Privacy Policy

PEDTransforms (“PEDTransforms”, “we”, “us”) is a technology and business transformation company based in the Federal Republic of Nigeria. We are the data controller for personal data collected through this website, pedtransforms.com.

We process personal data in accordance with the Nigeria Data Protection Act 2023 (“NDPA”) and the General Application and Implementation Directive 2025 (“GAID”) issued by the Nigeria Data Protection Commission (NDPC). For any privacy question or request, email info@pedtransforms.com.

Information you give us. When you use our contact form we collect your name, email address, organisation (optional), phone number (optional), the topic of your enquiry and your message. If you email us, we receive your email address and the content of your email.

Information collected automatically. Like most websites, our hosting provider records technical information when you visit, such as your IP address, browser type, pages requested and the date and time of the request. We also use your IP address briefly to limit repeated contact form submissions and prevent spam. Cookies are described in our Cookie Policy.

Sensitive data. We do not ask for sensitive personal data, such as health, religious, ethnic, financial or biometric information. Please do not include it in your messages.

We only process personal data where we have a lawful basis under section 25 of the NDPA. We use your data to:

• Respond to your enquiry and tell you about the services you asked about. Basis: your consent when you submit the form, and taking steps at your request before entering into a contract.
• Deliver services to clients and manage our working relationship. Basis: performance of a contract.
• Keep this website secure, prevent spam and abuse, and fix problems. Basis: our legitimate interests in operating a safe and reliable website, balanced against your rights.
• Meet our legal obligations, for example tax, accounting and regulatory requirements, and requests from lawful authorities. Basis: legal obligation.

We will only send you marketing communications with your consent, and you can opt out at any time. We do not sell your personal data, and we do not make decisions about you based solely on automated processing or profiling.

We share personal data only with trusted service providers who process it on our behalf, under written terms that require them to protect it and use it only for the purposes below:

• Vercel Inc. (United States) hosts this website and processes technical request data.
• Resend (United States) delivers contact form submissions to our inbox.
• Our business email provider stores the enquiries and emails we receive.

We may also disclose personal data to professional advisers such as lawyers and auditors, to law enforcement, courts or regulators where the law requires it, or to a buyer or successor if our business is reorganised or sold, subject to equivalent protections.

Some of our service providers store or process data outside Nigeria, including in the United States and the European Union. We only transfer personal data outside Nigeria in line with Part VIII (sections 41 to 43) of the NDPA, for example where the recipient is subject to adequate data protection rules or binding contractual safeguards, where the transfer is necessary to respond to your request or perform a contract with you, or with your consent.

We keep personal data only for as long as we need it for the purposes above:

• Enquiries and related correspondence: up to 24 months after our last contact, unless you become a client.
• Client records: for the duration of the engagement and afterwards for as long as Nigerian tax, company and other laws require.
• IP addresses used for spam prevention: held in memory for no more than 10 minutes.
• Server logs: for the short period set by our hosting provider.

When the retention period ends we delete or anonymise the data. Once deleted, it can no longer be provided in response to an access request.

We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), security headers, spam and abuse protection, access controls and careful selection of service providers.

If a personal data breach occurs that is likely to put your rights and freedoms at risk, we will notify the Nigeria Data Protection Commission (NDPC) within 72 hours of becoming aware of it, as section 40 of the NDPA requires, and inform you without undue delay where the risk is high.

Under sections 34 to 38 of the NDPA, you have the right to:

• be informed about how we process your personal data;
• access your personal data and receive a copy of it;
• have inaccurate or incomplete data corrected;
• have your data erased where we no longer have a lawful reason to keep it;
• restrict how we process your data in certain circumstances;
• object to processing, including for direct marketing;
• receive your data in a commonly used, machine-readable format (data portability);
• withdraw your consent at any time, without affecting processing carried out before you withdrew it; and
• not be subject to a decision based solely on automated processing.

To exercise any of these rights, email info@pedtransforms.com. We may ask you to confirm your identity first. We respond without undue delay and within 30 days, free of charge unless a request is manifestly unfounded or excessive.

This website and our services are intended for businesses and adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us their data, contact us and we will delete it.

If you have a concern about how we handle your data, please contact us first at info@pedtransforms.com so we can try to resolve it. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).

We may update this policy from time to time. The “Last updated” date shows when it last changed. Where changes are significant, we will highlight them on this website.

PEDTransforms, the Federal Republic of Nigeria. Email: info@pedtransforms.com. You can also reach us through our contact page.