Privacy Policy

1. Introduction

ZidoSoft Ltd. ("ZidoSoft", "we", "us", "our") is committed to protecting the privacy and security of personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you interact with our website, submit a project inquiry, or engage us for services.

We process personal data in accordance with the Nigeria Data Protection Regulation (NDPR) and, where applicable, other data protection laws in jurisdictions where we operate.

2. Information We Collect

We collect information you provide directly to us, including:

• Contact information (name, email address, phone number)
• Organization details (company name, country, organization type)
• Project information (description, budget range, timeline, compliance requirements)
• Files you upload (documents, specifications, RFPs)
• Communications you send us (emails, messages through our portal)

We also collect limited technical information automatically when you visit our website, including IP address (hashed), browser type, and pages visited. This information is used for security, analytics, and site improvement purposes.

3. How We Use Information

We use the information we collect to:

• Respond to project inquiries and provide requested services
• Communicate with you about projects, proposals, and deliverables
• Operate, secure, and improve our platform
• Comply with legal, regulatory, and contractual obligations
• Detect, prevent, and respond to fraud, abuse, and security incidents

4. Legal Basis for Processing

We process personal data based on:

• Your consent (for marketing communications)
• Performance of a contract (for service delivery)
• Legal obligations (for compliance and tax purposes)
• Legitimate interests (for security and service improvement)

5. Data Sharing

We do not sell personal data. We share data only with:

• Service providers who process data on our behalf (cloud infrastructure, email, analytics) under written agreements
• Professional advisers (legal, accounting, audit) as required
• Regulatory or law enforcement authorities when legally required
• Successors in the event of a merger or acquisition

A current list of subprocessors is available on our Security page.

6. Data Retention

We retain personal data only as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce agreements. Project inquiry data is typically retained for 3 years. Client project data is retained per the terms of the applicable agreement.

7. Data Security

We implement technical and organizational measures to protect personal data, including encryption in transit and at rest, access controls, audit logging, and security monitoring. Full details are available on our Security page.

8. Your Rights

Under the NDPR, you have the right to:

• Access personal data we hold about you
• Request correction of inaccurate data
• Request deletion of data (subject to legal retention requirements)
• Object to or restrict processing
• Request data portability
• Withdraw consent at any time
• Lodge a complaint with the Nigeria Data Protection Commission

9. International Transfers

Where personal data is transferred outside Nigeria, we ensure appropriate safeguards are in place, including standard contractual clauses and adequacy determinations where applicable.

10. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through our website or by direct notice.

12. Contact

For privacy inquiries, contact our Data Protection Officer at privacy@zidosoft.dev.