1. Introduction
Govtech Africa Limited (“Govtech Africa”, “we”, “us” or “our”) is committed to protecting the privacy and
personal data of individuals who interact with our website, services and business activities. This Privacy
& Data Protection Policy explains how we collect, use, disclose, retain, transfer and protect personal
data, and how you may exercise your data protection rights.
We process personal data in accordance with the Nigeria Data Protection Act 2023 (“NDP Act”), the
Nigeria Data Protection Act - General Application and Implementation Directive 2025 (“GAID 2025”),
applicable guidance of the Nigeria Data Protection Commission (“NDPC”), and other applicable laws.
2. Who We Are
Govtech Africa Limited is a technology solutions and systems integration company supporting
governments and public institutions with digital transformation, customised software, cloud services,
cybersecurity, data and AI, infrastructure, consulting, training and related technology services
Depending on the service or relationship, Govtech Africa may act as a data controller, where we
determine why and how personal data is processed, or as a data processor, where we process personal
data on the documented instructions of a client or other controller.
3. Who This Policy Applies To
- Visitors to our website
- Persons who contact us or submit an enquiry
- Prospective and existing clients and their representatives
- Government and public-sector stakeholders
- Vendors, contractors, advisers and business partners
- Job applicants and
- Users of Govtech Africa services where Govtech Africa acts as the data controller
4. Personal Data We May Collect
- Identity and contact data: name, title, organisation, email address, telephone number and other business contact details
- Professional data: employer, role, department, professional interests and information relating to your organisation
- Communications: enquiries, correspondence, requests, feedback, complaints and support communications
- Recruitment data: CV, qualifications, work history and information you submit in connection with an application.
- User Submissions: Feedback, inquiries, or any content provided via forms or communications
- Technical and usage data: IP address, browser and device information, timestamps, logs, referral information and website interaction data
- Business relationship data: information reasonably necessary for proposals, procurement, due diligence, contracts, service administration and business relationships.
- Event and subscription data: registration details, attendance information and communication preferences
We do not intentionally request sensitive personal data through the general corporate website unless it
is necessary and lawful for a specific purpose.
5. How We Collect Personal Data
- Directly from you through our website forms, email, telephone, meetings or other communications
- From the organisation you represent
- Through website and system logs
- From clients, partners or service providers where we are authorised to receive it; and
- From public sources where lawful and relevant.
6. Why We Process Personal Data
- To respond to enquiries, requests and proposals
- To provide, administer, support and improve our services
- To establish and manage client, partner and vendor relationships
- To communicate with stakeholders and administer events or training
- To manage recruitment
- To secure our website, systems and services and prevent misuse or fraud
- To establish, exercise or defend legal claims, and
- Where permitted, to provide requested updates, insights or marketing communications
7. Lawful Bases for Processing
Depending on the circumstances, we may rely on consent, performance of or steps connected with a
contract, compliance with a legal obligation, legitimate interests, public interest, vital interests, or
another lawful basis recognised by applicable law. Where we rely on consent, you may withdraw it at any time
8. Cookies and Similar Technologies
Our website may use cookies and similar technologies for core operation, security, preferences and,
where enabled with the required choice, analytics or other optional purposes. Necessary technologies may operate where
permitted without optional consent. Other tracking technologies are subject to the choices presented through our cookie
controls. Please see our Cookie Policy and use the Manage Cookies control to change your preferences.
9. Sharing Personal Data
We may share personal data with authorised employees, professional advisers, hosting and technology
providers, security providers, contractors, auditors, regulators, courts, law-enforcement authorities,
business partners and other recipients where the disclosure is necessary and lawful. We do not sell
personal data
Where a service provider processes personal data on our behalf, we require appropriate confidentiality,
security and data protection safeguards.
10. Processing on Behalf of Clients
Govtech Africa may process personal data for government institutions, public bodies and enterprise
clients. Where we act solely as a processor, the relevant client determines the purposes of processing
and its privacy notice may primarily govern the data. A request relating to client-controlled personal data
may therefore be referred to the relevant client.
11. International Data Transfers
Where personal data is transferred or made accessible outside Nigeria, Govtech Africa will use a lawful
transfer basis and appropriate safeguards required by applicable data protection law.
12. Data Retention
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and for
applicable legal, contractual, audit, security and dispute-resolution requirements. When data is no longer required, it will
be securely deleted, destroyed or anonymised, subject to lawful retention obligations
13. Data Security
We use appropriate technical and organisational measures designed to protect personal data against
unauthorised access, unlawful processing, accidental loss, alteration, disclosure or destruction. Measures may include access
controls, authentication, encryption where appropriate, secure configuration, logging, backups, vulnerability management,
confidentiality controls and incident response. No internet-based system can be guaranteed to be completely secure
14. Your Data Protection Rights
- The right to be informed about processing of your personal data
- The right to request access to your personal data
- The right to request correction of inaccurate or incomplete data
- The right to request erasure where applicable
- The right to request restriction of processing where applicable
- The right to object to certain processing
- The right to withdraw consent where processing is based on consent
- The right to data portability where applicable
- Rights relating to qualifying automated decision-making and
- The right to lodge a complaint with the Nigeria Data Protection Commission
These rights may be subject to lawful conditions, exemptions and limitations.
15. Automated Processing and Artificial Intelligence
Where Govtech Africa uses automated processing or artificial intelligence in a context that may
significantly affect individuals, we will assess applicable transparency, privacy, fairness, security and
human-oversight requirements. A service-specific notice may provide additional information where appropriate.
16. Children
Our corporate website is not directed to children. Where a specific Govtech Africa service lawfully processes
children’s personal data, appropriate legal bases, age-appropriate information and enhanced safeguards will be applied
17. Personal Data Breaches
Govtech Africa maintains measures for identifying, investigating and responding to personal data
breaches. Where applicable law requires notification to the NDPC or communication to affected
individuals, we will make the required notification or communication
18. Privacy by Design
We seek to integrate privacy and data protection considerations into relevant systems, services and
projects from the design stage. Where processing is likely to create high risk to individuals, we will
conduct an appropriate Data Protection Impact Assessment or other required assessment.
19. Third-Party Links
Our website may contain links to independent third-party websites or services. Govtech Africa does not
control the privacy practices of those third parties. We encourage you to review their privacy notices
before providing personal data.
20. Data Protection Officer
Fortune Ikenna Awuzie
- Data Protection Officer, Govtech Africa Limited
- Telephone: +2349139167076
You may contact the Data Protection Officer about privacy enquiries, complaints, withdrawal of consent or requests
to exercise your data protection rights
21. Complaints
If you believe your personal data has been processed contrary to applicable data protection law, you
may contact our Data Protection Officer. You also have the right, where applicable, to lodge a complaint
with the Nigeria Data Protection Commission.e
22. Changes to This Policy
We may update this Policy to reflect changes in our services, technology or legal obligations. The
current version will display the date on which it was last updated.
Thank you for trusting Govtech Africa. We are committed to ensuring your privacy and security.
