1 Introduction
Welcome to Qrafteq Brand Systems Nigeria ("Qrafteq," "we," "us," or "our"). We are committed to protecting your privacy and ensuring the security of your personal information.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit qrafteq.com, use our services, or interact with us through WhatsApp, email, or any other channel.
By accessing our website or using our services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.
Website: qrafteq.com | Email: info@qrafteq.com
WhatsApp: +234 803 650 9056 | Lagos, Nigeria
2 Information We Collect
We collect information in three ways: what you provide directly, what is collected automatically when you use our website, and what we receive from third parties in the course of delivering our services.
2.1 Information You Provide Directly
| What | When | Why |
|---|---|---|
| Full name & business name | Contact forms, consultation requests, CAC registration | Identify you; process your registration |
| Email address & phone number | Any point of contact, newsletter sign-up | Communicate updates and deliver services |
| Business address | Business registration, bank documentation | Required for CAC and post-incorporation filings |
| TIN & CAC registration details | Post-incorporation services | Required to complete compliance filings |
| Payment & billing information | Service engagement and invoicing | Process payments and maintain financial records |
| Industry & business structure | Consultation and onboarding | Advise on the right legal structure |
| Name, email address or WhatsApp number, and your recommended route | Route quiz | Show your result, reply to you, and send reminders about your enquiry (with your consent) |
| Name, email, phone number, business name, the service you are interested in, and your chosen call date and time | Free consultation booking and enquiry forms | Confirm and prepare for your call, and send reminders |
2.2 Information Collected Automatically
When you visit qrafteq.com, our servers and third-party analytics tools automatically collect:
- Log data: IP address, browser type, operating system, referring URL, pages visited, time on page
- Device data: Device type, screen resolution, language settings
- Advertising data (only if you accept marketing cookies): Pages viewed and actions such as starting or finishing our route quiz, booking a call, or tapping our WhatsApp, phone or email links, collected through the Meta Pixel
- Cookies and tracking technologies: See Section 8 for full details
2.3 Information from Third Parties
In the course of delivering business registration and compliance services, we may receive information from or share information with the Corporate Affairs Commission (CAC), FIRS, payment processors, and professional service providers — solely to complete the services you have engaged us for.
3 How We Use Your Data
We use the information we collect for the following purposes:
| Purpose | Examples |
|---|---|
| Service Delivery | Processing CAC registrations, creating brand assets, building websites, running paid media campaigns |
| Post-Incorporation Compliance | Obtaining TIN, VAT registration, bank documentation, annual returns filing |
| Communication | Sending service updates, confirmations, invoices, newsletter (with consent), reminders about your booked call, and follow-up messages about your quiz result or enquiry |
| Business Operations | Processing payments, maintaining financial records, fraud prevention |
| Website Improvement | Analytics, UX research, content optimisation |
| Advertising | Measuring how our Facebook and Instagram ads perform and reaching people who may be interested in our services, only if you accept marketing cookies |
| Legal Compliance | Meeting CAC, FIRS, CAMA 2020, and NDPA 2023 obligations |
4 How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances only:
4.1 Service Providers & Regulatory Bodies
| Recipient | Purpose | Data Shared |
|---|---|---|
| Corporate Affairs Commission (CAC) | Business registration filing | Director details, business name, registered address |
| FIRS / Tax Authorities | TIN & VAT registration | Business identity and tax-related details |
| Payment Processors (Paystack, Flutterwave) | Transaction processing | Billing details for the transaction |
| Website Hosting & Cloud | Site infrastructure | Server logs, IP addresses |
| Marketing Platforms (client campaigns) | Campaign management (Grow phase) | Anonymised audience data only |
| Meta (Facebook and Instagram) | Measuring and improving our ads through the Meta Pixel, only after you accept marketing cookies | Pages viewed, actions such as starting or finishing our route quiz, booking a call or tapping our WhatsApp, phone or email links, your IP address, browser details and Meta cookie identifiers. We do not send your name, email address or phone number. |
| Google (Google Analytics) | Understanding how visitors use our website | Pages viewed, traffic source, device and browser details, approximate location |
| Brevo (email delivery) | Sending our confirmation and reminder emails, and managing the newsletter list | Name, email address and the content of the emails we send you |
Some of these providers process data outside Nigeria, for example in Europe and the United States. We share only what is needed for the stated purpose, and any transfer abroad is made in line with the NDPA 2023.
4.2 Legal Requirements
We may disclose your information when required by law, court order, or in response to government and regulatory requests, or to protect our legal rights and prevent fraud.
4.3 Business Transfers
If Qrafteq is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.
5 Data Security
We implement appropriate technical and organisational security measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. These include:
- Encrypted data transmission — SSL/TLS encryption on all website pages and data transmissions
- Secure server infrastructure — firewalls, access controls, and authentication procedures
- Access controls — only authorised Qrafteq staff can access personal data on a need-to-know basis
- Regular security assessments — periodic reviews of our systems and data handling processes
- Staff awareness — internal training on data protection and confidentiality obligations
6 Data Retention
We retain your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required or permitted by law.
| Data Type | Retention Period |
|---|---|
| CAC registration and compliance documents | Minimum 7 years (as required by CAMA 2020) |
| Client contact and service records | Duration of engagement + 3 years |
| Payment and financial records | 7 years (tax and regulatory compliance) |
| Newsletter subscriber email addresses | Until you unsubscribe or request deletion |
| Contact form, route quiz and consultation booking enquiries | 12 months from last correspondence |
| Website analytics (Google Analytics) | 14 months (GA4 default; anonymised) |
| Server access logs | 90 days |
| Cookie consent choice | 30 days, then the cookie banner asks again |
When your information is no longer required, we will securely delete or anonymise it.
7 Your Rights & Choices
Under the Nigeria Data Protection Act (NDPA) 2023 and the NDPA General Application and Implementation Directive (GAID) 2025, you have the following rights regarding your personal data:
To exercise any of these rights, contact us at info@qrafteq.com with the subject line "Data Rights Request". We will respond within 30 days as required by the NDPA 2023. We may need to verify your identity before processing your request.
If you are dissatisfied with our response, you may lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.
8 Cookies & Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience on qrafteq.com and understand how our site is used.
| Cookie Type | Purpose | Duration | Opt Out? |
|---|---|---|---|
| Strictly Necessary | WordPress security tokens, session management, contact form functionality, and remembering your cookie choice | Session (your cookie choice is kept for 30 days) | No — required for site to function |
| Analytics | Google Analytics (GA4) — anonymised page views, traffic sources, device types | Up to 2 years | Yes — Google Analytics Opt-out |
| Marketing | Meta Pixel (Facebook and Instagram ads): measures how our ads perform and which visits lead to enquiries. Loads only after you accept marketing cookies | Up to 90 days | Yes: change your cookie settings, or your Meta ad settings |
When you first visit, our cookie banner lets you accept all, reject, or choose which categories to allow. Marketing cookies, including the Meta Pixel, stay off until you accept them. You can change your choice at any time by clearing the cookies for qrafteq.com in your browser settings, after which the banner will ask you again.
You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. Note that blocking strictly necessary cookies may break some website functionality. To opt out of Google Analytics, install the Google Analytics Opt-out Browser Add-on.
9 Third-Party Links & Services
Our website may contain links to third-party websites, applications, or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.
Third-party services we may integrate include:
- Payment processors — Paystack, Flutterwave (for service payments)
- Communication platforms — WhatsApp Business, Gmail, Brevo (for client communication, reminders and newsletters)
- Analytics tools — Google Analytics GA4 (for website analytics)
- Advertising platforms — Google Ads, Meta Ads (for our own advertising and for growth service delivery)
- Scheduling tools — Our booking form on qrafteq.com (for consultation bookings)
- Regulatory bodies — CAC, FIRS (for business registration and compliance)
10 Children's Privacy
Our services are not directed to individuals under the age of 18. Qrafteq provides business registration, branding, and growth services intended for adults operating or intending to operate a business in Nigeria.
We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately at info@qrafteq.com and we will take immediate steps to delete such information.
11 Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, technology, or legal requirements. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page
- Post the updated policy on qrafteq.com/privacy
- Notify newsletter subscribers by email of significant changes
- Post a notice on our homepage where appropriate
Your continued use of our services after any changes are posted constitutes your acceptance of the updated Privacy Policy.
November 25, 2025 — Initial version published, covering NDPA 2023 and NDPR 2019 compliance, CAC and FIRS service delivery, Google Analytics GA4, WhatsApp Business integration, and Paystack/Flutterwave payment processing.
12 Governing Law
This Privacy Policy is governed by and construed in accordance with the laws of the Federal Republic of Nigeria, including the Nigeria Data Protection Act (NDPA) 2023, the NDPA General Application and Implementation Directive (GAID) 2025, and the Companies and Allied Matters Act (CAMA) 2020.
Any disputes arising from this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of Lagos State, Nigeria.
By using Qrafteq's services, you acknowledge that you have read, understood, and agree to this Privacy Policy.
13 Contact Us
If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how we handle your information, please get in touch:
Qrafteq Brand Systems — Privacy Team
We aim to respond to all privacy enquiries within 3 business days, and to complete data rights requests within 30 days as required by the NDPA 2023.