Privacy Policy
Last updated: [Confirm effective date]
Sycher Consulting Limited ("Sycher", "we", "us") respects your privacy and is committed to protecting your personal data in line with the Nigeria Data Protection Act 2023 (NDPA), the Nigeria Data Protection Regulation (NDPR), and, where applicable, the EU General Data Protection Regulation (GDPR). This policy explains what we collect, why, how we protect it, and the rights available to you.
Information we collect
We collect personal data you provide directly, and limited technical data collected automatically:
- Contact details you submit — your name, email address, phone number, organization, and the content of your message.
- Correspondence when you email us at business@sycher.ng.
- Technical data such as IP address, browser type, and pages visited, recorded through standard server logs.
- [Analytics data — only if/when analytics tools are enabled; update this section accordingly.]
How we use your information
We process your personal data to:
- Respond to your enquiries and provide the advisory services you request.
- Manage our relationship with you and your organization.
- Operate, maintain, and improve our website and services.
- Comply with our legal and regulatory obligations.
Lawful basis for processing
Depending on the context, we rely on one or more of the following lawful bases under the NDPA and GDPR: your consent; the performance of a contract; our legitimate interests in operating and growing our practice; and compliance with a legal obligation.
Sharing your information
We do not sell your personal data. We may share it with trusted service providers who support our operations — for example [website hosting], [email], and [analytics] providers — under appropriate data-processing terms, and with regulators or authorities where required by law.
Data retention
We retain personal data only for as long as necessary for the purposes described above or as required by law. [Specify retention periods — e.g. enquiry data is kept for X months/years.]
International transfers
Where your data is transferred or stored outside Nigeria [e.g. via cloud infrastructure], we take steps to ensure it receives a level of protection consistent with the NDPA and, where relevant, the GDPR.
Your rights
Subject to applicable law, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of your data.
- Object to, or request restriction of, certain processing.
- Request portability of your data.
- Withdraw consent at any time, where processing is based on consent.
- Lodge a complaint with the Nigeria Data Protection Commission (NDPC).
Data security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or misuse.
Cookies
Our website currently uses only essential functionality and does not deploy non-essential or tracking cookies. If this changes, we will update this policy and request your consent where required.
Children's privacy
Our services are directed at organizations and are not intended for children. We do not knowingly collect personal data from children.
Changes to this policy
We may update this policy from time to time. The current version, with its effective date, will always be available on this page.
Contact us
For any privacy question, or to exercise your rights, contact us at business@sycher.ng or 7 Deji Odunuga Street, Anthony Village, Lagos, Nigeria. [If a Data Protection Officer is designated, add their name and contact details here.]