Website Privacy Notice

1. About this Privacy Notice

This Privacy Notice explains how BYTECH DIGITAL INNOVATION LTD ("BYTECH", "we", "us" or "our") intends to collect, use, store, share and protect personal data when people visit the BYTECH corporate website, contact us, submit a project or product enquiry, or otherwise interact with the website.

This document is designed for the current BYTECH website architecture and Contact / Start a Project form. It should be reviewed whenever BYTECH materially changes the website, introduces new analytics or cookies, changes service providers, changes where personal data is stored, or introduces new purposes for processing.

2. Who We Are

BYTECH DIGITAL INNOVATION LTD is a private company limited by shares incorporated in Nigeria under the Companies and Allied Matters Act 2020. Its company registration number is RC 7434748.

For the website processing described in this notice, BYTECH is intended to act as the data controller where it determines why and how personal data is processed.

Privacy enquiries and requests may be directed to: privacy@bytechng.com

3. Personal Data We May Collect

3.1 Information you provide through the Contact / Start a Project form

• Full name.
• Organisation or business name.
• Work email address.
• Phone or WhatsApp number, where voluntarily provided.
• Country or location.
• The type of help, service, solution or product you are interested in.
• Information you provide about the project, problem, requirement or enquiry.
• Estimated project timeline, where provided.
• Preferred contact method, where provided.
• Your enquiry-related acknowledgement/consent and any separate optional marketing preference.

Please avoid including passwords, payment-card information, highly sensitive personal data, or information that is not necessary for BYTECH to understand and respond to your enquiry.

3.2 Technical and usage information

When the website is operated in production, standard technical information may be processed to deliver, secure and troubleshoot the website. Depending on the final hosting and security configuration, this may include IP address, device/browser information, request timestamps, requested pages, security logs and similar technical records.

BYTECH will update this notice before introducing material analytics, advertising, behavioural profiling or other non-essential tracking that is not accurately described here.

4. Why We Use Personal Data

BYTECH may process personal data for purposes including:

• Receiving, reviewing and responding to enquiries.
• Understanding a prospective customer's business or technical requirement.
• Arranging discovery conversations, demonstrations, assessments or project discussions.
• Creating and managing a legitimate sales lead or opportunity after an enquiry.
• Preparing requested proposals, quotations or related pre-contract information.
• Managing communications and follow-ups connected with an enquiry.
• Operating, securing, troubleshooting and improving the website and enquiry process.
• Maintaining appropriate records for accountability, dispute handling and legal/compliance purposes.
• Sending marketing communications only where BYTECH has an appropriate lawful basis and the individual has been given the required choice.

5. Lawful Bases

BYTECH will identify an appropriate lawful basis before processing personal data. Depending on the circumstances, relevant bases under the Nigeria Data Protection Act 2023 may include consent, steps connected with a contract or contractual obligation, legal obligation, and legitimate interest.

Submitting a normal business enquiry does not automatically mean that optional marketing consent is required for BYTECH to read and respond to the enquiry. Marketing preferences are intended to be handled separately from the processing necessary to deal with the enquiry.

Where BYTECH relies on legitimate interest, it should consider whether the processing is necessary and proportionate and whether the individual's rights and interests override BYTECH's interest.

6. Marketing Communications

Where the website offers an optional marketing choice, it will be separate from the mandatory information needed to process an enquiry. Choosing not to receive marketing should not prevent a person from contacting BYTECH about a project, product, service or support requirement.

Where marketing is based on consent, a person may withdraw that consent. BYTECH may retain a minimal suppression record where necessary to ensure that an opt-out continues to be respected.

7. Cookies and Similar Technologies

The current website design does not require BYTECH to claim the use of advertising or behavioural tracking technologies. Essential technical mechanisms may still be necessary for website delivery, security, accessibility or session-related functionality.

If BYTECH later introduces analytics, advertising, embedded third-party services or other non-essential cookies or similar technologies, BYTECH should update this notice and, where required, provide appropriate notice and choice before those technologies are activated.

8. Who We May Share Personal Data With

BYTECH may need to share limited personal data with organisations that support the operation of its business and website. The exact production suppliers must be confirmed before launch. Categories may include:

• Website hosting, cloud infrastructure and security providers.
• Business software, CRM and communications providers.
• Technical service providers acting on BYTECH's instructions.
• Professional advisers where necessary.
• Regulators, courts, law-enforcement authorities or other bodies where disclosure is required or permitted by law.
• A prospective or actual successor to relevant parts of BYTECH's business where a lawful corporate transaction requires appropriate due diligence or transfer.

