Privacy Policy

This Privacy Policy describes a user's privacy rights regarding our collection, use, storage, sharing, and protection of personal information.

1. Introduction

ADDA Consulting Limited ("ADDA", "we", "our" or "us") is committed to protecting the privacy and personal data of its clients, website visitors, business partners and other individuals who interact with our website, software solutions and technology services. This Privacy Policy explains how we collect, use, store, disclose and otherwise process personal data in connection with our enterprise technology solutions, including but not limited to enterprise resource planning (ERP), customer relationship management (CRM) implementation, website and software development, cybersecurity services, artificial intelligence (AI) automation, business process automation, network infrastructure, managed IT services and other related digital solutions.

We process personal data in accordance with the Nigeria Data Protection Act, 2023 (NDPA) and any other applicable data protection laws and regulations. By accessing or using our website, products or services, you acknowledge that you have read and understood this Privacy Policy.

In processing Personal Data, ADDA Consulting Limited is guided by the principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, confidentiality and accountability in accordance with applicable data protection laws.

2. Scope

This Privacy Policy applies to personal data collected through:

• the ADDA Consulting Limited website;
• software applications and digital platforms developed or operated by ADDA;
• communications with clients and prospective clients;
• business relationships with customers, vendors and partners;
• technical support and managed services;
• recruitment activities (where applicable); and
• any other products or services provided by ADDA that involve the processing of personal data.

This Privacy Policy shall apply to all users of our services unless otherwise governed by a separate written agreement. Where ADDA processes personal data solely on behalf of a client, such processing shall be carried out in accordance with the applicable contractual arrangements between ADDA and that client, together with all applicable data protection laws.

3. Categories of Personal Data We Collect

Depending on the nature of your interaction with us and the services we provide, we may collect and process the following categories of personal data:

3.1 Information You Provide to Us

• Full name;
• Email address;
• Telephone number;
• Residential or business address;
• Company name and job title;
• Login credentials (where applicable);
• Billing and payment information (where applicable); and
• Any other information voluntarily provided when you contact us or use our services.

3.2 Information Collected Automatically

When you access our website or digital platforms, we may automatically collect certain technical information, including:

• IP address;
• Browser type and version;
• Device information;
• Operating system;
• Date and time of access;
• Pages visited;
• Referral source; and
• Other website usage and analytics information.

3.3 Information Received from Third Parties

We may receive personal data from third-party service providers, business partners or clients where such disclosure is necessary for the provision of our services and is permitted by applicable law.

4. How We Collect Personal Data

We collect personal data through various means, including:

• when you visit or interact with our website;
• when you submit enquiries through our website or other communication channels;
• when you engage us to provide products or services;
• when you create an account or access any of our digital platforms (where applicable);
• during the performance of contractual obligations;
• through cookies and similar tracking technologies;
• from our business partners, service providers or clients where authorized; and
• from publicly available sources where permitted by law.

5. Purposes for Processing Personal Data

ADDA Consulting Limited processes personal data only where it is necessary for legitimate business purposes, the performance of contractual obligations, compliance with applicable legal requirements, or with the consent of the data subject where required.

Depending on the nature of your interaction with us, we may process your personal data for one or more of the following purposes:

• providing, operating, maintaining and improving our products and services;
• implementing enterprise technology, software development, digital transformation and managed IT solutions;
• creating and administering user accounts;
• verifying the identity of users and authorized representatives;
• communicating with clients regarding enquiries, projects, support requests and service updates;
• managing contractual relationships and fulfilling our contractual obligations;
• processing payments and maintaining financial records where applicable;
• monitoring, maintaining and improving the security, performance and functionality of our website, software and IT infrastructure;
• detecting, preventing and investigating fraud, cybersecurity incidents, unauthorized access and other unlawful activities;
• complying with applicable laws, regulatory obligations, court orders and lawful requests from competent authorities;
• conducting internal business administration, auditing, reporting, risk management and record keeping;
• carrying out research, analytics and service improvement initiatives; and
• any other purpose that is compatible with the purpose for which the personal data was originally collected or as otherwise permitted by applicable law.

