Privacy
Policy
How Acesys Solutions collects, uses, shares and protects your personal data — and how you can exercise your rights under the Nigeria Data Protection Act and other applicable privacy laws.
Acesys Solutions ("Acesys", "we", "our", "us") respects your privacy and is committed to protecting your personal data. This policy explains what information we collect when you visit our website, sign up for an account or use our products and services, how we use and share that information, and the choices and rights you have over it. It is written to align with the Nigeria Data Protection Act, 2023 (NDPA) and other applicable data protection laws such as the EU/UK GDPR.
01 Who We Are
Acesys Solutions is a Nigerian software company with its registered office at 1/3 Omoruyi Close, Awoyaya, Ibeju-Lekki, Lagos. For the purposes of applicable data-protection laws, Acesys is the data controller of the personal information you provide through our website and services. You can contact us at [email protected] for any privacy-related matter.
02 Information We Collect
We collect information in three broad ways: information you give us directly, information generated automatically when you use our services, and limited information from trusted third parties.
Information you give us
When you create an account, contact us, request a quote, subscribe to updates or place an order, you may give us your name, email address, phone number, company name, billing or postal address, and the content of any messages you send us. If you purchase from us, our payment processor collects payment information directly — we do not store full card numbers on our servers.
Information collected automatically
When you visit our website or use our products we automatically collect technical data such as your IP address, approximate location (city-level, derived from IP), device type, operating system, browser, the pages you view, referring URLs, and timestamps. This information is used to operate and secure our services, detect abuse, troubleshoot issues, and improve performance.
Information from third parties
We may receive limited information about you from third parties — for example, our payment processor confirming a successful transaction, an identity-verification provider where required by law, or analytics providers reporting on how our site is used in aggregated form.
03 How We Use Your Information
We only use your personal data for clearly defined purposes:
- To provide, maintain and improve our products and services, including processing your orders and subscriptions.
- To respond to your enquiries and provide customer support.
- To send service-related messages (security alerts, billing notices and changes to terms) and — only with your consent — marketing communications you can unsubscribe from at any time.
- To detect, prevent and respond to fraud, abuse, security incidents and other harmful or illegal activity.
- To meet our legal and regulatory obligations, including tax, accounting and law-enforcement requests.
- To understand how our website and products are used, so we can improve them.
04 Legal Basis for Processing
Where applicable data-protection law requires a legal basis to process your personal data, we rely on one or more of the following:
- Performance of a contract — to provide the products or services you have asked for.
- Consent — for marketing communications and optional cookies, which you can withdraw at any time.
- Legitimate interests — to secure our services, prevent abuse and improve our products, where those interests are not overridden by your rights.
- Legal obligation — to comply with laws, regulations and lawful requests from authorities.
05 How We Share Your Information
We do not sell or rent your personal data. We share it only in the limited circumstances described below:
- Service providers we rely on to run our business — hosting, payment processing, email delivery, customer support tools and analytics — under written agreements that require them to protect your information.
- Professional advisers such as auditors, accountants and lawyers, where engaging them requires limited access to personal data.
- Authorities, where disclosure is required by law, court order or to protect the rights, safety or property of Acesys, our users or others.
- Successors in interest in the event of a merger, acquisition, financing or sale of company assets — in which case your data will continue to be protected in line with this policy.
- With your consent, for any purpose disclosed to you at the time we ask.
06 Cookies and Similar Technologies
Cookies are small text files stored on your device when you visit a website. We use a small number of cookies in three categories:
- Strictly necessary cookies — required to keep you signed in, remember your language preference and protect against cross-site request forgery.
- Analytics cookies — only set with your consent, used to understand how our site is used so we can improve it. We use privacy-respecting analytics that do not build advertising profiles of you.
- No third-party advertising — we do not run third-party advertising or cross-site tracking cookies on our website.
You can control cookies through your browser settings (typically under "Privacy" or "Cookies"). Blocking strictly necessary cookies may break parts of the site such as sign-in. We also honour the "Global Privacy Control" and legacy "Do Not Track" signals where your browser sends them.
07 How We Protect Your Information
We take the security of your personal data seriously. We encrypt traffic to our website and apps using TLS, restrict access to personal data on a need-to-know basis with role-based controls, keep our software patched, log administrative access for review, and run regular vulnerability scans on our infrastructure. Payment details are handled by a PCI-DSS compliant payment processor; we never receive or store full card numbers on our own servers. No system is ever 100% secure — if you believe your account has been compromised, please email us immediately at [email protected].
08 Data Retention
We keep your personal data only for as long as is necessary for the purposes set out in this policy. Account information is retained for the life of your account and for a limited period afterwards to handle disputes, enforce our agreements and comply with our legal and accounting obligations. Aggregated, de-identified data may be kept indefinitely for analytics purposes. You can ask us to delete your account at any time — see "Your Rights" below.
09 Your Privacy Rights
Subject to applicable law (including the Nigeria Data Protection Act, 2023 and the EU/UK GDPR), you have the following rights regarding your personal data:
- Access — a copy of the personal data we hold about you.
- Rectification — correction of inaccurate or incomplete information.
- Erasure — deletion of your personal data where there is no overriding reason for us to keep it.
- Restriction — to limit how we process your data while a question is being resolved.
- Portability — to receive your data in a structured, machine-readable format.
- Objection — to processing based on legitimate interests, and to direct marketing at any time.
- Withdraw consent — where we rely on your consent, you can withdraw it at any time without affecting prior lawful processing.
To exercise any of these rights, email us at [email protected]. We will respond within the timelines required by applicable law. If you are not satisfied with our response, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) or your local data-protection authority.
10 International Data Transfers
Acesys is based in Nigeria, but some of the service providers we rely on (such as cloud hosting and email delivery providers) may store or process your data outside Nigeria. Where this happens, we put appropriate safeguards in place — for example, contractual clauses approved by relevant data-protection authorities — to ensure your data continues to be protected to a standard equivalent to that required by Nigerian law.
11 Children's Privacy
Our services are not directed to children under the age of 13 (or the relevant age of digital consent in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
12 Changes to This Policy
We may update this privacy policy from time to time to reflect changes to our practices or to the law. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or through a prominent notice on our website before the changes take effect.
13 Contact Us
If you have any questions about this policy or about how we handle your personal data, contact us at [email protected], or write to Acesys Solutions, 1/3 Omoruyi Close, Awoyaya, Ibeju-Lekki, Lagos, Nigeria.