BYTECH should require processors handling personal data on its behalf to operate under appropriate contractual, confidentiality and security obligations.

9. International Transfers

Some website, cloud, communications or CRM providers may process personal data outside Nigeria. BYTECH will confirm its actual production providers and processing locations before enabling live enquiry submission.

Where personal data is transferred across borders, BYTECH will take steps intended to ensure that the transfer is made in accordance with applicable requirements under the Nigeria Data Protection Act 2023, including applicable safeguards or lawful transfer grounds.

10. How Long We Keep Personal Data

General or project enquiries that do not become customer engagements are retained for up to 6 months after the last meaningful interaction by default. A longer period may be used only where BYTECH has a documented lawful justification, such as a reasonably anticipated legal claim or another applicable legal or compliance requirement.

Where an enquiry becomes a customer, contract or active project, relevant information may become part of BYTECH's customer, contractual, project, finance or operational records and will then be retained under the applicable business, accounting, contractual and legal retention requirements rather than the website-enquiry period.

Marketing preferences may be retained for as long as relevant to the marketing relationship. A limited suppression record may be retained after an opt-out where necessary to ensure BYTECH does not inadvertently resume unwanted marketing.

11. Security

BYTECH intends to use appropriate technical and organisational measures designed to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction, damage or disclosure.

The production Contact system should include server-side validation, access controls, secure transmission, appropriate logging, abuse/spam protection, controlled processor access and an incident-response approach. No internet service can be guaranteed to be completely secure, so users should avoid submitting unnecessary sensitive information.

12. Your Data Protection Rights

Subject to applicable law and the circumstances of the processing, individuals may have rights concerning their personal data, including rights to:

• Be informed about the processing of their personal data.
• Request access to personal data held about them.
• Request correction of inaccurate or incomplete personal data.
• Object to certain processing.
• Request restriction of processing in appropriate circumstances.
• Request erasure in circumstances where the applicable legal requirements are met.
• Request data portability where applicable.
• Withdraw consent where processing relies on consent, without affecting processing already lawfully carried out before withdrawal.
• Raise concerns with the relevant supervisory authority.
• Receive applicable protection in relation to solely automated decision-making.

To make a privacy request, contact privacy@bytechng.com. BYTECH may need to verify the identity of the requester before disclosing or changing personal data.

13. Automated Decision-Making

BYTECH does not currently intend the corporate website Contact process to make solely automated decisions that produce legal or similarly significant effects on individuals. If this changes, BYTECH should update this notice and provide the information and safeguards required by applicable law.

14. Children's Personal Data

The BYTECH corporate website and project-enquiry process are intended for organisations, professionals and people seeking BYTECH's business technology services or products. The Contact form is not designed to collect personal data directly from children.

If BYTECH later introduces a product or website feature that intentionally processes children's personal data, a separate assessment and appropriate privacy information should be completed before that processing begins.

15. Third-Party Websites

The BYTECH website may contain links to websites or services operated by other organisations. BYTECH does not control the privacy practices of those third parties. Visitors should review the privacy information provided by the relevant third party before providing personal data to it.

16. Changes to this Privacy Notice

BYTECH may update this Privacy Notice when its website, processing activities, suppliers, legal obligations or business practices change. The current approved version should be published on the website with an effective or last-updated date.

Material changes should be communicated in an appropriate manner where required.

17. Complaints

If you have a concern about how BYTECH handles personal data, please contact privacy@bytechng.com first so that BYTECH can review the matter.

Individuals may also have the right to raise a complaint with the Nigeria Data Protection Commission (NDPC), Nigeria's data protection supervisory authority. Current NDPC contact and complaint information should be obtained from the Commission's official website at the time a complaint is made.

18. Contact Us

Privacy matters:

BYTECH DIGITAL INNOVATION LTD

RC 7434748

Email: privacy@bytechng.com

Website: bytechng.com

A registered/public business address and any additional public contact details should be inserted only after BYTECH approves them for publication.

19. Website Contact-Form Short Privacy Notice

The following shorter notice is recommended beside the production Contact form, linked to the full Privacy Notice:

BYTECH will use the information you provide to review and respond to your enquiry and, where appropriate, manage related pre-contract or business communications. Optional marketing preferences are handled separately. General enquiries that do not become customer engagements are normally retained for up to 6 months after the last meaningful interaction, unless a documented lawful justification supports longer retention. See our Privacy Notice for more information about how we use personal data and your rights.