Effective Date: 19th October 2026
Techtonik Global Solutions Limited (“Techtonik”, “we”, “us” or “our”) is an information technology services company providing software development, cloud computing and infrastructure solutions, cybersecurity, network security, managed IT services, data protection and backup solutions, IT consulting, system integration and digital transformation services.
1.2 This Privacy Policy explains how we collect, use, store, disclose and otherwise process personal data when you visit our website at https://techtonikgsl.com (the “Website”), communicate with us, make enquiries, request our services, engage us as a client, or otherwise interact with our business.
1.3 We recognise the importance of protecting personal data and respecting the privacy rights of individuals. We process personal data in accordance with the Nigeria Data Protection Act 2023 (“NDPA”), applicable subsidiary legislation and directives, and other applicable data protection laws.
1.4 This Policy applies to website visitors, prospective and existing clients, business representatives, suppliers, service providers, job applicants and other individuals whose personal data we process in connection with our business activities.
Depending on the nature of your interaction with us, we may collect the following categories of personal data:
2.1 Identification and Contact Information
This may include your name, email address, telephone number, business address, organisation, job title and other contact details you provide to us.
2.2 Enquiry and Communication Information
When you contact us, request a consultation, submit an enquiry or communicate with our team, we may collect the information contained in your message, the nature of your enquiry, your service requirements, correspondence records and other information reasonably necessary to respond to you.
2.3 Client and Business Information
Where you engage our services, we may process information relating to your organisation, authorised representatives, contractual arrangements, project requirements, service delivery, billing, payment records and business communications.
2.4 Technical and Website Usage Information
When you visit our Website, certain technical information may be collected automatically by the Website or its hosting and security infrastructure. Depending on the technologies deployed, this may include your Internet Protocol (IP) address, browser type, device information, operating system, referring website, pages visited, access times, approximate location derived from technical information and website interaction data.
2.5 Technical Information Processed in Providing IT Services
Where we provide IT, software, cloud, cybersecurity, data protection, backup or managed infrastructure services, we may process technical information, system logs, account identifiers, access records, configuration data and other information necessary to provide the contracted services.
Where such information contains personal data belonging to our clients, their employees, customers or other individuals, we process it in accordance with the applicable service agreement, documented instructions and relevant data protection obligations.
2.6 Recruitment Information
Where recruitment is undertaken, we may collect information contained in applications, curricula vitae, professional profiles, qualifications, employment histories, references and communications relating to recruitment.
2.7 Other Information
We may process additional personal data that you voluntarily provide or that is lawfully obtained from relevant sources where necessary for a specified and legitimate business purpose.
We do not intentionally collect more personal data than is reasonably necessary for the purposes for which it is processed.
We may obtain personal data:
We may process personal data for the following purposes:
We will not process personal data for an incompatible purpose without an applicable lawful basis and any information, notice or consent required by law.
We process personal data only where a lawful basis exists under applicable data protection law. Depending on the circumstances, our lawful bases may include:
5.1 Consent
We may rely on your consent where you have freely and validly agreed to a specified processing activity, including where consent is required for particular marketing communications or non-essential tracking technologies.
You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
5.2 Contractual Necessity
We may process personal data where necessary to take steps at your request before entering into a contract or to perform a contract to which you are a party.
5.3 Legal Obligation
We may process personal data where necessary to comply with applicable statutory, regulatory or other legal obligations.
5.4 Legitimate Interests
We may process personal data where necessary for our legitimate interests or those of a third party, provided that such interests are not overridden by your fundamental rights and freedoms.
These interests may include securing our systems, managing client relationships, preventing fraud, maintaining business records and improving our services.
5.5 Vital Interests and Other Lawful Grounds
Where applicable, we may rely on other lawful bases recognised by the NDPA, including the protection of vital interests or the performance of a task carried out in the public interest or in the exercise of official authority, where the relevant legal requirements are satisfied.
Where processing is based on consent, you may refuse to provide consent without affecting processing carried out on another lawful basis, where applicable.
Our Website or the third-party technologies integrated into it may use cookies and similar technologies to support website functionality, remember preferences, maintain security, analyse website usage or provide other website-related features.
Cookies are small text files stored on a device when a website is accessed. Similar technologies may include tracking pixels, tags, scripts and local storage mechanisms.
Depending on the technologies used, cookies may be categorised as follows:
Strictly necessary technologies may be used where required for the operation and security of the Website. Where consent is required for non-essential cookies or similar technologies, we will seek that consent before activating them.
You may be able to manage cookies through the settings available on the Website or your browser. Disabling certain cookies may affect website functionality.
The specific cookies and similar technologies used may vary according to the Website’s configuration and any third-party services integrated into it.
We do not sell personal data to third parties.
We may disclose personal data where necessary, lawful and proportionate to the following categories of recipients:
7.1 Technology and Infrastructure Providers
These may include website hosting providers, cloud service providers, data storage providers, software vendors, cybersecurity providers, backup and disaster recovery providers, IT support providers and other technical service providers.
7.2 Professional Advisers
We may disclose relevant information to legal practitioners, accountants, auditors, insurers, consultants and other professional advisers where reasonably necessary.
7.3 Business Partners and Contractors
We may share relevant information with contractors, consultants, subcontractors and business partners involved in delivering services or performing specific business functions, subject to appropriate confidentiality and data protection obligations.
7.4 Clients and Authorised Representatives
Where necessary for service delivery, we may disclose relevant information to clients, their authorised representatives or other persons involved in a project or contractual arrangement.
7.5 Government Authorities and Regulators
We may disclose personal data where required by law, a valid court order, a lawful regulatory request or another legally recognised obligation.
7.6 Corporate Transactions
Where necessary and lawful, personal data may be disclosed in connection with a merger, acquisition, restructuring, financing, sale of assets or similar corporate transaction, subject to applicable confidentiality and data protection requirements.
We take reasonable steps to ensure that recipients process personal data only for appropriate purposes and maintain safeguards consistent with applicable law.
In providing technology services, we may use service providers, cloud infrastructure or other technical resources located outside Nigeria. As a result, personal data may be transferred to or accessed from another country where this is necessary for the relevant processing activity.
Any transfer of personal data outside Nigeria will be undertaken in accordance with the NDPA and other applicable legal requirements, including the requirements governing international transfers of personal data.
Where required, we will ensure that an appropriate transfer mechanism or safeguard is in place and that the rights of affected data subjects are adequately protected.
9.1 We retain personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, including the provision of services, management of business relationships, compliance with legal obligations, dispute resolution and the establishment or defence of legal claims.
9.2 The applicable retention period depends on the nature of the information, the purpose of processing, the duration of the relevant relationship, applicable contractual obligations and statutory or regulatory requirements.
9.3 Technical logs, security records, enquiry records, client information, contractual documents, recruitment records and financial records may be retained for different periods according to their respective purposes and applicable requirements.
When personal data is no longer required, we will take reasonable steps to securely delete, destroy or anonymise it, subject to lawful retention obligations and legitimate grounds for continued storage.
We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, unlawful processing, accidental loss, destruction, alteration, disclosure or damage.
Depending on the nature of the information and the risks involved, these measures may include access controls, authentication mechanisms, encryption where appropriate, system monitoring, secure backups, security testing, confidentiality obligations and measures designed to maintain the integrity and availability of information systems.
We periodically review security measures in light of technological developments, identified risks and applicable legal requirements.
However, no method of transmitting information over the internet or storing information electronically can be guaranteed to be completely secure.
Where a personal data breach occurs, we will assess and respond to it in accordance with applicable legal requirements, including any applicable notification obligations.
Subject to the conditions, exceptions and limitations provided under applicable law, you may exercise the following rights in relation to your personal data:
11.1 Right to Be Informed
You have the right to receive information about how your personal data is collected and processed.
11.2 Right of Access
You may request confirmation as to whether we process your personal data and, where applicable, request access to that data and relevant information concerning its processing.
11.3 Right to Rectification
You may request the correction of inaccurate personal data or the completion of incomplete personal data.
11.4 Right to Erasure
You may request the deletion of personal data in circumstances provided by applicable law.
11.5 Right to Restriction of Processing
You may request the restriction of processing where the applicable legal conditions are satisfied.
11.6 Right to Object
You may object to certain processing activities, including processing based on legitimate interests or processing for direct marketing, subject to applicable law.
11.7 Right to Data Portability
Where the statutory requirements are satisfied, you may request to receive personal data you have provided to us in a structured, commonly used and machine-readable format, or request its transmission to another controller where technically feasible.
11.8 Right to Withdraw Consent
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing conducted before withdrawal.
11.9 Rights Relating to Automated Decision-Making
Where applicable, you have rights in relation to decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you, subject to the conditions and exceptions provided by law.
11.10 Right to Lodge a Complaint
You may lodge a complaint with the Nigeria Data Protection Commission or another competent supervisory authority where you believe that your personal data has been processed in violation of applicable data protection law.
These rights are not absolute. We may be entitled or required to retain or process certain personal data where an applicable legal exception, obligation or other lawful basis permits it.
To exercise your data protection rights or make a privacy-related enquiry, you may contact us using the contact details provided on the website.
We may request information reasonably necessary to verify your identity or authority before acting on a request, particularly where disclosure could affect the rights and freedoms of another person.
We will respond to valid requests within the timeframes prescribed by applicable law. Where a request cannot be fully granted, we will communicate the applicable reasons to the extent required by law.
Where permitted by law, we may decline or charge a reasonable fee for manifestly unfounded or excessive requests, subject to the relevant statutory requirements.
Our Website and business services are primarily directed at businesses, institutions and adult users. We do not knowingly collect personal data from children except where such collection is lawful, necessary for a specified purpose and supported by the applicable legal requirements.
Where we become aware that personal data has been collected from a child in circumstances that violate applicable law, we will take appropriate steps to address the matter, including deletion where legally appropriate.
Where the processing of a child’s personal data requires parental or legal guardian consent, we will comply with the applicable consent and verification requirements.
Our Website may contain links to third-party websites, social media platforms or other external services. We may also use third-party tools or embedded features in connection with website functionality or business communications.
These third parties may collect or process personal data under their own privacy policies and terms.
We do not control the privacy practices of third-party websites or services that we do not operate. Your interaction with those services is subject to their applicable privacy notices and terms.
We may use your contact details to communicate with you about enquiries, proposals, services, project updates, support matters and other communications connected with an existing or prospective business relationship.
Where permitted by law, we may also send information about our services, technology solutions, events, updates or other business offerings.
Where consent is required for direct marketing, we will obtain that consent before sending the relevant communications.
You may opt out of marketing communications at any time by following the unsubscribe instructions provided in the communication or contacting us directly. Opting out of marketing communications will not prevent us from sending essential service-related, contractual, security or legally required communications.
In the course of providing IT, software, cloud, cybersecurity, backup, managed infrastructure and related services, we may have access to information belonging to our clients or processed through their systems.
We treat such information in accordance with applicable contractual obligations, confidentiality requirements, documented client instructions and relevant data protection laws.
Depending on the nature of a service, Techtonik may act as a data controller, a data processor or another legally recognised role under applicable data protection law.
Where we process personal data on behalf of a client as a data processor, the relevant processing will be governed by the applicable service agreement, data processing terms and lawful instructions of the client, subject to our obligations under applicable law.
Clients remain responsible for determining the purposes and lawful basis of processing for which they act as controllers, where applicable. Techtonik will fulfil the obligations applicable to its role in the relevant processing activity.
Where you provide us with personal data relating to employees, customers, contractors, representatives or other individuals, you must have the appropriate authority or lawful basis to provide that information.
We will process such personal data for the purposes for which it was lawfully provided, subject to applicable contractual arrangements and data protection requirements.
We may update this Privacy Policy from time to time to reflect changes in applicable law, our services, the Website, technology, business operations or personal data processing practices.
Where required by law, we will provide notice of material changes or take other appropriate steps to inform affected individuals.
The effective date stated at the beginning of this Policy indicates when the current version takes effect. The updated Policy will be published on our Website.
For questions, requests or complaints relating to this Privacy Policy or the processing of your personal data, you may use the contact details on the website.
Privacy-related enquiries may be submitted through the contact details above and will be handled in accordance with applicable data protection requirements.
