Privacy Policy

C & I Limited ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard information about you when you visit our website candilimited.com, use our services, or otherwise interact with us.

We comply with the Nigeria Data Protection Regulation (NDPR) 2019, the EU General Data Protection Regulation (GDPR) where applicable, and other applicable data protection laws.

1. Who We Are

C & I Limited
23 Kingsley Akpabio Street, Nigeria
Email: info@candilimited.com
Phone: +234 802 720 7613

C & I Limited is the data controller for personal data collected through our website and in the course of providing our ICT services.

2. Data We Collect

We collect personal data in the following ways:

a) Data You Provide Directly

• Contact enquiries: Name, email address, phone number, company name, message content
• Client accounts: Business name, billing address, contact persons, payment details (processed securely via Paystack — we do not store card numbers)
• Newsletter subscriptions: Email address only
• Service requests: Details about your project, technical requirements

b) Data Collected Automatically

• Log data: IP address, browser type, pages visited, time and date of visit, referring URL
• Cookies: Session cookies for our client portal; analytics cookies if you consent (see Section 9)

c) Data From Third Parties

• Payment confirmation data from Paystack (transaction reference, status — not card details)
• Domain and hosting account details from our registrar partners

3. How We Use Your Data

We use your personal data for the following purposes:

• To respond to your enquiries and provide quotes
• To deliver the services you have contracted us for (domains, hosting, websites, IT support)
• To issue invoices, process payments, and maintain financial records
• To send service renewal reminders (domain expiry, hosting renewal)
• To send the newsletter you have subscribed to (you may unsubscribe at any time)
• To improve our website and services through aggregated analytics
• To comply with legal and regulatory obligations
• To prevent fraud and ensure the security of our systems

4. Legal Basis for Processing (GDPR)

For EU/EEA data subjects, our legal basis for processing is:

• Contract: Processing necessary to perform a contract with you (service delivery, invoicing)
• Legitimate interests: Responding to enquiries, improving our services, fraud prevention
• Consent: Newsletter subscription, non-essential cookies
• Legal obligation: Tax records, compliance with Nigerian financial regulations

5. Sharing Your Data

We do not sell your personal data. We share data only with:

• Service providers: Our hosting provider, domain registrar, and Paystack payment gateway — strictly as needed to deliver services
• Email service: Our email infrastructure provider (for transactional and newsletter emails)
• Legal requirements: Where required by Nigerian law, court order, or regulatory authority

All third-party processors are contractually bound to handle your data securely and only for the specified purpose.

6. Data Retention

• Active client records: Retained for the duration of our business relationship plus 7 years (in compliance with Nigerian Companies and Allied Matters Act financial record requirements)
• Enquiry / contact form data: 12 months from last interaction, unless a business relationship develops
• Newsletter subscribers: Until you unsubscribe
• Website log data: 90 days

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

• SSL/TLS encryption on all pages handling personal data
• Secure, access-controlled server infrastructure
• Hashed and salted password storage
• Role-based access controls in our client management system
• Regular security updates and vulnerability assessments

No method of internet transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your data (subject to legal retention requirements)
• Restriction: Request that we restrict processing in certain circumstances
• Portability: Request your data in a structured, machine-readable format (GDPR)
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Withdraw consent at any time (e.g., unsubscribe from newsletter)

To exercise any of these rights, contact us at info@candilimited.com. We will respond within 30 days.

If you are an EU/EEA data subject and believe we have not handled your data correctly, you have the right to lodge a complaint with your national data protection supervisory authority.

9. Cookies

We use the following types of cookies on our website:

• Strictly necessary cookies: Required for the client portal login session. No consent required.
• Analytics cookies: Used to understand how visitors use our website (aggregated, anonymous data). These are only placed with your consent.
• Third-party chat cookies: Our live chat widget (Tawk.to) may set cookies. Please refer to Tawk.to's privacy policy for details.

You can control cookies through your browser settings. Disabling cookies may affect the functionality of our client portal.

10. International Data Transfers

Our primary operations are in Nigeria. If your data is transferred outside Nigeria (for example, to cloud service providers), we ensure appropriate safeguards are in place, including standard contractual clauses or equivalent protections as required by NDPR and GDPR.

11. Children's Privacy

Our website and services are not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. We will post the updated policy with a revised "Last Updated" date. Continued use of our website after changes constitutes acceptance of the updated policy.

13. Contact Us

For any questions, requests, or concerns about this Privacy Policy or how we handle your data:

C & I Limited — Data Privacy
Email: info@candilimited.com
Phone: +234 802 720 7613
Address: 23 Kingsley Akpabio Street, Nigeria