1 Introduction
Welcome to Qrafteq Brand Systems Nigeria ("Qrafteq," "we," "us," or "our"). We are committed to protecting your privacy and ensuring the security of your personal information.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit qrafteq.com, use our services, or interact with us through WhatsApp, email, or any other channel.
By accessing our website or using our services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.
Website: qrafteq.com | Email: info@qrafteq.com
WhatsApp: +234 803 650 9056 | Lagos, Nigeria
2 Information We Collect
We collect information in three ways: what you provide directly, what is collected automatically when you use our website, and what we receive from third parties in the course of delivering our services.
2.1 Information You Provide Directly
| What | When | Why |
|---|---|---|
| Full name & business name | Contact forms, consultation requests, CAC registration | Identify you; process your registration |
| Email address & phone number | Any point of contact, newsletter sign-up | Communicate updates and deliver services |
| Business address | Business registration, bank documentation | Required for CAC and post-incorporation filings |
| TIN & CAC registration details | Post-incorporation services | Required to complete compliance filings |
| Payment & billing information | Service engagement and invoicing | Process payments and maintain financial records |
| Industry & business structure | Consultation and onboarding | Advise on the right legal structure |
2.2 Information Collected Automatically
When you visit qrafteq.com, our servers and third-party analytics tools automatically collect:
- Log data: IP address, browser type, operating system, referring URL, pages visited, time on page
- Device data: Device type, screen resolution, language settings
- Cookies and tracking technologies: See Section 8 for full details
2.3 Information from Third Parties
In the course of delivering business registration and compliance services, we may receive information from or share information with the Corporate Affairs Commission (CAC), FIRS, payment processors, and professional service providers — solely to complete the services you have engaged us for.
3 How We Use Your Data
We use the information we collect for the following purposes:
| Purpose | Examples |
|---|---|
| Service Delivery | Processing CAC registrations, creating brand assets, building websites, running paid media campaigns |
| Post-Incorporation Compliance | Obtaining TIN, VAT registration, bank documentation, annual returns filing |
| Communication | Sending service updates, confirmations, invoices, newsletter (with consent) |
| Business Operations | Processing payments, maintaining financial records, fraud prevention |
| Website Improvement | Analytics, UX research, content optimisation |
| Legal Compliance | Meeting CAC, FIRS, CAMA 2020, and NDPA 2023 obligations |
4 How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances only:
4.1 Service Providers & Regulatory Bodies
| Recipient | Purpose | Data Shared |
|---|---|---|
| Corporate Affairs Commission (CAC) | Business registration filing | Director details, business name, registered address |
| FIRS / Tax Authorities | TIN & VAT registration | Business identity and tax-related details |
| Payment Processors (Paystack, Flutterwave) | Transaction processing | Billing details for the transaction |
| Website Hosting & Cloud | Site infrastructure | Server logs, IP addresses |
| Marketing Platforms | Campaign management (Grow phase) | Anonymised audience data only |
4.2 Legal Requirements
We may disclose your information when required by law, court order, or in response to government and regulatory requests, or to protect our legal rights and prevent fraud.
4.3 Business Transfers
If Qrafteq is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.
5 Data Security
We implement appropriate technical and organisational security measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. These include:
- Encrypted data transmission — SSL/TLS encryption on all website pages and data transmissions
- Secure server infrastructure — firewalls, access controls, and authentication procedures
- Access controls — only authorised Qrafteq staff can access personal data on a need-to-know basis
- Regular security assessments — periodic reviews of our systems and data handling processes
- Staff awareness — internal training on data protection and confidentiality obligations
6 Data Retention
We retain your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required or permitted by law.
| Data Type | Retention Period |
|---|---|
| CAC registration and compliance documents | Minimum 7 years (as required by CAMA 2020) |
| Client contact and service records | Duration of engagement + 3 years |
| Payment and financial records | 7 years (tax and regulatory compliance) |
| Newsletter subscriber email addresses | Until you unsubscribe or request deletion |
| Contact form enquiries | 12 months from last correspondence |
| Website analytics (Google Analytics) | 14 months (GA4 default; anonymised) |
| Server access logs | 90 days |
When your information is no longer required, we will securely delete or anonymise it.
7 Your Rights & Choices
Under the Nigeria Data Protection Act (NDPA) 2023 and the Nigeria Data Protection Regulation (NDPR) 2019, you have the following rights regarding your personal data:
To exercise any of these rights, contact us at info@qrafteq.com with the subject line "Data Rights Request". We will respond within 30 days as required by the NDPA 2023. We may need to verify your identity before processing your request.
If you are dissatisfied with our response, you may lodge a complaint with the National Information Technology Development Agency (NITDA) at nitda.gov.ng.
8 Cookies & Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience on qrafteq.com and understand how our site is used.
| Cookie Type | Purpose | Duration | Opt Out? |
|---|---|---|---|
| Strictly Necessary | WordPress security tokens, session management, contact form functionality | Session | No — required for site to function |
| Analytics | Google Analytics (GA4) — anonymised page views, traffic sources, device types | Up to 2 years | Yes — Google Analytics Opt-out |
| Marketing | Google Ads conversion tracking for paid campaigns (Grow phase clients) | Up to 90 days | Yes — Google Ad Settings |
| Preference | User interface preferences stored locally in your browser | Persistent (localStorage) | Yes — clear browser storage |
You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. Note that blocking strictly necessary cookies may break some website functionality. To opt out of Google Analytics, install the Google Analytics Opt-out Browser Add-on.
9 Third-Party Links & Services
Our website may contain links to third-party websites, applications, or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.
Third-party services we may integrate include:
- Payment processors — Paystack, Flutterwave (for service payments)
- Communication platforms — WhatsApp Business, Gmail (for client communication)
- Analytics tools — Google Analytics GA4 (for website analytics)
- Advertising platforms — Google Ads, Meta Ads (for growth service delivery)
- Scheduling tools — Calendly (for consultation bookings)
- Regulatory bodies — CAC, FIRS (for business registration and compliance)
10 Children's Privacy
Our services are not directed to individuals under the age of 18. Qrafteq provides business registration, branding, and growth services intended for adults operating or intending to operate a business in Nigeria.
We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately at info@qrafteq.com and we will take immediate steps to delete such information.
11 Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, technology, or legal requirements. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page
- Post the updated policy on qrafteq.com/privacy
- Notify newsletter subscribers by email of significant changes
- Post a notice on our homepage where appropriate
Your continued use of our services after any changes are posted constitutes your acceptance of the updated Privacy Policy.
12 Governing Law
This Privacy Policy is governed by and construed in accordance with the laws of the Federal Republic of Nigeria, including the Nigeria Data Protection Act (NDPA) 2023, the Nigeria Data Protection Regulation (NDPR) 2019, and the Companies and Allied Matters Act (CAMA) 2020.
Any disputes arising from this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of Lagos State, Nigeria.
By using Qrafteq's services, you acknowledge that you have read, understood, and agree to this Privacy Policy.
13 Contact Us
If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how we handle your information, please get in touch:
Qrafteq Brand Systems — Privacy Team
We aim to respond to all privacy enquiries within 3 business days, and to complete data rights requests within 30 days as required by the NDPA 2023.