Privacy Policy

ASFA Nigeria collects only data necessary to provide our services: • Contact form: name, phone, email, location, message • Orders: delivery details and payment information (processed by Paystack — PCI DSS certified) • Browsing: essential technical cookies and opt-in analytics No data is collected without your explicit consent.

We process your personal data on the following lawful bases: • Consent — for newsletter subscriptions and analytics • Contractual necessity — for processing orders and quotes • Legitimate interest — for improving our services and security • Legal obligation — for accounting and tax records You may withdraw consent at any time by contacting privacy@asfanigeria.com

Your personal data is used exclusively to: • Respond to your quote requests and messages • Process your product orders • Send our newsletter (voluntary opt-in) • Improve our services and website We do not sell, rent, or share your data with commercial third parties.

Data is retained for the duration necessary to fulfil its purpose: • Contact data: 3 years from last contact • Order data: 10 years (legal accounting obligation) • Newsletter data: until unsubscription • Navigation logs: maximum 13 months

ASFA Nigeria implements appropriate technical measures to protect your data: • SSL/TLS encryption on all communications • Access restricted to authorised personnel only • Payments secured via Paystack (PCI DSS certified) • Regular secure backups

Under the NDPR 2019 and NDPA 2023, you have the following rights: • Right of access — obtain a copy of your data • Right to rectification — correct inaccurate data • Right to erasure — request deletion of your data • Right to object — object to processing • Right to data portability — receive your data in a structured format • Right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) To exercise these rights, contact us at: privacy@asfanigeria.com

Our site uses cookies: • Essential cookies: required for site functionality (session, cart) • Analytics cookies: anonymised audience measurement (opt-in) • No advertising or third-party tracking cookies You can manage your preferences from your browser settings.

Your data is processed in Nigeria. Where data is transferred internationally (e.g., cloud infrastructure), we ensure adequate safeguards are in place in compliance with NDPR requirements for cross-border transfers.

For any questions regarding this policy or your data: • Email: privacy@asfanigeria.com • Post: ASFA Nigeria — Data Protection Officer, 14 Irrigation Way, Maitama, Abuja, Nigeria For unresolved complaints, you may contact the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng