Privacy Policy
Demo Reseller ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data in compliance with the Nigeria Data Protection Regulation (NDPR) 2019 and its Implementation Framework.
1. Data We Collect
We collect the following categories of personal data:
- Account data: name, email address, phone number, company name
- Domain WHOIS data: name, address, email, phone (required by NIRA for .ng registrations)
- Billing data: transaction reference numbers, payment amounts (we do not store card details — payments are processed by Paystack/Flutterwave)
- Technical data: IP address, browser type, pages visited, login timestamps
- Communication data: support tickets and email correspondence
2. How We Use Your Data
We use your personal data to:
- Create and manage your account and services
- Register and manage domain names on your behalf
- Process payments and send invoices
- Send service notifications, renewal reminders, and support responses
- Comply with legal obligations including NIRA reporting requirements
- Improve our platform and prevent fraud
3. Legal Basis for Processing (NDPR)
We process your data on the following legal bases: (a) contract — to deliver the services you have purchased; (b) legal obligation — to comply with NIRA and Nigerian tax law; (c) legitimate interests — to maintain security and prevent fraud; (d) consent — where you have opted in to marketing communications.
4. Data Sharing
We do not sell your personal data. We share it only where necessary:
- NIRA (NiRA): Domain WHOIS data for .ng registrations as required by law
- Payment processors: Paystack, Flutterwave — for transaction processing
- Hosting infrastructure: cPanel/WHM servers for account provisioning
- Email delivery: Microsoft 365 for transactional emails
5. Your Rights Under NDPR
As a data subject under the NDPR, you have the right to:
- Access: request a copy of your personal data we hold
- Rectification: correct inaccurate or incomplete data
- Erasure: request deletion of your data (subject to legal retention obligations)
- Portability: receive your data in a structured, machine-readable format
- Objection: object to processing based on legitimate interests
To exercise these rights, email billing@naijacloud.ng with the subject "NDPR Data Request".
6. Data Retention
We retain account data for 7 years after account closure (for tax compliance). Domain registration records are retained for the period required by NIRA. You may request earlier deletion of non-essential data.
7. Cookies
Our website uses essential session cookies for login security and a CSRF token. We do not use third-party tracking cookies or analytics scripts that share your data with external parties.
8. Security
We use industry-standard security measures including TLS/SSL encryption, hashed passwords, and access controls. All admin access is logged. Despite our best efforts, no internet service can guarantee absolute security.
9. Contact & Complaints
For privacy enquiries: billing@naijacloud.ng. To file a complaint, you may also contact the National Information Technology Development Agency (NITDA) at nitda.gov.ng.