Privacy Policy

Zaidom Solutions Limited (“Zaidom”, “we”, “us”) is a software and AI engineering company registered with the Corporate Affairs Commission of Nigeria under RC 9416536. For the personal data described in this policy, Zaidom is the data controller: we decide why and how that data is processed.

This policy covers the website at zaidom.com, messages you send us through it or directly by email or phone, and the internal Zaidom tools that connect to Google services described in the Google API section below. It does not cover software we build and run on behalf of our clients, which is governed by those clients’ own privacy notices, or other websites we link to.

Information you give us

When you use the contact form, we collect:

• your name and email address (required);
• your company name and budget range, if you choose to provide them;
• the message you write to us.

If you email or call us directly, we receive your email address or phone number and whatever you decide to include in your message. Please don’t send us sensitive personal information (such as health or financial details) that we haven’t asked for.

Information collected automatically

Like most websites, our web servers automatically record basic technical information when your browser requests a page: your IP address, browser and device type, the page requested, the referring page, and the date and time. When you send a message through the contact form, your IP address is also used briefly to limit repeated submissions, which helps us block spam and abuse, and our contact service records your name and email address in its operational logs so we can confirm delivery and investigate failures.

What we don’t collect

This website has no user accounts and takes no payments. It does not use analytics or advertising tools, tracking pixels, or social media tracking scripts.

This website does not set cookies and does not use your browser’s storage to track you. Our fonts are served from our own servers, so loading our pages does not send your information to a font provider.

We link to our profiles on GitHub, LinkedIn and X, and to our product Elliphy. These are ordinary links: nothing is shared with those sites unless you click through, and once you do, their own privacy policies apply. A small number of standalone brand reference documents hosted on this domain load typefaces from Google Fonts; if you open one, your browser connects to Google’s servers, which receive your IP address.

The Nigeria Data Protection Act 2023 (NDPA) requires a lawful basis for each use of personal data. We use your information only for the purposes below:

• To reply to your enquiry and discuss a possible project with you. Lawful basis: taking steps at your request before entering into a contract, and our legitimate interest in responding to people who contact us.
• To run and protect the website, including delivering pages, preventing spam and abuse, and fixing problems. Lawful basis: our legitimate interest in operating a secure, working website.
• To keep business records and meet legal obligations, including establishing or defending legal claims. Lawful basis: compliance with a legal obligation, and our legitimate interests.
• To keep our systems and data recoverable, by taking encrypted backups with the internal tools described below. Lawful basis: our legitimate interest in protecting our systems against data loss.

Contacting us does not add you to a mailing list, and we do not use your information for advertising, profiling or automated decisions that affect you.

• Enquiries and correspondence are kept for as long as we need them to respond to you and manage any working relationship that follows. If no engagement follows, we delete them once they are no longer needed, and you can ask us to delete them sooner.
• Records of client engagements are kept for as long as Nigerian law requires us to keep business, tax and accounting records.
• Server and service logs are kept only as long as they are needed for security and troubleshooting. The IP addresses used to limit contact form submissions are held only in memory and are not written to a database.
• Encrypted backups are kept only as long as they are needed to recover our systems.

We do not sell, rent or trade your personal data. We share it only where necessary:

• Service providers that help us run our business: the hosting provider for our servers, the email delivery service that forwards contact form messages to our inbox, and our business email provider. We share only what they need to provide their service to us.
• Google, which stores the encrypted backups created by our internal tools in Google Drive (see the Google API section below).
• Authorities, where the law requires it, or where it is necessary to protect the rights, property or safety of Zaidom, our clients or others.
• A successor organisation, if Zaidom is involved in a merger, acquisition or sale of assets. Your data would remain protected by this policy.

Some of our service providers, including our email and cloud storage providers, may store or process data on servers outside Nigeria. When personal data is transferred outside Nigeria, we take the steps the NDPA requires to make sure it continues to receive an adequate level of protection.

We take reasonable technical and organisational measures to protect your data, including:

• encrypting connections to this website and to our contact service (HTTPS);
• encrypting backups on our own servers before they are uploaded to cloud storage;
• limiting access to personal data to the people who need it to do their work;
• rate-limiting the contact form to reduce spam and abuse.

No method of transmitting or storing data is completely secure, so we cannot guarantee absolute security. If a personal data breach occurs, we will notify the Nigeria Data Protection Commission and, where required, you, as the NDPA requires.

Under the NDPA, you have the right to:

• be told how your personal data is used (which is what this policy is for);
• access the personal data we hold about you and get a copy of it;
• have inaccurate or incomplete data corrected;
• have your data deleted;
• restrict how we use your data, or object to our using it;
• receive your data in a commonly used, machine-readable format (data portability);
• withdraw your consent at any time, where we rely on consent;
• not be subject to decisions based solely on automated processing.

To use any of these rights, email contact@zaidom.com with the subject line “Privacy request”. We may need to confirm your identity before acting on your request. We will respond without undue delay and within the time the law allows, and there is normally no charge.

If you are not satisfied with how we handle your data, you can complain to the Nigeria Data Protection Commission at ndpc.gov.ng. We would appreciate the chance to address your concern first.

Zaidom operates internal tools that connect to Google services on our behalf. For example, our backup tool, HJ Backup, uploads encrypted copies of our server backups to Google Drive. When a Zaidom tool accesses Google user data:

• It accesses only the files it creates. Our Google Drive tools use the limited drive.file permission, which lets them see and manage only the files the tool itself has created. They cannot see, open or change any other files in the Google Drive account.
• It uses the data only to provide that function, such as uploading, checking, restoring and removing backups. The backup files are encrypted before they leave our servers, and the authorisation tokens Google issues are stored on our own servers.
• We do not sell this data, and we do not use it for advertising, to build user profiles, or to train artificial intelligence or machine learning models.
• We do not share or transfer this data to anyone else, except where required by applicable law.

Access can be revoked at any time from the Google Account’s third-party access settings.

Our website and services are intended for businesses and professionals. They are not directed at children under 18, and we do not knowingly collect personal data from children. If you believe a child has sent us personal data, please contact us and we will delete it.

We may update this policy when our services or legal requirements change. We will post the updated version on this page and change the “Last updated” date at the top. If a change significantly affects how we use your personal data, we will make it clear on this page.

For questions about this policy or to make a privacy request, contact us at: