ITStack 10th anniversary badge Celebrating 10 Years of Enabling & Securing Businesses With Technology
Legal ยท NDPA / NDPR Compliant

Privacy Policy.

How ITStack Limited collects, uses, and protects your personal data โ€” in line with the Nigeria Data Protection Act 2023 and the Nigeria Data Protection Regulation.

ITStack Limited
Data Controller
NDPA 2023 & NDPR
Governing Law
NDPC
Supervisory Authority
July 2026
Last Updated
Your Data Rights

What The Law Guarantees You.

As a data subject under the Nigeria Data Protection Act 2023, you have the following rights over your personal data. You can exercise any of these at any time by contacting us.

Right To Access

Request a copy of the personal data we hold about you and how it's being processed.

Right To Rectification

Ask us to correct inaccurate data or complete information that's incomplete.

Right To Erasure

Request that we delete your personal data, subject to certain legal conditions.

Right To Restrict Processing

Ask us to pause processing of your data while a dispute or correction is resolved.

Right To Object

Object to our processing of your data for specific purposes, including marketing.

Right To Data Portability

Receive your data in a portable format, or ask us to transfer it directly to another provider.

Right To Withdraw Consent

Withdraw previously given consent at any time, without affecting prior lawful processing.

Right To Lodge A Complaint

File a complaint with the Nigeria Data Protection Commission if you believe your rights have been violated.

Who We Are

ITStack Limited ("ITStack," "we," "us," or "our") is the Data Controller responsible for your personal data collected through www.itstacklimited.com and in the course of our consulting, integration, and IT advisory engagements. Our registered office is at 7th Floor, Mulliner Towers, 39 Alfred Rewane Road, Ikoyi, Lagos, Nigeria.

This policy applies to visitors of our website, prospective clients, clients, job applicants, and any other individual whose personal data we process. It is drafted with reference to the Nigeria Data Protection Act 2023 ("NDPA"), the Nigeria Data Protection Regulation 2019 ("NDPR"), and its Implementation Framework.

What Personal Data We Collect

We only collect data that is necessary, adequate, and relevant to the purposes for which it's processed. Depending on how you interact with us, this may include:

  • Identity & contact data โ€” name, job title, company, email address, phone number, physical address
  • Communication data โ€” the contents of messages, attachments, and enquiries you send us
  • Technical data โ€” IP address, browser type, device information, and usage data collected via log files and cookies
  • Recruitment data โ€” CV/resume, work history, and other information you submit when applying for a role
  • Engagement data โ€” information shared in the course of a consulting, advisory, or support engagement

Our Legal Basis For Processing

Under the NDPA and NDPR, we only process your personal data where we have a valid lawful basis, which may be:

  • Consent โ€” you have given clear, specific consent, such as subscribing to our newsletter
  • Contractual necessity โ€” processing is required to deliver a service you've engaged us for
  • Legal obligation โ€” we're required to process your data to comply with the law
  • Legitimate interest โ€” processing is necessary for our legitimate business interests, balanced against your rights

How We Protect Your Data

As a company built on cybersecurity expertise, we hold ourselves to a high standard for our own data protection practices. We apply appropriate technical and organizational measures โ€” including encryption, access controls, and regular security assessments โ€” to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law, after which it is securely deleted or anonymized.

Data Sharing & Cross-Border Transfers

We do not sell your personal data. We may share it with trusted OEM and technology partners strictly where necessary to deliver a service you've requested, and only under appropriate confidentiality obligations.

Where personal data is transferred outside Nigeria โ€” for example, to a cloud service provider โ€” we ensure the receiving country or organization has an adequate level of data protection, or that appropriate contractual safeguards are in place, consistent with NDPA cross-border transfer requirements.

Cookies & Web Beacons

Like most websites, we use cookies to store visitor preferences and understand how our site is used, so we can improve your experience. You can disable cookies at any time through your browser settings โ€” detailed instructions are available on your browser's support pages. Disabling cookies may affect certain site features.

Our site may also use log files that record IP addresses, browser type, ISP, timestamps, and referring pages. This data is used only in aggregate, for analyzing trends and administering the site โ€” it is not linked to information that identifies you personally.

Children's Information

We encourage parents and guardians to observe, participate in, and monitor their children's online activity. ITStack Limited does not knowingly collect personal data from children under the age of 13. If you believe a child has provided us with personal data, please contact us immediately and we will take prompt steps to remove it.

Changes To This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post any changes on this page with an updated "last updated" date, and encourage you to review it periodically.

Questions, Requests, Or A Complaint?

Email [email protected] to exercise any of your data rights. If you remain unsatisfied, you may also lodge a complaint with the Nigeria Data Protection Commission (NDPC).

Contact Us โ†’