Privacy Notice

1. Who we are

Primeguage Solutions Limited is a technology, advisory and consultancy firm that provides revenue & payment management systems, enterprise technology consulting, and data-centric products and services to government and private sector organisations across Africa. Our principal office is at No. 31 Adamu Ciroma Crescent, Jabi, Abuja.

2. To whom this Notice is addressed

This Notice applies to the personal information of the following categories of individuals:

• Clients, customers and their authorised contacts
• Prospective clients and enquirers (including demo and trial users)
• Job applicants and recruitment candidates
• Suppliers, vendors and their contacts
• Website and product visitors, event attendees and other stakeholders
• Individuals captured during service delivery (e.g., where Primeguage systems process third-party data)

(We collect, store and process information only where permitted under the NDPA and other applicable laws.)

3. What personal information we collect

We collect only information reasonably necessary for the purposes described in Section 5. Types of information we commonly process include:

• Identity & contact data: name, business email, phone number, job title, organisation, CCTV footage and postal address.
• Transaction & service data: billing, tax payment history and payment details.
• Technical & website data: IP address, device identifiers, browser and connection data, referral URLs, pages visited and standard web log data.
• Communications: messages, correspondence and notes from support or payment interactions.
• Sensitive data: where required for legitimate service reasons (e.g., limited verification or compliance checks) we will only process special categories of data with appropriate legal basis and safeguards.

4. How we collect personal information

We collect personal information:

• directly from you (e.g., via contact forms, demo requests, account registration, email, telephone, in-person meetings);
• indirectly from our clients, partners, publicly available sources and trusted third parties; and
• automatically through cookies and similar technologies when you visit our websites or use our products.

5. Purposes of processing and lawful bases

We process personal data for clearly-stated purposes, including:

• delivering services, software and support and performing contractual obligations;
• processing demo requests, enquiries, invoices and tax payments;
• maintaining and improving our products, analytics and security;
• communicating product updates, transactional messages and legal notices;
• complying with legal, regulatory and audit obligations; and
• preventing fraud and protecting the safety and security of our systems and customers.

We rely on one or more NDPA-authorised lawful bases for processing, including: performance of a contract, legal obligations (e.g for tax payment), legitimate interests (where balanced against your rights), and your consent (for optional activities such as news-letter subscriptions and non-essential cookies).

6. Cookies and tracking technologies

We use session cookies and similar technologies to enable site functionality, analyze usage and improve user experience. Categories include strictly necessary, performance/analytics, and functionality cookies. Where required, we obtain consent for non-essential cookies and provide tools to manage cookie preferences.

7. Sharing and disclosure

We do not sell personal data. We may disclose personal information to:

• Internal teams on a strict need-to-know basis (e.g., operations, support, billing, compliance);
• Service providers and processors acting on our behalf (e.g., cloud hosting, payment processors, CRM, analytics and security vendors) under contracts and Data Processing Agreements requiring NDPA-aligned safeguards;
• Authorities or third parties where required by law, regulation or to protect legal rights (e.g., fraud investigations, court orders); and
• Business transfers: in the event of a merger, sale or reorganisation, personal data may be transferred subject to assurances that privacy protections continue to apply.

All processors are required to maintain confidentiality and to implement appropriate technical and organisational safeguards.

8. International transfers

Where we transfer personal data outside Nigeria (for example, to cloud providers or global service vendors), we will implement appropriate safeguards required under the NDPA such as transfers to jurisdictions with adequate protections, standard contractual clauses, binding corporate rules or obtaining explicit informed consent and we will document such transfers.

9. Data retention

We retain personal data only as long as necessary for the purposes for which it was collected, or to meet legal, tax or accounting obligations. Retention periods depend on the data category and purpose (for example, payroll and statutory records are kept in line with applicable law and practice).

10. Security

We implement industry-standard technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction or damage. Measures include restricted access controls, encrypted transmission (TLS/SSL), secure hosting practices, regular vulnerability assessments and logging of access to sensitive systems.

11. Your rights

Under the NDPA you have rights, including:

• right to be informed
• right of access
• right to rectification
• right to erasure (where applicable)
• right to object
• right to data portability
• rights relating to automated decision-making

To exercise any right, you must provide a verifiable request and proof of identity to info@primeguage.co. We will process requests in accordance with NDPA timelines and requirements.

12. Changes to this Notice

We may update this Notice to reflect changes in our business, legal requirements or practices. Material changes will be notified on our website. Minor updates will take effect when published.