Privacy Policy

1. Who we are

Ennovision Ltd ("Ennovision", "we", "our", or "us") is the data controller responsible for personal data processed through our website ennovisionlimited.com and through our service and training engagements. We are registered in Nigeria with our place of business at Angwan Yerima, Pwambara Ushafa, Bwari, Federal Capital Territory.

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, how we keep it safe, and the rights you have under the Nigeria Data Protection Act 2023 (NDPA) and the regulations and directives issued by the Nigeria Data Protection Commission (NDPC).

2. Personal data we collect

We collect personal data in the following ways:

You provide it directly

• Contact form submissions — full name, email address, optional phone number, the service you are interested in, and the content of your message.
• Service and training enrolment — billing name, contact details, organisation name (where applicable), and details relevant to the service or training you are paying for.
• Correspondence — information you share with us by email, WhatsApp, phone, or during meetings and consultations.

We collect it automatically

• Technical data — IP address, browser type and version, device type, operating system, referring URL, pages visited, and timestamps. This is used to keep the site secure and to understand how visitors use it.

We receive it from third parties

• Payment confirmations from Flutterwave (transaction reference, status, amount, masked card / channel metadata). We do not receive or store full card numbers, CVVs, or bank login credentials.

3. How we use your data

We use the personal data we collect to:

• Respond to enquiries you send through the contact form or by email;
• Prepare quotations, deliver software and consulting engagements, and operate maintenance retainers;
• Enrol you in training programs, schedule sessions, issue certificates, and provide course materials;
• Process and reconcile payments and issue receipts and invoices;
• Comply with tax, accounting, and other legal obligations under Nigerian law;
• Send service updates, training schedules, and (where you have opted in) occasional marketing messages — you can opt out of marketing at any time;
• Protect the security and integrity of our website, prevent fraud, and investigate misuse.

4. Lawful basis for processing

Under the NDPA, we rely on the following lawful bases:

• Consent — for marketing communications and where you submit a contact form.
• Performance of a contract — to deliver the services or training you have engaged us for.
• Legitimate interest — to run, secure, and improve our business in ways that do not override your fundamental rights (for example, fraud prevention, basic analytics, project portfolio references).
• Legal obligation — to comply with tax, accounting, and regulatory requirements.

5. Who we share data with

We do not sell personal data. We share it only with trusted parties who need it to help us run the business, and only to the extent necessary:

• Payment processor — Flutterwave Technology Solutions Limited, for processing card, bank transfer, and other payments;
• Hosting and infrastructure providers — providers who host our website and store our business records;
• Email and communication providers — for sending and receiving emails and operational messages;
• Professional advisers — accountants, auditors, and legal advisers, under duties of confidentiality;
• Authorities — where required by Nigerian law, court order, or a lawful request from a regulator.

6. Payment information

Online payments on this website are processed by Flutterwave, a licensed payment service provider regulated by the Central Bank of Nigeria. When you make a payment:

• Your card and bank details are entered on Flutterwave's secure environment, not on our servers;
• We receive only the information needed to reconcile the transaction (such as your name, email, the amount, the transaction reference, and the status);
• Flutterwave's own privacy notice applies to the data they collect on their pages.

7. Cookies and similar technologies

Our website uses a small number of cookies and similar technologies:

• Strictly necessary — to keep the site functioning (e.g. form submission, security).
• Analytics — where enabled, to understand aggregate usage patterns so we can improve the site. These do not identify you personally.

You can control cookies through your browser settings. Blocking some cookies may affect how the site works.

8. How long we keep your data

We keep personal data only for as long as we need it for the purposes set out in this Policy:

• Contact form enquiries that do not lead to an engagement: up to 24 months;
• Project, training, and client records: for the duration of the engagement and for a further 7 years after the last interaction, in line with Nigerian tax and accounting record-keeping requirements;
• Payment records: for the period required by applicable financial regulations.

When data is no longer needed, we securely delete or anonymise it.

9. How we protect your data

We take reasonable technical and organisational measures to protect personal data, including:

• HTTPS encryption for data in transit between your browser and our site;
• Access controls and the principle of least privilege for staff and contractors;
• Use of reputable, security-audited service providers for payments, hosting, and email;
• Routine review of our practices in line with the NDPA and NDPC guidance.

No system is completely secure. If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the NDPC and affected individuals as required by the NDPA.

10. Your rights

Under the NDPA you have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate or incomplete data;
• Erase your data where we no longer have a lawful basis to keep it;
• Restrict or object to certain processing, including direct marketing;
• Withdraw consent at any time where consent is the basis for processing (without affecting prior processing);
• Data portability — receive your data in a structured, commonly used format;
• Lodge a complaint with the Nigeria Data Protection Commission if you believe we have not handled your data properly.

To exercise any of these rights, email us at info@ennovisionlimited.com. We will respond within the timeframes required by the NDPA.

11. International data transfers

Some of the service providers we use (for example, email and hosting providers) may process data on servers located outside Nigeria. Where we transfer personal data internationally, we do so in line with the NDPA — relying on providers that offer an adequate level of protection or on appropriate safeguards permitted under the Act.

12. Children's data

Our services and training programs are aimed at adults and at organisations. We do not knowingly collect personal data from children under the age of 13 without parental or guardian consent. Where a minor enrols in a training program, we collect only the data needed for that enrolment, with appropriate consent from a parent or guardian.

13. Updates to this Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology, or the law. The "Last updated" date at the top of the page shows when the latest version was published. Material changes will be communicated through our website and, where appropriate, by email.

14. Contact us

For any privacy questions or to exercise your rights, contact: