Privacy Policy

Ekfix LLP ("we," "us," or "our") is committed to protecting the privacy and security of your personal data. This Privacy Policy outlines how we collect, use, store, disclose, and protect your personal data in accordance with the Nigerian Data Protection Regulation (NDPR) and other applicable laws.

Ekfix LLP is the data controller responsible for your personal data.

Contact Information

Ekfix LLP, 22 Kumasi Street, Wuse II, Abuja, Nigeria.

We may collect the following types of personal data:

• Contact Information:Name, email address, phone number, and mailing address
• Account Information:Username and password
• Professional Information:Job title, company name, industry.
• Technical Information:IP address, browser type, operating system, device information, cookies, and usage data.
• Client Data:Data provided by clients for the purpose of software development projects, which may include sensitive personal data depending on the project's nature.
• Job Applicant Data:CV, cover letter, qualifications, employment history.
• Marketing Data:Preferences for receiving marketing communications.
• Communication Data:Records of correspondence.

We process your personal data for the following purposes:

• To provide and improve our software development services.
• To communicate with clients and potential clients.
• To manage client projects.
• To respond to inquiries and requests.
• To process job applications and manage employment.
• To send marketing communications and newsletters (only with your explicit opt-in consent).
• To comply with legal obligations.
• To ensure website functionality.
• For internal record keeping.

We use established third-party services to help us operate our business effectively. These processors may have access to your personal data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose:

• Email Communications:We use Resend (Resend Inc.) for sending transactional and marketing emails. Resend processes your name and email address to facilitate these communications safely and reliably.
• Analytics:We use Umami Analytics — a privacy-first, open-source analytics tool that is cookieless by default and does not collect or transmit personal data to third-party servers. All analytics data is processed and stored under our control on infrastructure located within the EU (Umami Cloud) or on our own servers. No IP address, device fingerprint, or identifiable information is shared with Umami Inc. beyond aggregate, anonymised usage metrics.
• Behavioral Analytics:We use Microsoft Clarity to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve our services and user experience.
• Security:We use Cloudflare Turnstile to protect our forms from spam and abuse.
• Customer Support & Live Chat:We use Tawk.to to provide real-time support. Tawk.to may collect technical data and any information you voluntarily provide during a chat session to help us assist you.

You have the right to access, correct, or delete your personal data. If you have subscribed to our marketing materials, you can opt-out at any time by:

• Clicking the "unsubscribe" link at the bottom of any marketing email.
• Emailing us directly at contact@ekfix.com with your request.

Consent:

When you have given us explicit consent to process your data for a specific purpose.

Contractual Necessity:

When processing is necessary for the performance of a contract with you.

Legal Obligation:

When processing is necessary to comply with a legal obligation.

Legitimate Interests:

When processing is necessary for our legitimate interests (or those of a third party), provided your rights and interests do not override those interests.

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, and destruction. These measures include:

• Data encryption
• Access controls
• Regular security assessments
• Employee training on data protection

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws and regulations. Our specific retention periods are:

• Contact Inquiries: Retained for up to 24 months after submission, then securely deleted.
• Client Project Data: Retained for the duration of the contract, plus 36 months after contract termination for legal and archival purposes.
• Marketing Data: Retained until you withdraw your consent, which you can do at any time.
• Job Applicant Data: Retained for 12 months after the application process, unless you consent to us keeping it on file for future opportunities.
• Cookie Preferences: Anonymous cookie preferences are retained for 12 months from last interaction.
• Data Subject Requests: Records of data access/deletion requests are retained for 36 months for regulatory compliance.

When data is no longer required, it is first soft-deleted (made inaccessible) for 30 days, then permanently and securely erased from our systems.

We use cookies and similar tracking technologies to track the activity on our Site and hold certain information. Cookies are files with small amount of data which may include an anonymous unique identifier.

Umami Analytics

We use Umami Analytics, an open-source, privacy-first web analytics platform. Umami does not use cookies, does not collect personally identifiable information, and does not send data to advertising networks or data brokers.

• Umami collects only anonymised, aggregated metrics: page views, referrer domain, browser family, device type, and country (derived from IP, which is never stored). No user-level tracking or cross-site profiling occurs.
• Because Umami is cookieless, it does not require cookie consent under NDPA/GDPR for basic analytics. However, we still respect your analytics preference: if you decline analytics cookies, we will not load the Umami script.
• You can opt out of Umami tracking at any time through our cookie consent banner or by enabling “Do Not Track” in your browser — Umami honours this signal by default.

Microsoft Clarity

We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity.

• Additionally, we use this information for site optimization, fraud/security purposes, and advertising.
• For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement (https://privacy.microsoft.com/en-us/privacystatement).

We may share your personal data with:

• Third-party service providers who assist us with our operations (e.g., cloud hosting, payment processing).
• Legal authorities when required by law.
• Business partners, when necessary for a project.

We will not sell, rent, or trade your personal data to third parties for marketing purposes.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

How to Exercise Your Rights:

Use our self-service Data Request Portal at ekfix.com/data-request to submit access, deletion, rectification, or data portability requests. Alternatively, contact us at privacy@ekfix.com. We will respond to all requests within 30 days as required by NDPR.

Standard Contractual Clauses:

We use EU/UK Standard Contractual Clauses where applicable with our data processors.

Data Processing Agreements:

We have executed Data Processing Agreements (DPAs) with all our third-party processors including Resend, Microsoft (Clarity), Cloudflare, and Tawk.to. Umami Analytics does not require a DPA as it processes no personal data.

Adequacy Decisions:

Where possible, we transfer data to countries recognized as providing adequate data protection.

Security Measures:

All transfers are encrypted in transit and at rest, with access limited to authorized personnel only.

Update the "Last Updated" date at the top of this policy.

Increment the policy version number.

Request re-consent through our cookie consent banner if the changes affect how we process your data.

Notify you by email if you are a registered user or have submitted a contact form.