Personal data shall not be processed for purposes that are incompatible with the purposes set out in this Privacy Policy unless required or permitted by law or with the consent of the relevant data subject.

6. Lawful Basis for Processing Personal Data

Where required under applicable data protection laws, ADDA Consulting Limited shall process personal data on one or more of the following lawful bases:

• 6.1 Consent: Where the data subject has freely given clear, informed and unambiguous consent for the processing of his or her personal data for one or more specific purposes. Where processing is based on consent, the data subject may withdraw such consent at any time, without affecting the lawfulness of any processing carried out prior to such withdrawal.
• 6.2 Performance of a Contract: Where processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to entering into such contract.
• 6.3 Compliance with a Legal Obligation: Where processing is necessary to comply with applicable legal or regulatory obligations, including obligations relating to taxation, employment, corporate governance, regulatory compliance or lawful requests from competent authorities.
• 6.4 Legitimate Interests: Where processing is necessary for the legitimate interests pursued by ADDA Consulting Limited or a third party, provided such interests are not overridden by the rights and freedoms of the data subject. Such legitimate interests may include network and information security, protecting systems and IP, product improvements, preventing fraud, and defending legal claims.
• 6.5 Other Lawful Grounds: Where otherwise permitted or required under the Nigeria Data Protection Act, 2023 or any other applicable law.

7. Disclosure of Personal Data

ADDA Consulting Limited may disclose Personal Data where such disclosure is necessary for the provision of its Services, compliance with legal obligations, the protection of its legitimate business interests, or with the consent of the relevant Data Subject.

Personal Data may be disclosed to:

• 7.1 Service Providers: Cloud hosting, IT infrastructure, cybersecurity, software support, communication, analytics, and payment processing providers.
• 7.2 Business Partners: Consultants, subcontractors and professional advisers where disclosure is necessary and proportionate.
• 7.3 Regulatory Authorities & Law Enforcement: Where disclosure is required by applicable law, regulation, court order or lawful process.
• 7.4 Consent: Where explicitly authorized. ADDA Consulting Limited does not sell Personal Data to third parties.

8. International Transfers of Personal Data

Where Personal Data is transferred outside Nigeria, ADDA Consulting Limited shall ensure that such transfer is carried out in accordance with the Nigeria Data Protection Act, 2023 and any other applicable laws, utilizing contractual safeguards, approved transfer mechanisms, or transfers to jurisdictions providing adequate data protection.

9. Data Security

ADDA Consulting Limited implements appropriate technical, organizational and administrative measures designed to protect Personal Data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access (including access controls, encryption, network security controls, and cybersecurity monitoring).

10. Data Retention

ADDA Consulting Limited shall retain Personal Data only for as long as is reasonably necessary to fulfil the purposes for which it was collected, satisfying contractual obligations and statutory retention requirements.

11. Data Subject Rights

Subject to the provisions of the Nigeria Data Protection Act, 2023, you have the following rights:

• Right of Access: Request confirmation and obtain a copy of your Personal Data.
• Right to Rectification: Request correction or update of inaccurate or incomplete data.
• Right to Erasure: Request deletion where there is no lawful basis for continued retention.
• Right to Restrict Processing: Request restriction of processing under applicable circumstances.
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Withdraw consent at any time where processing was consent-based.

12. Cookies and Similar Technologies

Our website may use cookies and similar technologies to enhance user experience, analyze website traffic, and support the security of our digital platforms. You may configure your browser to refuse or delete cookies.

13. Compliance with Applicable Data Protection Laws

ADDA Consulting Limited periodically reviews data protection practices, policies and procedures to ensure continued compliance with the Nigeria Data Protection Act, 2023 and evolving regulatory standards.

14. Changes to this Privacy Policy

We may amend or update this Privacy Policy from time to time. The updated version shall become effective on the date specified at the top of the revised version.

15. Contact Us

If you have any questions or wish to exercise your rights as a Data Subject, please contact us: