Privacy Policy

Privacy Policy

 

OBEHTECH PRIVACY POLICY

  1. Introduction

This Privacy Policy explains how ObehTech Solutions (“ObehTech”, “we”, “us”, or “our”) collects, uses, stores, discloses, and protects personal data when you access or use our website at https://www.obehtechsolutions.com/ and any other website, mobile application, platform, product, service, or digital channel that links to or incorporates this Privacy Policy (collectively, the “Platform” or “Services”).

Please read this Privacy Policy carefully to understand our practices regarding your personal data and how we handle it.

Where we rely on your consent as the legal basis for processing your personal data, such consent will be freely given, specific, informed, and unambiguous. You may withdraw your consent at any time, subject to applicable legal or contractual limitations.

By accessing or using the Platform or Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, you should discontinue your use of the Platform and Services.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact us at:

Email: info@obehtechsolutions.com

  1. Our Role as Data Controller and Data Processor

For purposes of the Nigeria Data Protection Act, 2023 (NDPA) and other applicable data protection laws, ObehTech generally acts as a Data Controller in respect of personal data that we collect and process for our own business purposes, including information collected through our website, customer registration processes, enquiries, marketing activities, and provision of our Services.

However, ObehTech may act as a Data Processor where we process personal data on behalf of a client pursuant to an agreement or engagement, including where we provide website hosting, server administration, software infrastructure, cloud services, technical support, or similar services.

 

Client-Controlled Data

Where a client uses a technology solution developed, hosted, or supported by ObehTech to collect, store, process, or otherwise manage personal data relating to its customers, employees, users, beneficiaries, or other third parties, the client generally acts as the Data Controller in respect of such personal data.

ObehTech processes such data only to the extent necessary to provide, maintain, secure, support, or improve the contracted Services and in accordance with the client’s lawful instructions and applicable data protection laws.

ObehTech does not determine the purposes for which the client collects or uses such personal data unless expressly agreed otherwise in writing.

Clients are responsible for ensuring that their collection and use of personal data complies with applicable data protection laws, including providing appropriate privacy notices, obtaining required consents, establishing appropriate lawful bases for processing, responding to data subject requests, and implementing appropriate security measures.

Where required by applicable law or the nature of the engagement, ObehTech and the client may enter into a separate Data Processing Agreement governing the processing of personal data.

  1. Technology Solutions Provided by ObehTech

ObehTech operates as a technology solutions provider and may provide services including, but not limited to:

– Website design and development;

– Software development;

– Mobile application development;

– Artificial intelligence and automation solutions;

– Cloud and hosting services;

– Domain administration;

– Software integration;

– Technology consulting;

– Digital solutions and infrastructure;

– Technical support and maintenance; and

– Other technology-related services.

ObehTech designs and develops technology solutions based on the requirements of its clients.

Unless expressly agreed otherwise, ObehTech does not determine the purposes for which clients subsequently use their technology solutions or the personal data uploaded, collected, or managed through those solutions.

Where a client independently controls the content, data, users, or personal information processed through a technology solution supplied by ObehTech, the client remains responsible for the lawfulness of that processing.

  1. Changes to This Privacy Policy

We may update or modify this Privacy Policy from time to time to reflect changes in our Services, technology, business practices, or applicable laws.

Where appropriate, we will notify you of material changes by updating the “Last Updated” date and, where reasonably practicable, providing additional notice through the Platform, email, or a pop-up notification.

Any changes will become effective when the updated Privacy Policy is posted on the Platform unless otherwise stated.

We encourage you to review this Privacy Policy periodically.

You are responsible for ensuring that the information you provide to ObehTech is accurate, complete, and up to date.

Nothing in this Privacy Policy is intended to limit or exclude any rights you may have under applicable data protection laws.

 

—

 

  1. Information We Collect

We may collect personal data and other information about you in a variety of ways, including through forms, emails, telephone communications, physical requests, cookies, web technologies, and your interactions with the Platform.

The information we may collect includes the following:

5.1 Personal Data

Personal data may include information that identifies or can reasonably be used to identify you, such as:

– Full name;

– Email address;

– Telephone number;

– Residential or business address;

– Age or date of birth;

– Gender, where voluntarily provided;

– Company or organisation details;

– Job title or professional information;

– Account registration information;

– Information provided when requesting a technology solution;

– Brand names, logos, business information, and other materials submitted for the development of your technology solution;

– Communications and correspondence with ObehTech;

– Information provided through customer support requests; and

– Other information that you voluntarily provide to us.

You are generally not required to provide personal data to us. However, failure to provide information that is necessary for a particular Service may prevent us from providing that Service or certain features of the Platform.

5.2 Technical and Derivative Data

When you access or use the Platform, we may automatically collect certain technical information, including:

– Internet Protocol (IP) address;

– Browser type and version;

– Operating system;

– Device type;

– Device identifiers;

– Pages visited;

– Referring and exit pages;

– Access dates and times;

– Duration and frequency of visits;

– Search queries and interactions;

– Clickstream information;

– General usage patterns; and

– Other diagnostic or technical information.

This information may be collected through server logs, cookies, analytics technologies, and similar tools.

5.3 Financial and Payment Information

ObehTech does not directly store users’ debit or credit card numbers or other complete payment-card information.

Where payments are made through the Platform, payment transactions may be processed by secure third-party payment service providers. Such providers may collect and process payment information in accordance with their own privacy policies and applicable financial, security, and data protection requirements.

You should review the privacy policy of the relevant payment provider for information about how it handles your payment information.

5.4 Mobile and Device Data

Where you access the Platform through a mobile device, we may collect information about the device, including:

– Device model;

– Manufacturer;

– Operating system;

– Device identifiers;

– Mobile network information; and

– Other technical information necessary to provide or secure the Services.

Where permitted by applicable law and where enabled by you, we may also process location information.

5.5 Information from Third Parties

We may receive personal data from third parties where you have authorised such disclosure or where otherwise permitted by law.

For example, this may occur where you connect your account to a third-party service or platform and grant permission for that service to share information with us.

5.6 Surveys, Promotions, and Other Activities

Where applicable, we may collect information that you voluntarily provide when participating in:

– Surveys;

– Promotions;

– Competitions;

– Giveaways;

– Events;

– Feedback programmes; or

– Other activities conducted by or through ObehTech.

  1. Information Collected Automatically

We may automatically collect and record information concerning:

  1. Actions and searches performed while interacting with the Platform;
  2. IP addresses;
  3. Operating systems and browser information;
  4. The time, frequency, and duration of your visits and interactions;
  5. Pages and content viewed;
  6. General usage and analytics information; and
  7. Other technical information generated through your use of the Platform.

We may use this information to maintain, secure, analyse, improve, and optimise the Platform and Services.

Where appropriate, technical and usage information may be aggregated or anonymised so that it cannot reasonably be used to identify individual users.

  1. Cookies and Similar Technologies

ObehTech uses cookies and similar technologies to operate the Platform, enhance user experience, understand how users interact with our Services, improve performance, and, where applicable, support marketing activities.

Cookies are small text files stored on your device when you visit a website.

We may use the following categories of cookies

7.1 Strictly Necessary Cookies

These cookies are essential for the operation, security, and functionality of the Platform. They may support functions such as authentication, session management, accessibility, and security.

7.2 Performance and Analytics Cookies

These cookies help us understand how visitors interact with the Platform and enable us to analyse traffic, usage patterns, and Platform performance.

7.3 Functional Cookies

These cookies enable the Platform to remember preferences and choices, such as language, region, or other settings.

7.4 Marketing and Advertising Cookies

Where applicable and subject to applicable law, these cookies may be used to provide relevant advertisements, measure advertising effectiveness, and understand marketing campaign performance.

Where required by applicable law, non-essential cookies will only be placed on your device after obtaining the appropriate consent.

You may accept, reject, or modify your cookie preferences through the cookie-management tools available on the Platform or through your browser settings.

Disabling or deleting certain cookies may affect the availability or functionality of some features of the Platform.

Some cookies may be placed by third-party service providers, including analytics, advertising, hosting, and payment service providers. Such third parties may process information in accordance with their own privacy policies.

ObehTech seeks to manage its cookie practices in accordance with applicable data protection laws, including the NDPA and, where applicable, the EU General Data Protection Regulation (GDPR).

  1. Web Beacons, Pixels, and Tracking Technologies

We may use web beacons, tracking pixels, tags, scripts, and similar technologies to understand how users interact with our Platform, measure the effectiveness of communications, improve our Services, and support analytics and marketing activities.

These technologies may be provided by ObehTech or by third-party service providers acting on our behalf.

Where consent is required by law, we will obtain the appropriate consent before using non-essential tracking technologies.

  1. Website Analytics

We may use third-party analytics providers, such as Google Analytics or other analytics services, to analyse how users interact with the Platform.

These services may use cookies and similar technologies to collect information regarding:

– Website visits;

– Traffic sources;

– Pages viewed;

– User interactions;

– Device information;

– General geographic information; and

– Other usage statistics.

We use analytics information to understand user behaviour, improve Platform functionality, measure performance, and develop better Services.

Third-party analytics providers may process information in accordance with their respective privacy policies.

  1. Internet-Based Advertising

Where applicable, ObehTech may use third-party advertising and marketing service providers to deliver relevant advertisements or measure advertising campaigns.

Such providers may use cookies, pixels, or similar technologies to understand interactions with advertisements and websites.

Where applicable law requires consent for personalised advertising or similar activities, we will obtain such consent.

You may manage advertising preferences through available cookie-management tools, browser settings, or relevant third-party opt-out mechanisms.

 

  1. Location Information

Where permitted by law, we may process general location information derived from your device, browser, IP address, or other technology.

We will only request or process more precise location information where it is necessary for a particular Service and permitted by applicable law.

  1. How We Use Your Information

We may use personal data collected through the Platform for the following purposes:

– To provide, operate, maintain, and improve our Services;

– To understand your technology requirements and develop solutions suited to your needs;

– To customise our products and Services based on your business requirements;

– To communicate with you regarding enquiries, projects, subscriptions, purchases, or Services;

– To process and manage orders, payments, registrations, and transactions;

– To provide customer support;

– To respond to requests, complaints, and enquiries;

– To provide educational or informational materials relating to Services you have subscribed to;

– To send service-related communications;

– To send newsletters and marketing communications where permitted by law and, where required, with your consent;

– To personalise your experience on the Platform;

– To analyse Platform usage and trends;

– To improve Platform performance and functionality;

– To develop new products, applications, and Services;

– To administer promotions, competitions, surveys, and other activities;

– To prevent fraud, abuse, unauthorised access, and other unlawful activities;

– To protect the security and integrity of our Platform and Services;

– To comply with legal and regulatory obligations;

– To resolve disputes and enforce our contractual rights;

– To conduct internal business analysis and reporting;

– To generate aggregated or anonymised statistical information;

– To protect the rights, property, and safety of ObehTech, our users, and third parties; and

– For other legitimate purposes disclosed to you at the time of collection or otherwise permitted by applicable law.

We do not intentionally collect or process more personal data than is reasonably necessary for the purposes described in this Privacy Policy.

 

  1. Legal Basis for Processing Personal Data

Depending on the nature and purpose of the processing, ObehTech may rely on one or more lawful bases recognised under applicable data protection laws.

These may include:

13.1 Consent

We may process your personal data where you have provided valid consent.

You may withdraw your consent at any time, although withdrawal will not affect the lawfulness of processing carried out before the withdrawal.

13.2 Contractual Necessity

We may process personal data where necessary to perform a contract with you, your organisation, or to take steps at your request before entering into a contract.

13.3 Legal Obligation

We may process personal data where necessary to comply with a legal, regulatory, governmental, or judicial obligation.

13.4 Legitimate Interests

We may process personal data where necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.

Such interests may include improving our Services, securing our Platform, preventing fraud, communicating with customers, and managing our business.

13.5 Vital Interests

Where legally permitted, we may process personal data where necessary to protect the vital interests of you or another individual.

13.6 Public Interest

Where applicable, we may process personal data where necessary for the performance of a task carried out in the public interest or in accordance with lawful official authority.

Where we rely on legitimate interests or another lawful basis, you may contact us to obtain further information regarding the basis applicable to a particular processing activity.

  1. Consent and Withdrawal of Consent

Where we rely on consent, we will obtain consent through appropriate mechanisms, including forms, checkboxes, electronic confirmations, or other lawful methods.

You may withdraw your consent at any time by contacting us at: info@obehtechsolutions.com

Withdrawal of consent does not affect processing carried out lawfully before the withdrawal.

Where we need to process your personal data for another purpose that is materially different from the purpose for which it was originally collected, we will provide appropriate information and, where required, obtain additional consent.

  1. Accuracy of Personal Data

You are responsible for ensuring that the personal data you provide to ObehTech is accurate, complete, and up to date.

You may request correction or amendment of inaccurate or incomplete personal data in accordance with applicable law.

ObehTech will take reasonable steps to ensure that personal data in its possession is accurate and kept up to date where necessary.

  1. Your Data Protection Rights

Subject to applicable law and any lawful limitations, you may have the following rights in relation to your personal data:

– The right to be informed about how your personal data is processed;

– The right to request access to personal data we hold about you;

– The right to request correction of inaccurate or incomplete personal data;

– The right to request deletion or erasure of personal data in appropriate circumstances;

– The right to withdraw consent where processing is based on consent;

– The right to object to certain processing activities;

– The right to restrict processing in certain circumstances;

– The right to object to direct marketing;

– The right to data portability where applicable;

– The right to request information regarding automated decision-making;

– The right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) or another competent supervisory authority; and

– Any other rights available under applicable data protection legislation.

You may request access, correction, deletion, restriction, or other appropriate action by contacting: info@obehtechsolutions.com

For security purposes, we may require sufficient information to verify your identity before responding to a data subject request.

We may refuse or limit a request where permitted by applicable law, including where a request is manifestly unfounded, excessive, repetitive, or where a legal exception applies.

  1. Automated Decision-Making and Profiling

ObehTech does not currently engage in automated decision-making or profiling that produces legal or similarly significant effects on users.

Where we use analytics or personalisation technologies, such activities are primarily intended to improve user experience, understand Platform usage, recommend relevant Services, and improve Platform performance.

Where applicable law provides additional rights in relation to automated decision-making or profiling, those rights will apply.

  1. Change of Purpose

We will generally use personal data only for the purposes for which it was collected.

Where we reasonably determine that personal data may be used for another purpose compatible with the original purpose, we may do so in accordance with applicable law.

Where processing for a new purpose is not compatible with the original purpose, we will provide appropriate notice and, where legally required, obtain consent or rely on another lawful basis before processing the data for that purpose.

We may process personal data without additional consent where such processing is required or permitted by law, including for legal claims, dispute resolution, fraud prevention, regulatory compliance, or enforcement of our contractual rights.

  1. Disclosure and Sharing of Personal Data

We may disclose personal data in the following circumstances:

19.1 Service Providers

We may share personal data with trusted third-party service providers that provide services on our behalf, including:

– Payment processing;

– Hosting and cloud infrastructure;

– Website and software infrastructure;

– Data analytics;

– Email delivery;

– Customer support;

– Cybersecurity;

– Technical maintenance;

– Marketing services; and

– Other business support services.

Where appropriate, we require such service providers to process personal data only for authorised purposes and to implement appropriate confidentiality and security measures.

19.2 Legal and Regulatory Requirements

We may disclose personal data where necessary to:

– Comply with applicable laws or regulations;

– Respond to lawful governmental or regulatory requests;

– Comply with court orders or legal processes;

– Investigate suspected fraud or unlawful activity;

– Enforce our agreements and policies; or

– Protect the rights, property, and safety of ObehTech, our users, or others.

19.3 Business Transfers

If ObehTech is involved in a merger, acquisition, restructuring, sale of assets, financing transaction, dissolution, or similar corporate transaction, personal data may be transferred to the relevant successor or acquiring entity where legally permitted.

Where required by law, we will provide appropriate notice regarding such transfer.

 

19.4 Business Partners

Where appropriate and lawful, we may share information with business partners where necessary to provide a requested Service, fulfil a transaction, or operate a joint business initiative.

We will not sell your personal data in a manner prohibited by applicable data protection laws.

 

  1. Third-Party Websites and Services

The Platform may contain links to third-party websites, applications, platforms, or services.

These third parties operate independently from ObehTech and may have their own privacy policies and data-processing practices.

Once you leave the ObehTech Platform or interact with a third-party service, the processing of your information may be governed by that third party’s privacy policy.

We encourage you to review the privacy policy of any third-party website or service before providing personal data.

ObehTech is not responsible for the privacy, security, content, or practices of third-party websites or services that we do not control.

  1. Security of Personal Data

ObehTech implements reasonable administrative, technical, organisational, and physical safeguards designed to protect personal data against:

– Unauthorised access;

– Unauthorised disclosure;

– Accidental loss;

– Destruction;

– Alteration;

– Unlawful processing; and

– Other security risks.

However, no method of electronic transmission, storage, or security can be guaranteed to be completely secure.

Accordingly, while we take reasonable measures to protect your information, we cannot guarantee absolute security.

 

  1. Third-Party Access

ObehTech may permit trusted third parties to access personal data where necessary to provide Services or fulfil legitimate business purposes.

Such access may occur where:

  1. You have provided appropriate consent;
  2. The third party is acting as a service provider or processor on our behalf;
  3. Access is necessary to provide or maintain the Services;
  4. Disclosure is required by law;
  5. Disclosure is necessary to prevent fraud or security incidents;
  6. Disclosure is necessary to protect the rights, property, or safety of ObehTech, our users, or the public; or
  7. Another lawful basis for disclosure exists.

Where third parties process personal data on our behalf, we will take reasonable steps to ensure that appropriate confidentiality, security, and data protection obligations apply.

 

  1. Data Retention

We retain personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law.

In determining an appropriate retention period, we may consider:

– The nature and sensitivity of the information;

– The purposes for which it was collected;

– The period for which we need the information to provide our Services;

– Applicable contractual obligations;

– Legal, accounting, regulatory, and reporting requirements;

– Dispute resolution requirements; and

– Our legitimate business interests.

Where appropriate, we may anonymise personal data so that it can no longer reasonably be associated with an identifiable individual. Anonymised information may be retained for statistical, analytical, research, or business purposes.

Certain provisions of this Privacy Policy may continue to apply after the termination or deactivation of an account where necessary to comply with legal obligations, resolve disputes, enforce agreements, or protect our legitimate interests.

  1. Direct Marketing and Unsubscribing

Where permitted by applicable law, ObehTech may send you marketing communications concerning our products, Services, events, promotions, educational materials, or other relevant information.

Where required, we will obtain your consent before sending direct marketing communications.

You may unsubscribe from marketing emails at any time by:

– Clicking the unsubscribe link contained in the relevant communication; or

– Contacting us at info@obehtechsolutions.com.

You may not be able to opt out of essential service-related communications, including communications concerning your account, transactions, security, contractual obligations, legal notices, or material changes to our Services or policies.

 

  1. Children’s Privacy

Our Platform is not specifically directed at children.

We do not knowingly collect personal data from children in circumstances where parental or guardian consent is legally required without obtaining the appropriate consent.

Where applicable law requires parental or guardian consent for the processing of a child’s personal data, we will take reasonable steps to obtain such consent.

If you believe that we have collected personal data from a child without the required consent, please contact us immediately at:info@obehtechsolutions.com

Upon receiving a valid request, we will take appropriate steps to investigate and, where required by law, delete or otherwise appropriately handle the information.

 

  1. International Transfers of Personal Data

ObehTech may use service providers or infrastructure located outside Nigeria. Consequently, personal data may be transferred to or processed in countries outside Nigeria.

