Privacy Policy
Last Updated: 20 October 2026
DRAFT — Flagged for formal legal review under the Nigeria Data Protection Act (NDPA) 2023.
Craigia Digital Sphere Ltd ('Craigia', 'we', 'our') is committed to safeguarding the privacy, personal data, and institutional confidentiality of all users, visitors, and corporate clients engaging with our website and software platforms.
1. Regulatory Framework & Governance
This Privacy Policy is formulated in strict compliance with the Nigeria Data Protection Act (NDPA) 2023 and the General Data Protection principles governing secure electronic processing.
Craigia Digital Sphere Ltd operates as both a Data Controller (for customer accounts and inquiry submissions) and a Data Processor (when hosting, deploying, or managing institutional ERP, EdTech, or research repository databases on behalf of client organisations).
2. Information We Collect
Contact & Lead Information: Full name, corporate email address, telephone/WhatsApp contact, organisation/school affiliation, and project scope details voluntarily submitted via our demo and inquiry forms.
System Log & Technical Data: Anonymized IP addresses, browser user agent strings, access timestamps, and page interaction paths collected for telemetry, security diagnostics, and abuse mitigation.
Institutional Application Data: When deploying our software suites (ERP, School Management, Academic Repository), client data is processed strictly within dedicated, isolated databases with client-controlled encryption keys and access governance.
3. Lawful Basis & Purposes of Processing
We process personal data solely on legitimate lawful grounds, including:
• Consent: Granted explicitly when submitting demo requests, quotes, or waitlist signups.
• Contractual Performance: Delivering cloud hosting, software customisation, and systems integration services requested by client organisations.
• Legal & Regulatory Compliance: Retaining audit trails and financial transaction records required under Nigerian corporate law.
4. Data Security & Storage Architecture
All data processed through Craigia platforms is encrypted in transit using TLS 1.3 and at rest using AES-256 standard encryption.
We maintain principle-of-least-privilege access rules across our Firebase, Cloud Functions, and database infrastructure. Administrative access requires mandatory multi-factor authentication (MFA) and immutable tamper-evident audit logging.
5. Your Rights as a Data Subject
Under the NDPA 2023, you have the right to request access to your personal data, rectify inaccuracies, object to processing, or request total erasure of personal records from our active marketing and contact databases.
To exercise any of these rights, please contact our Data Protection Officer at contact@craigiadigital.com.ng.