1. Introduction
At Amtel Web Design & Graphics Technology ("AmtelWeb", "we", "our"), we take your privacy seriously. This Privacy Policy explains what personal information we collect when you visit amtelweb.com, contact us, or engage our Services, how we use it, and the rights you have over it.
This Policy is drafted in line with the Nigeria Data Protection Act (NDPA) 2023, the Nigeria Data Protection Regulation (NDPR) 2019, and guidance issued by the Nigeria Data Protection Commission (NDPC). Where we serve clients or visitors outside Nigeria, we also consider relevant African data protection frameworks including the African Union Convention on Cyber Security and Personal Data Protection (the Malabo Convention, 2014) and applicable ECOWAS provisions.
2. Who We Are (Data Controller)
AmtelWeb is a company established in 2013, based in Abuja, FCT. For the purposes of this Policy we are the data controller of personal data we collect directly from you.
- Registered address: [Your registered address], Abuja, FCT
- General privacy email: privacy@amtelweb.com
- Data Protection Officer (DPO): dpo@amtelweb.com
3. What Personal Data We Collect
Depending on how you interact with us, we may collect:
Identity and contact data
- Full name, company name, job title
- Email address, phone number
- Business address
Engagement data
- Project briefs, requirements documents, feedback you share with us
- Payment records and invoicing details (but not your full card number, which is handled by our PCI-DSS-compliant payment partners)
Technical data (automatically collected on the Site)
- IP address, device type, browser, operating system
- Pages visited, time on page, referrer
- Cookie identifiers
Marketing data
- Whether you've opted in to our newsletter
- How you engage with our emails
We do not knowingly collect personal data from children under eighteen (18). If you believe a child has submitted data to us, please contact privacy@amtelweb.com and we will remove it promptly.
4. How We Collect Data
We collect data when you:
- Fill in a form on our Site (contact form, project brief, newsletter signup);
- Email, call, or message us on WhatsApp or social media;
- Sign an SOW or pay an invoice;
- Attend a training session, webinar, or event;
- Browse our Site (via cookies and analytics — see Section 9).
5. Legal Basis for Processing
Under the NDPA 2023, we process personal data only where we have a lawful basis:
- Consent — where you tick a box or otherwise opt in (for example, newsletter signup);
- Contract performance — where processing is necessary to deliver Services under an SOW;
- Legal obligation — where we must process data to comply with Nigerian tax, accounting, or regulatory requirements;
- Legitimate interest — where we have a genuine business reason (for example, fraud prevention, Site security, responding to an enquiry) and it does not override your rights and freedoms;
- Vital interest or public interest — in limited cases required by law.
6. How We Use Your Data
We use personal data to:
- Respond to enquiries and prepare proposals;
- Deliver Services you have engaged us for;
- Send invoices and receive payment;
- Communicate project updates and operational notices;
- Send marketing emails (only where you have opted in — you can unsubscribe at any time);
- Improve our Site and Services;
- Detect and prevent fraud, security incidents, or unauthorised access;
- Comply with Nigerian law.
We do not sell your personal data to anyone.
7. Who We Share Data With
We share your personal data only with parties who need it to support our Services:
- Payment processors — Paystack, Flutterwave, banks operating on NIBSS rails;
- Cloud and infrastructure providers — Google Cloud Platform, Firebase, hosting partners;
- Communications platforms — email and SMS (e.g. Termii), meeting tools;
- Professional advisers — accountants, auditors, lawyers, where legally required;
- Government and regulators — where required by law, court order, or NDPC directive.
Each of these parties is bound by contract and/or by law to protect your data.
8. International Transfers
Some of our providers store data outside Nigeria (for example in the European Union, the United States, or other African countries). When this happens, we transfer data only if:
- The destination country has been recognised by the NDPC as providing adequate protection; or
- Appropriate safeguards are in place (for example standard contractual clauses, or the provider's certification under a recognised data protection framework).
9. Cookies
Our Site uses cookies for:
- Essential functions (session, security) — always on;
- Analytics (to understand traffic patterns) — only with your consent;
- Marketing (to show relevant ads or content) — only with your consent.
You can manage cookie preferences via the banner shown on your first visit, and change them at any time from the cookie settings link in the Site footer.
10. Data Retention
We keep personal data only as long as necessary:
- Enquiries that don't result in a project — up to twelve (12) months;
- Client records and SOWs — for the duration of the engagement plus seven (7) years, to satisfy tax and accounting obligations under Nigerian law;
- Marketing contacts — until you unsubscribe, then removed within thirty (30) days;
- Website analytics — up to twenty-six (26) months.
After these periods we delete or anonymise the data.
11. Your Rights
Under the NDPA 2023 and NDPR 2019, you have the right to:
- Access the personal data we hold about you;
- Correct inaccurate or incomplete data;
- Delete your data where we no longer have a lawful basis to keep it;
- Object to processing, including direct marketing;
- Restrict processing in certain cases;
- Portability — receive your data in a structured, machine-readable format;
- Withdraw consent at any time (without affecting processing done before withdrawal);
- Lodge a complaint with the NDPC at ndpc.gov.ng.
To exercise any of these rights, email privacy@amtelweb.com. We will acknowledge within five (5) business days and respond substantively within thirty (30) days, with a one-time extension in complex cases (with notice to you).
12. How We Protect Your Data
We apply technical and organisational measures appropriate to the risk, including:
- Encryption in transit (TLS 1.2+) and at rest;
- Role-based access controls and principle of least privilege;
- Multi-factor authentication on administrative accounts;
- Regular backups and disaster recovery testing;
- Staff training on data protection;
- A documented incident response process (see our Data Protection Policy).
Despite our best efforts, no system is perfectly secure. If we become aware of a breach that is likely to affect your rights, we will notify you and the NDPC within seventy-two (72) hours as required by the NDPA 2023.
13. Automated Decisions and Profiling
We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing. Where a client engagement we support uses automated decision-making (for example, fintech credit scoring), responsibility for that processing sits with the client as the controller, and they will inform the data subjects directly.
14. Links to Other Sites
Our Site may contain links to third-party sites. We are not responsible for the privacy practices of those sites. Please review their policies before sharing any personal data.
15. Changes to this Policy
We may update this Policy as our Services evolve or the law changes. The "Last updated" date at the top shows when it was last revised. For material changes, we will notify active clients and, where appropriate, display a banner on the Site.
16. Contact Us
For any question or concern about this Policy, your personal data, or to exercise your rights:
- Email: privacy@amtelweb.com
- DPO: dpo@amtelweb.com
- Post: [Your registered address], Abuja, FCT, Nigeria
You also have the right to complain directly to the Nigeria Data Protection Commission (NDPC) — https://ndpc.gov.ng.