Where personal data is transferred internationally, ObehTech will take reasonable steps to ensure that such transfers are carried out in accordance with applicable data protection laws and that appropriate safeguards are implemented where required.

Where applicable, such safeguards may include contractual protections, adequacy mechanisms, consent, or other lawful transfer mechanisms recognised under applicable law.

 

  1. Personal Data Breaches

ObehTech maintains procedures designed to identify, investigate, manage, and respond to personal data breaches.

Where a personal data breach occurs, we will take reasonable steps to contain, investigate, and remediate the breach.

Where notification is required under applicable law, ObehTech will notify the relevant regulatory authority and/or affected data subjects within the applicable statutory timeframe.

  1. Force Majeure

While ObehTech takes reasonable steps to comply with applicable data protection and security obligations, circumstances beyond our reasonable control may affect our ability to provide uninterrupted Services or fully prevent a data security incident.

Such circumstances may include:

– Cyberattacks;

– Internet or telecommunications failures;

– Cloud infrastructure failures;

– System failures;

– Natural disasters;

– Government actions;

– Acts of terrorism;

– War;

– Civil unrest; or

– Other force majeure events.

Where such circumstances occur, ObehTech will take reasonable and practicable steps to restore the affected Services and address any resulting data protection or security issues.

Nothing in this section limits any mandatory obligations imposed on ObehTech under applicable data protection law.

  1. Data Protection Principles

When processing personal data, ObehTech is guided by the following principles:

  1. Lawfulness, fairness, and transparency – personal data should be processed lawfully, fairly, and transparently;
  2. Purpose limitation – personal data should be collected for specified, explicit, and legitimate purposes;
  3. Data minimisation – personal data should be adequate, relevant, and limited to what is necessary;
  4. Accuracy – personal data should be accurate and kept up to date where necessary;
  5. Storage limitation – personal data should not be retained longer than necessary;
  6. Integrity and confidentiality – personal data should be protected through appropriate technical and organisational measures; and
  7. Accountability – ObehTech will take reasonable steps to demonstrate compliance with applicable data protection requirements.
  8. Your Responsibilities

You are responsible for:

– Providing accurate information to ObehTech;

– Keeping your account information up to date;

– Protecting your login credentials where applicable;

– Not unlawfully accessing or attempting to access another person’s personal data;

– Ensuring that information you submit to the Platform does not unlawfully infringe the rights of third parties; and

– Complying with applicable laws when using the Platform and Services.

Where you use an ObehTech technology solution to collect or process personal data belonging to your customers, employees, users, or other third parties, you are responsible for ensuring that such processing has an appropriate lawful basis and complies with applicable data protection laws.

  1. Complaints and Data Subject Requests

If you believe that ObehTech has processed your personal data unlawfully or in breach of this Privacy Policy, you may contact us so that we can investigate and address your concern.

You may also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) or another competent data protection authority, depending on the applicable law.

To submit a data subject request or privacy complaint, contact:

ObehTech Solutions

Email: info@obehtechsolutions.com

Website: https://www.obehtechsolutions.com/

We will endeavour to respond to valid requests within the timeframe required by applicable law.

 

  1. Contact Us

If you have any questions about this Privacy Policy, our privacy practices, or the manner in which we process personal data, please contact us:

ObehTech Solutions

Email: info@obehtechsolutions.com

Website: https://www.obehtechsolutions.com/

  1. Governing Language

This Privacy Policy is written in English.

Where this Privacy Policy is translated into another language, the English version shall prevail to the extent permitted by applicable law in the event of any inconsistency or conflict between the English version and a translated version.

 

  1. Updates to This Privacy Policy

ObehTech may periodically update this Privacy Policy to reflect changes in our Services, business operations, technology, regulatory requirements, or applicable data protection laws.

When we make material changes, we will take reasonable steps to notify affected users, including by updating the “Last Updated” date and, where appropriate, displaying a notification on the Platform or sending an email.

Your continued use of the Platform or Services after the effective date of an updated Privacy Policy constitutes acknowledgement of the updated policy, to the extent permitted by applicable law.