Privacy Policy
Last updated: April 6, 2026. This policy explains how Vitek Web Solutions (“we”, “us”, “our”) handles personal data when you visit our website, communicate with us, or use our professional services. We respect your privacy and process data in line with applicable data protection laws, including the Nigeria Data Protection Act (NDPA) 2023 where it applies, and general principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.
1. Data controller
For the purposes described here, the data controller is Vitek Web Solutions. You can reach us at [email protected] or through our contact page.
2. What data we collect
Website and enquiries. When you submit a contact form, email us, or book a call, we typically collect your name, email address, phone number (if provided), company name, and the content of your message. We may also collect technical data such as IP address, browser type, device type, and approximate location derived from IP, through server logs or analytics tools.
Client engagements. If you become a client, we may process billing details, contract signatories, project contacts, credentials you share for integrations (handled strictly on a need-to-know basis), and correspondence related to delivery. We do not request sensitive categories of data (such as health data) unless a specific project requires it and we agree appropriate safeguards in writing.
Marketing. If you opt in to receive updates, we store your contact details and preferences. You can withdraw consent or unsubscribe at any time using the link in emails or by contacting us directly.
3. Why we use your data (purposes)
- To respond to enquiries and provide proposals or support.
- To perform contracts, including project delivery, invoicing, and account management.
- To operate and secure our website, diagnose technical issues, and prevent abuse.
- To improve our services and understand aggregate usage patterns (analytics).
- To comply with legal obligations, such as tax and accounting record-keeping.
- Where you have opted in, to send relevant news or insights about our work.
4. Legal bases
Depending on context, we rely on: contract performance (delivering what you asked for); legitimate interests (running a secure, efficient business, provided your rights are balanced); consent (e.g. non-essential cookies or marketing where required); and legal obligation (where the law compels retention or disclosure).
5. Cookies and similar technologies
Our site may use cookies or local storage for essential functionality (e.g. security, session management) and, where enabled, analytics to understand traffic volumes and popular pages. You can control cookies through your browser settings. If we deploy non-essential cookies that require consent under applicable law, we will provide a clear choice mechanism before they are set.
6. Sharing with third parties
We use reputable processors to host our site, send email, store backups, manage projects, or run analytics. They process data only on our instructions and under appropriate contractual safeguards. We may disclose information if required by law, court order, or competent authority, or to protect our rights, safety, or the security of our clients and systems.
If data is transferred outside Nigeria or your country, we take steps consistent with applicable law (such as adequacy decisions, standard contractual clauses, or your explicit consent where required).
7. Retention
We keep enquiry and client records for as long as needed to fulfil the purposes above, including statutory limitation periods for contracts and tax. Marketing data is kept until you unsubscribe or we determine the relationship is inactive, after which we delete or anonymise it unless a longer retention is justified for compliance.
8. Security
We implement technical and organisational measures appropriate to the risk, including access controls, encryption in transit where standard for the service, secure development practices for software we maintain, and staff awareness. No method of transmission over the internet is completely secure; we encourage strong passwords and careful handling of API keys and credentials on your side as well.
9. Your rights
Subject to applicable law, you may have the right to: access your personal data; request correction of inaccurate data; request deletion where appropriate; restrict or object to certain processing; withdraw consent where processing is consent-based; and lodge a complaint with a supervisory authority. To exercise these rights, contact us using the details above. We may need to verify your identity before fulfilling requests.
10. Children
Our services are directed at businesses and adults. We do not knowingly collect personal data from children. If you believe a child has provided us data, please contact us and we will take steps to delete it.
11. Links
Our website may link to third-party sites. Their privacy practices are governed by their own policies; we are not responsible for how they handle your data.
12. Changes
We may update this policy to reflect legal, technical, or business changes. Material updates will be indicated by revising the “Last updated” date. Where required, we will provide additional notice.
This policy is for general information. For legal certainty in regulated sectors or cross-border data flows, seek independent legal advice.