Plumb Technologies Ltd · PlumbIT AI

Privacy Policy

Last updated: [date]

1. Who we are

Plumb Technologies Ltd (“we”, “us”, “our”) is a company registered in Nigeria (RC 7275550). We run PlumbIT AI, a managed IT service for businesses. Our office is at 28 Shakiru Anjorin Street, Lekki Phase One, Lagos State, Nigeria.

This policy explains what personal data we collect through our website, plumbitai.com, why we collect it, and what you can do about it. We are the data controller for this information.

• Privacy contact / Data Protection Officer: privacy@plumbitai.com
• Phone: +234-7067076914

2. What we collect

(a) When you fill in our contact form

• Full name
• Business name
• Phone number
• Email address
• Company size, industry and plan of interest (if you choose them)
• Anything you write in the message box
• Your agreement to be contacted, with the date and time you sent the form
• A scrambled (hashed) version of your IP address, used only to block spam and repeated submissions. We cannot turn it back into your IP address.

(b) When you contact us on WhatsApp, by phone or by email

• Your name, phone number or email address
• The content of your messages

(c) Things we do not collect

We do not ask for payment details, ID numbers or bank details on this website. Please don't send us passwords or other sensitive information through the contact form.

Our website remembers whether you chose light or dark mode. This is stored only in your own browser and is not sent to us.

3. Why we use your data

We use your information to:

• Reply to your enquiry and book your free IT check
• Prepare a quote or proposal you asked for
• Keep a record of our conversations with you
• Improve our website and services

Our legal basis under the Nigeria Data Protection Act 2023 is:

• Your consent, which you give when you tick the box on our form. You can withdraw it at any time.
• Taking steps you asked for before entering a contract with us, such as preparing a quote.
• Our legitimate interest in running and improving our business, where this does not override your rights.

We will not sell your personal data. We will not send you marketing messages unless you agree to receive them.

4. Who we share it with

We only share your data with service providers that help us run our business, and only as much as they need:

• Website hosting: [hosting company], which runs our website and stores contact form entries in our database
• Email provider: [Google Workspace / Zoho / other]
• WhatsApp (Meta), if you message us there
• Google Fonts, which loads the fonts on our website and receives your IP address when the page loads

We may also share data if the law requires it, for example at the request of a court or regulator.

5. Transfers outside Nigeria

Some of the providers above store data outside Nigeria (for example in the United States or the European Union). When this happens, we rely on the safeguards allowed under the NDPA, such as the provider's contractual data protection commitments, and we only use providers we believe protect data properly.

6. How long we keep it

• Enquiries that don't lead to work with us: up to [24] months after our last contact, then deleted.
• If you become a client: for the length of our contract and up to [6] years after it ends, for legal, tax and accounting reasons.
• You can ask us to delete your data sooner (see section 8).

7. How we protect it

Protecting data is our job. We use access controls, strong passwords and multi-factor authentication, encrypted devices and secure providers. Only staff who need your information can see it.

If a data breach is likely to put your rights at risk, we will tell the Nigeria Data Protection Commission (NDPC) within 72 hours of becoming aware of it, and we will tell you without undue delay where the law requires it.

8. Your rights

Under the Nigeria Data Protection Act, you have the right to:

• Ask what personal data we hold about you and get a copy
• Ask us to correct data that is wrong or incomplete
• Ask us to delete your data
• Ask us to limit how we use your data
• Object to how we use your data
• Ask for your data in a format you can move to another provider
• Withdraw your consent at any time (this doesn't affect anything we did before you withdrew it)

To use any of these rights, email privacy@plumbitai.com. We will reply within [30] days. We may need to confirm your identity first.

If you are not happy with how we handled your data, you can complain to the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.

9. Children

Our services are for businesses. We do not knowingly collect personal data from anyone under 18.

10. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top.

11. Contact us