performance of a contract
Sending service-related communications Performance of a contract / Legitimate interest
Improving our website and services Legitimate interest
Marketing communications (newsletters, offers) Consent (you can withdraw at any time)
Complying with legal obligations Legal obligation
Preventing fraud and securing our systems Legitimate interest

5. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve functionality, analyse traffic, and enhance user experience. Essential cookies are necessary for the website to function. Non-essential cookies (analytics/marketing) will only be used with your consent where required.

You can manage or disable cookies through your browser settings. Note that disabling some cookies may affect website functionality.

6. Sharing Your Personal Data

We do not sell your personal data. We may share your data with:

  • Service providers who help us operate our business (hosting, email, analytics, payment processors) under strict data processing agreements
  • Professional advisers (lawyers, accountants) where necessary
  • Regulatory authorities or law enforcement when required by law
  • Third parties in the event of a business transfer (merger, acquisition), subject to appropriate safeguards

7. International Transfers of Personal Data

Some of our service providers may be located outside Nigeria. Where we transfer personal data outside Nigeria, we ensure appropriate safeguards are in place in accordance with the NDPA, such as contractual clauses or transfers to countries with adequate data protection standards.

8. How Long We Keep Your Data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

  • Contact and enquiry data: up to 3 years after last contact (unless a longer period is required for legal claims)
  • Client project data: for the duration of the project plus a reasonable period thereafter (usually 5–7 years for legal and accounting purposes)
  • Marketing data: until you withdraw consent or unsubscribe
  • Website logs and technical data: typically 12–24 months

When data is no longer needed, we securely delete or anonymise it.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include encryption, access controls, secure hosting, regular security assessments, and staff training.

While we take reasonable steps to protect your data, no method of transmission over the internet is 100% secure. You share information with us at your own risk.

10. Your Rights Under the NDPA 2023

As a data subject, you have the following rights:

  • Right to be informed – to know how your data is being processed
  • Right of access – to request a copy of the personal data we hold about you
  • Right to rectification – to correct inaccurate or incomplete data
  • Right to erasure – to request deletion of your data in certain circumstances
  • Right to restrict processing – to limit how we use your data
  • Right to object – to object to processing based on legitimate interests or for direct marketing
  • Right to withdraw consent – where processing is based on consent
  • Right to data portability – to receive your data in a structured, commonly used format (where applicable)
  • Right to lodge a complaint – with the Nigeria Data Protection Commission (NDPC)

To exercise any of these rights, please contact us at baruptechsolution@gmail.com. We will respond without undue delay and in any event within the timelines required by law.

11. Children’s Privacy

Our services are not directed at children under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

12. Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to read their privacy policies.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised “Last Updated” date. We encourage you to review this page periodically.

14. How to Lodge a Complaint

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC):

15. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

Important: This Privacy Policy is provided for informational and compliance purposes. It does not constitute legal advice. For specific legal guidance regarding your obligations under the NDPA 2023, please consult a qualified legal practitioner.