Privacy Policy

Last updated: 19 August 2026

KorabTech Technologies Ltd ("KorabTech", "we", "us") is committed to protecting the personal data of everyone who interacts with us — visitors to this website, prospective and current clients, and job applicants. This policy explains what we collect, why, and the rights you have, in line with the Nigeria Data Protection Act (NDPA) 2023 and the guidance of the Nigeria Data Protection Commission (NDPC).

On this page

What we collect How we use it Our legal basis for processing Who we share data with How long we keep it Your rights under the NDPA How we protect your data Cookies International transfers Contact us / Data Protection queries

1. What we collect

Depending on how you interact with us, we may collect:

Contact details you provide directly — name, email address, phone number, company name — when you fill in our consultation form, chat with our website assistant, or email us.
Project information shared during scoping or delivery of a project — business requirements, technical documentation, and where relevant, data belonging to your organisation that we process on your behalf under a signed agreement.
Website usage data — pages visited, general location (country/city level), device and browser type, collected via standard web server logs and, where enabled, analytics tools.
Chat conversation content — messages you send to our AI website assistant, which are processed to generate a reply and, for quality purposes, may be reviewed by our team.

We do not knowingly collect financial account details, government ID numbers, or health information through this website. If a client engagement requires processing sensitive categories of data, that is governed separately by our project agreement and a data processing addendum, not this website policy.

2. How we use it

To respond to enquiries and follow up on consultation requests
To scope, deliver, and support client projects under signed agreements
To operate our website assistant and improve its accuracy over time
To send project-related updates to active clients
To meet legal, tax, and regulatory obligations in Nigeria

We do not sell personal data to third parties, and we do not use your data to serve you advertising.

3. Our legal basis for processing

Under the NDPA, we rely on one or more of the following bases depending on the activity:

Consent — for example, when you voluntarily submit the consultation form or chat with our assistant.
Performance of a contract — processing necessary to deliver a project you've engaged us for.
Legitimate interest — for example, basic website analytics to understand which services visitors are interested in, balanced against your right to privacy.
Legal obligation — where Nigerian law requires us to retain certain business records.

We do not sell or rent personal data. We may share limited data with:

Service providers who help us operate — our email hosting provider, our AI processing provider (Anthropic, for the website chat assistant), and our database provider (Supabase) — each bound by their own data protection commitments.
Professional advisors such as our accountants or lawyers, where necessary.
Regulators or law enforcement, only where required by Nigerian law.

5. How long we keep it

We keep website enquiry and chat data for as long as reasonably necessary to respond to your enquiry and for a limited period afterward for record-keeping — typically no longer than 24 months from your last contact with us, unless a longer period is required for an active or prospective client relationship, or by law. Project-related data is retained per the terms of the specific client agreement.

6. Your rights under the NDPA

As a data subject under the Nigeria Data Protection Act, you have the right to:

Be informed about how your data is processed (this policy)
Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data, where applicable
Object to or restrict certain processing
Withdraw consent at any time, where processing is based on consent
Lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your rights have been violated

To exercise any of these rights, contact us using the details below. We aim to respond within 30 days.

7. How we protect your data

We apply reasonable technical and organisational measures to protect personal data, including encrypted connections (TLS/SSL) across our systems, access controls limiting who on our team can view stored data, and service providers selected for their own security standards. No system is perfectly secure, but we take this seriously and review our practices as our systems evolve.

8. Cookies

This website uses minimal cookies and browser storage — primarily to remember your chat conversation with our website assistant during a session, and to keep basic site functionality working. We do not use third-party advertising or tracking cookies. See our Cookie Policy for full details.

9. International transfers

Some of our service providers (including our AI processing and infrastructure providers) may process data on servers located outside Nigeria. Where this happens, we rely on providers with appropriate safeguards in place, consistent with NDPA requirements for cross-border data transfer.

10. Contact us

For any privacy questions, data access requests, or to exercise your rights under the NDPA, contact us at hello@korabtech.online. We may update this policy from time to time; material changes will be reflected by an updated "Last updated" date at the top of this page.