This Privacy Policy explains how Astrigate Digital Operations ("we", "us", or "our") collects, uses, stores, and protects your personal information when you use our platform, file a complaint, or interact with our services. By using our platform, you consent to the practices described here.

1. Information We Collect

When you interact with our platform — including through the public complaint form — we may collect:

• Identity information: Full name, gender, date of birth
• Contact information: Email address, phone number, residential address
• Identity numbers: National Identification Number (NIN), Bank Verification Number (BVN), Tax Identification Number (TIN), CAC registration number
• Case information: Subject, description, complaint type, service domain, attachments
• Technical information: IP address, browser type, device type, session data
• Communication records: Correspondence related to your case or inquiry

2. Legal Basis for Processing

We process your personal data on the following grounds under the NDPR:

• Your consent: When you explicitly tick the consent checkbox and submit a complaint or inquiry
• Legitimate interest: To investigate complaints, resolve disputes, and improve service delivery
• Legal obligation: Where applicable law requires us to collect or retain certain information

3. How We Use Your Information

Your personal data is used strictly for:

• Processing and investigating your complaint or inquiry
• Verifying your identity where required (NIN, TIN, CAC)
• Communicating with you about your case status and updates
• Complying with regulatory and legal obligations
• Improving our internal processes and service quality
• Generating anonymised statistical reports (no personally identifiable information is published)

4. Sensitive Identifiers (NIN, BVN, TIN)

Where you provide your NIN, BVN, or TIN, these are collected solely for identity verification in connection with your case. They are:

• Stored in encrypted form and accessed only by authorised personnel
• Not shared with third parties except where required by law or for verification with the issuing authority
• Retained only as long as your case requires, after which they are archived under our data retention schedule

5. Data Sharing

We do not sell or rent your personal data. We may share it with:

• Authorised staff: Case officers and supervisors assigned to your matter
• Regulatory bodies: Where legally required to disclose
• Identity verification providers: Solely for the purpose of verifying the identifiers you submitted
• Technology partners: Hosting and platform providers bound by confidentiality agreements

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, and in accordance with applicable regulatory retention requirements. Case records are typically retained for seven (7) years after resolution, after which they are securely deleted or anonymised.

7. Your Rights Under the NDPR

You have the right to:

• Access a copy of the personal data we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your data (subject to legal obligations)
• Withdraw consent at any time (this does not affect processing already carried out)
• Lodge a complaint with the Nigeria Data Protection Bureau (NDPB) if you believe your rights have been violated

To exercise any of these rights, contact us at crm@astrigatetechnologies.com.ng.com with the subject line "Data Rights Request".

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. This includes encrypted transmission (HTTPS/TLS), access controls, and audit logging of all data access events.

9. Cookies and Tracking

Our platform uses session cookies necessary for secure operation. We do not use third-party advertising or tracking cookies. You can disable cookies in your browser, but certain features may become unavailable.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via a notice on our platform. Continued use after such notice constitutes acceptance of the updated policy.

11. Contact & Complaints

For privacy-related enquiries or to exercise your data rights:

• Email: crm@astrigatetechnologies.com.ng.com
• Office: 2nd Floor, Bavis House, No. 19 Gwani Street, Wuse Zone 4, Abuja, Nigeria

You also have the right to lodge a complaint with the Nigeria Data Protection Bureau (NDPB) at ndpb.gov.ng.

---