Privacy Policy

Nexoris Technologies Ltd is a technology company that designs, develops, integrates, deploys, and supports digital products and technology solutions for businesses and organisations.

Our services may include:

• AI-Powered Digital Product Development

• AI Chatbots & Virtual Assistants

• Intelligent Workflow & Business Process Automation

• AI Integration & System Connectivity

• Data Dashboards & Predictive Analytics

• Data Infrastructure & AI Readiness

• IoT Application Development & Integration

• AI-Powered E-Commerce & Digital Commerce

• GovTech & Public Sector Platforms

• AI Content, SEO & Generative Engine Optimisation

• Managed Technology Operations

The personal data we process depends on how you interact with Nexoris and the nature of the services we provide.

This Privacy Policy applies to personal data processed by Nexoris through or in connection with:

• our website and digital properties;

• contact and enquiry forms;

• quotation and consultation requests;

• email, telephone, and other business communications;

• newsletter and marketing subscriptions;

• Nexoris Technologies Insights;

• recruitment and careers activities;

• business development activities;

• client and prospective-client engagements; and

• other services or digital properties that expressly refer to this Privacy Policy.

Certain Nexoris services may have additional privacy notices, contractual provisions, or Data Processing Agreements. Where applicable, those additional terms will apply alongside this Privacy Policy.

For personal data that Nexoris processes for its own business purposes, Nexoris Technologies Ltd is responsible for determining how and why that personal data is processed.

Where Nexoris processes personal data solely on behalf of a client as part of providing a technology service, the client may be the relevant data controller or equivalent responsible party, while Nexoris may act as a data processor or in another role recognised by applicable law.

The respective responsibilities of Nexoris and the client in those circumstances will be determined by the applicable agreement and data-protection requirements.

For purposes of this Privacy Policy, personal data means information relating to an identified or identifiable individual.

Personal data may include information that identifies you directly, as well as information that can reasonably be associated with you.

Depending on how you interact with Nexoris, this may include your name, contact information, professional information, communications, technical information, and other information you choose to provide.

The information we collect depends on your relationship with Nexoris.

5.1 Information You Provide

You may provide personal data when you:

• contact us;

• submit an enquiry;

• request a quotation;

• request a consultation;

• submit a project brief;

• communicate with our team;

• subscribe to our communications;

• download or request a resource;

• apply for a position;

• participate in an event;

• enter into a business relationship with us; or

• otherwise voluntarily provide information.

This may include:

• full name;

• email address;

• telephone number;

• company or organisation;

• job title or professional role;

• business address;

• project requirements;

• information contained in correspondence;

• CV or résumé information;

• professional qualifications and experience;

• information provided during recruitment;

• information required to administer a client relationship; and

• other information reasonably necessary for the relevant purpose.

5.2 Technical Information

When you interact with our website or certain digital services, we may receive technical information such as:

• IP address;

• browser type and version;

• operating system;

• device type;

• referring page or website;

• pages accessed;

• date and time of access;

• session information;

• technical diagnostics;

• website performance information; and

• security-related information.

This information may be collected automatically through our systems or through service providers that support our website and digital infrastructure.

For information about cookies and similar technologies specifically, please see our Cookies Policy.

5.3 Information From Other Sources

Where appropriate and lawful, we may receive information about you from other sources, such as:

• your organisation;

• business partners;

• professional networks;

• publicly available business information;

• service providers;

• referrals; or

• other persons who are authorised to provide the information.

We will process such information in accordance with applicable law and the purpose for which it was obtained.

We process personal data for legitimate and defined purposes.

Depending on the circumstances, we may use personal data to:

Respond to enquiries

Respond to questions, project enquiries, quotation requests, consultation requests, and other communications.

Provide our services

Deliver, administer, support, maintain, and improve services provided to clients.

Manage business relationships

Communicate with clients, prospective clients, suppliers, contractors, partners, and other business contacts.

Deliver projects

Understand requirements, coordinate activities, manage deliverables, provide support, and perform contractual obligations.

Communicate with you

Send service-related, administrative, operational, and other communications relevant to our relationship.

Send marketing communications

Where permitted by applicable law and, where required, with your consent, send information about our services, insights, resources, events, and relevant company updates.

Operate our website

Maintain, secure, troubleshoot, and improve our website and digital properties.

Improve our services

Analyse feedback, usage patterns, technical information, and other relevant information to improve our services, content, products, and digital experiences.

Maintain security

Detect, investigate, prevent, and respond to security incidents, fraud, abuse, unauthorised activity, and threats to our systems.

Recruitment

Assess job applications, communicate with applicants, conduct interviews, and administer recruitment activities.

Meet legal obligations

Comply with applicable laws, regulations, lawful requests, court orders, regulatory requirements, and other legal obligations.

Protect our rights

Establish, exercise, or defend legal claims and protect the rights, property, systems, security, and legitimate interests of Nexoris and other persons.

Nexoris processes personal data only where an appropriate lawful basis exists under applicable data-protection law.

Depending on the circumstances, we may rely on:

Consent

Where you have provided valid consent for a specified processing activity.

Contract

Where processing is necessary to enter into or perform a contract with you or your organisation.

Legal obligation

Where processing is necessary to comply with a legal or regulatory obligation.

Vital interests

Where processing is necessary to protect an individual's vital interests in circumstances recognised by applicable law.

Public interest

Where processing is necessary for a public-interest purpose or under applicable official authority.

Legitimate interests

Where permitted by applicable law and where our legitimate interests are not overridden by your applicable rights and interests.

The lawful basis depends on the specific processing activity.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

We use personal data only for purposes that are compatible with the reason it was collected, another lawful purpose permitted by applicable law, or a purpose for which you have otherwise been appropriately informed.

We do not use personal data for unrelated purposes merely because we have access to it.

Where a new use is materially different from the original purpose, we will take appropriate steps required by applicable law before undertaking that processing.

Nexoris seeks to collect personal data that is adequate, relevant, and reasonably necessary for the purpose for which it is processed.

We do not intentionally collect personal information simply because it may be useful at some point in the future.

Where personal data is no longer necessary for the relevant purpose, it will be handled in accordance with our retention practices and applicable law.

We take reasonable steps to ensure that personal data under our control is accurate and, where necessary, kept reasonably up to date.

You may contact us if information we hold about you is inaccurate or incomplete.

Where appropriate, we will correct or update the information.

Where permitted by applicable law, Nexoris may send marketing communications about:

• our services;

• technology insights;

• articles and guides;

• events;

• reports and resources;

• product or service updates; and

• other relevant business information.

Where consent is required, we will obtain consent before sending the relevant marketing communications.

You may unsubscribe at any time by using the unsubscribe option provided in the communication or by contacting us.

Unsubscribing from marketing communications does not necessarily stop important service-related, transactional, security, or administrative communications.

Nexoris publishes educational, technical, and professional content through Nexoris Technologies Insights.

When you access or interact with our Insights content, we may process information necessary to operate the publication, understand engagement, provide requested resources, or administer subscriptions where applicable.

Our Insights content may include links to external websites and resources.

Those external websites operate independently and have their own privacy practices. Nexoris is not responsible for the privacy practices of third-party websites.

Where an article or resource contains a form, subscription mechanism, download, or other interactive feature, the relevant collection of personal data will be governed by this Privacy Policy unless a separate privacy notice is provided.

If you apply for a position with Nexoris, we may collect information necessary to assess and manage your application.

This may include:

• name and contact information;

• CV or résumé;

• employment history;

• education;

• professional qualifications;

• skills and experience;

• portfolio or work samples;

• references;

• interview information; and

• other information you voluntarily provide during recruitment.

We use recruitment information to:

• assess suitability for available roles;

• communicate with candidates;

• conduct interviews and assessments;

• verify information where appropriate;

• manage the recruitment process; and

• meet applicable legal or administrative requirements.

Recruitment information will not be used for unrelated purposes unless permitted by applicable law or supported by an appropriate lawful basis.

Nexoris may process personal data contained within client systems, applications, databases, platforms, documents, or other environments while providing contracted technology services.

Where that data belongs to or is controlled by a client, Nexoris generally processes it only for the purposes authorised by the client and the applicable agreement.

Depending on the circumstances, Nexoris may act as a data processor or another relevant role under applicable data-protection law.

The client's instructions, the applicable Statement of Work, Master Services Agreement, Data Processing Agreement, and other contractual terms may establish specific requirements concerning:

• the categories of personal data processed;

• processing purposes;

• permitted processing activities;

• security measures;

• retention;

• deletion;

• international transfers;

• sub-processors;

• breach notification;

• data-subject requests; and

• other data-protection responsibilities.

Where such contractual terms apply, they will govern the relevant client engagement.

Nexoris does not generally seek sensitive personal data through its public website.

You should not submit sensitive personal information through general enquiry forms unless the information is specifically requested and there is an appropriate reason and lawful basis for collecting it.

Where a specific technology service requires the processing of sensitive or specially protected personal data, additional safeguards and contractual requirements may apply.

Our general website and professional services are not directed primarily at children.

We do not knowingly seek to collect personal data from children through our public website where such collection is not appropriate or legally permitted.

Where a particular Nexoris project involves children or minors, additional privacy and safeguarding requirements may apply.

If you believe that a child has provided personal data to Nexoris in circumstances where it should not have been collected, please contact us.

We may disclose personal data where reasonably necessary for the purposes described in this Privacy Policy and where an appropriate lawful basis exists.

Depending on the circumstances, recipients may include:

Employees and authorised personnel

People within Nexoris who require access to perform their responsibilities.

Contractors and consultants

Individuals or organisations supporting our business or delivering services on our behalf.

Technology and service providers

Providers supporting functions such as:

• hosting;

• cloud infrastructure;

• email;

• communications;

• analytics;

• cybersecurity;

• data storage;

• software;

• customer relationship management;

• project management;

• payment processing;

• AI services; and

• other business operations.

Professional advisers

Lawyers, accountants, auditors, consultants, insurers, and other professional advisers.

Government and regulatory authorities

Courts, regulators, law-enforcement agencies, government bodies, or other authorities where disclosure is required or permitted by law.

Business transaction parties

Where reasonably necessary in connection with a merger, acquisition, restructuring, financing, sale of assets, or similar corporate transaction.

We seek to ensure that third parties who process personal data on our behalf are subject to appropriate contractual, technical, and organisational safeguards.

Nexoris uses third-party technologies and service providers to operate our business and provide certain services.

Depending on the relevant activity, these may include providers of:

• cloud infrastructure;

• hosting;

• email and communications;

• analytics;

• cybersecurity;

• customer relationship management;

• payment processing;

• data storage;

• software development infrastructure;

• AI and machine-learning services; and

• other business technologies.

The providers we use may change as our technology environment and business requirements evolve.

Where a provider processes personal data on our behalf, we seek to ensure that appropriate contractual and security measures are in place.

Some third-party providers used by Nexoris may store or process personal data outside Nigeria.

Where personal data is transferred outside Nigeria, Nexoris will take steps required by applicable data-protection law to ensure that the transfer is subject to appropriate safeguards.

Depending on the circumstances, these safeguards may include:

• appropriate contractual arrangements;

• assessment of the recipient and destination;

• applicable legal transfer mechanisms;

• security measures; and

• other safeguards required by applicable law.

Nexoris retains personal data only for as long as reasonably necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.

The appropriate retention period may depend on:

• the nature of the personal data;

• the purpose for which it was collected;

• the existence of an ongoing relationship;

• contractual obligations;

• legal and regulatory requirements;

• accounting and tax requirements;

• dispute resolution;

• security considerations;

• legitimate business requirements; and

• applicable limitation periods.

When personal data is no longer required, we will take reasonable steps to delete, securely destroy, anonymise, or otherwise dispose of it, subject to applicable legal and operational requirements.

Nexoris takes reasonable technical and organisational measures appropriate to the nature and risk of the personal data we process.

Depending on the circumstances, these measures may include:

• access controls;

• authentication controls;

• role-based permissions;

• encryption where appropriate;

• secure development practices;

• security monitoring;

• backup and recovery controls;

• vulnerability management;

• security testing;

• confidentiality obligations;

• incident-response procedures; and

• periodic review of security measures.

No electronic system or method of internet transmission can be guaranteed to be completely secure.

Accordingly, while we take reasonable measures to protect personal data, we cannot guarantee absolute security.

Nexoris maintains procedures for responding to suspected or confirmed personal-data breaches.

If we become aware of a breach involving personal data for which Nexoris is responsible, we will assess the incident and take appropriate steps in accordance with applicable law.

Where notification to a regulatory authority or affected individual is legally required, we will make the relevant notification within the applicable timeframe.

Where Nexoris processes personal data on behalf of a client, the applicable contractual arrangements and law will determine the respective responsibilities of Nexoris and the client for assessing, reporting, and responding to the incident.

Nexoris seeks to consider privacy and data protection when designing and implementing technology systems.

Where appropriate, this may include:

• limiting data collection;

• applying access controls;

• considering data retention;

• implementing appropriate security measures;

• separating environments and permissions;

• documenting processing requirements;

• considering privacy risks during product design; and

• incorporating appropriate safeguards into technical architecture.

Where Nexoris is developing a technology solution for a client, privacy requirements may form part of the project's technical, security, or compliance requirements.

Nexoris may use artificial intelligence and automated technologies in certain business activities and technology services.

Where personal data is processed through AI or automated systems, Nexoris will apply safeguards appropriate to the nature and risk of the processing and applicable law.

We do not intend to use personal data collected through this website to train publicly available AI models unless there is an appropriate lawful basis for doing so and, where required, appropriate notice or consent has been provided.

Where a client engages Nexoris to design, develop, integrate, or operate an AI-enabled system, the applicable agreement may contain additional requirements concerning:

• data processing;

• model providers;

• human oversight;

• security;

• retention;

• model use;

• monitoring;

• accuracy;

• acceptable use; and

• automated decision-making.

Subject to applicable law and any applicable exemptions or limitations, you may have rights concerning your personal data.

These may include the right to:

Be informed

Receive clear information about how your personal data is processed.

Access

Request access to personal data held about you and information concerning its processing.

Rectification

Request correction of inaccurate or incomplete personal data.

Erasure

Request deletion of personal data where the applicable legal conditions for erasure are satisfied.

Restriction

Request restriction of certain processing in circumstances recognised by applicable law.

Object

Object to certain types of processing where the applicable legal conditions are satisfied.

Data portability

Where applicable, request personal data in a structured, commonly used, and machine-readable format or request its transfer to another organisation.

Withdraw consent

Where processing is based on consent, withdraw that consent at any time.

Rights relating to automated decision-making

Where applicable, exercise rights concerning decisions based solely on automated processing that produce legal or similarly significant effects.

These rights are subject to applicable legal conditions and are not necessarily absolute.

To exercise a data-protection right or make a privacy request, contact us using the details provided in the Contact Us section below.

To help us process your request efficiently, you should provide, where reasonably possible:

• your name;

• contact details;

• the nature of your request;

• information concerning the personal data or processing involved; and

• any other information reasonably necessary to verify and process the request.

We may request reasonable information to verify your identity before fulfilling certain requests.

This is intended to protect your personal data from unauthorised disclosure.

We will respond to valid requests within the timeframe required by applicable law.

If you have concerns about how Nexoris processes your personal data, we encourage you to contact us first so that we can investigate and attempt to resolve the matter.

Where applicable, you may also lodge a complaint with the Nigeria Data Protection Commission (NDPC) or another competent supervisory authority.

Nothing in this Privacy Policy prevents you from exercising any statutory right to complain to a competent data-protection authority.

Our website and digital properties may contain links to third-party websites, applications, platforms, or resources.

Those third parties operate independently of Nexoris.

A link does not mean that Nexoris endorses or controls the third party or its privacy practices.

We encourage you to review the privacy policy of any third-party website or service before providing personal information.

Nexoris may operate pages or profiles on third-party social media platforms.

When you interact with Nexoris through those platforms, the relevant platform may independently collect and process information about you.

Your use of those platforms is governed by their own terms and privacy policies.

Information you choose to post publicly may be visible to other users of the relevant platform.

When you communicate with Nexoris through email, telephone, messaging services, forms, or other business channels, we may retain relevant communications and associated information where reasonably necessary to:

• respond to your request;

• manage a business relationship;

• provide services;

• maintain appropriate business records;

• resolve disputes;

• protect our legal interests; or

• comply with legal obligations.

We do not sell personal data to third parties.

If you provide personal data to Nexoris, you should ensure that the information is accurate and that you have the necessary authority or lawful basis to provide information relating to another individual.

If you provide personal data to Nexoris on behalf of an organisation, you are responsible for ensuring that the organisation has complied with its applicable privacy obligations.

You should also avoid submitting unnecessary sensitive personal information through general website forms or unsecured communications.

Privacy and confidentiality are related but separate concepts.

Nexoris may be subject to confidentiality obligations arising from contracts, NDAs, client agreements, professional obligations, or other arrangements.

This Privacy Policy addresses the processing of personal data. It does not replace confidentiality obligations contained in a separate agreement.

Where a client agreement contains additional or stricter confidentiality requirements, those requirements will apply to the relevant engagement.

We may update this Privacy Policy from time to time to reflect:

• changes to our services;

• changes in technology;

• changes to our data-processing activities;

• changes in applicable law or regulatory guidance;

• changes to our service providers; or

• improvements to our privacy practices.

When we make material changes, we will update the Last Updated date and, where appropriate, provide additional notice.

We encourage you to review this Privacy Policy periodically.

If you have questions about this Privacy Policy, wish to exercise a data-subject right, or have a concern about how Nexoris processes personal data, please contact us.

Nexoris Technologies Ltd
Lagos, Nigeria

Privacy / Data Protection: privacy@nexoristech.com

General Email: hello@nexoristech.com

Website: nexoristech.com

For privacy-related requests, please use "Data Protection Request" or "Privacy Request" as the subject of your communication where possible.

Where applicable, you may also contact the:

Nigeria Data Protection Commission (NDPC)
Nigeria

The NDPC is the statutory data-protection supervisory authority in Nigeria.

Information about the Commission, its functions, and available complaint channels can be obtained through its official website.

Nexoris is committed to handling personal data responsibly, transparently, and securely.

We aim to collect information that is relevant and reasonably necessary, use it for legitimate and clearly understood purposes, protect it using appropriate safeguards, retain it only for as long as reasonably necessary, and respect the rights available to individuals under applicable data-protection law.

Privacy is part of how we build and operate technology responsibly.

Privacy Policy last reviewed: 02/09/2026