Privacy Policy

1. Who we are

MIBTY NIG LTD is a private company limited by shares, incorporated under the Companies and Allied Matters Act 2020 (RC pending publication on this site), with its registered office in Lagos State, Nigeria.

For the purposes of the NDPA, MIBTY is the data controller of personal data collected through this website. You can reach us at hello@mibty.com for any privacy-related inquiry.

2. What data we collect

We only collect personal data that you provide to us voluntarily or that is necessary to operate the website. Specifically:

• Information you submit through the contact form: your name, email address, organization, role, the nature of your inquiry, and any other information you choose to include in your message.
• Information automatically collected by our hosting and analytics providers: IP address (in truncated or hashed form where supported), browser and device type, referring URL, pages viewed, and approximate location derived from IP. We do not use this information to identify you personally.
• If you book a meeting through a third-party calendar provider embedded on the site, that provider will collect your name, email, and scheduling preferences directly. Their privacy policy will apply to that interaction in addition to ours.

3. Why we use your data

We process personal data for the following purposes and on the following legal bases under the NDPA:

• To respond to your inquiry, scope potential engagements, and provide information you have requested — on the basis of taking steps at your request prior to entering into a contract.
• To send you our newsletter or other communications you have explicitly opted in to receive — on the basis of your consent, which you may withdraw at any time.
• To operate, secure, and improve the website, including measuring aggregate usage — on the basis of our legitimate interest in running a safe and useful website, balanced against your rights.
• To comply with our legal obligations, including responding to lawful requests from public authorities and complying with tax and accounting law.

4. Who we share your data with

We do not sell your personal data. We share it only with the categories of recipients listed below, and only to the extent necessary for the purposes set out above:

• Our hosting provider (currently Vercel Inc., United States), which processes site traffic and hosts our infrastructure.
• Our content management and form-handling providers, where used, which store inquiry submissions and structured content.
• Our transactional email provider, where used, which delivers acknowledgements and replies on our behalf.
• Our analytics provider, where used, which processes anonymised or pseudonymised usage data.
• Professional advisers (lawyers, auditors, accountants) under a duty of confidentiality, where strictly necessary.
• Public authorities or courts, where we are legally required to disclose information.

5. International transfers

Some of the service providers listed above are located outside Nigeria. Where we transfer personal data outside Nigeria, we do so only when the destination country has been deemed by the Nigeria Data Protection Commission to provide adequate protection, or when appropriate safeguards (such as Standard Contractual Clauses, where required) are in place.

If you would like a copy of the safeguards that apply to a specific transfer, please contact us at hello@mibty.com.

6. How long we keep your data

We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by law. As a general rule:

• Inquiry submissions are retained for up to 24 months after the last contact, then deleted or anonymised.
• Newsletter subscriber data is retained until you unsubscribe.
• Records required for tax, accounting, or other legal obligations are kept for the period required by applicable law.

7. Your rights under the NDPA

Subject to the conditions set out in the Nigeria Data Protection Act 2023, you have the right to:

• Be informed about how your personal data is processed.
• Access the personal data we hold about you, and obtain a copy of it.
• Have inaccurate or incomplete personal data corrected.
• Have your personal data erased, where it is no longer needed or where you withdraw consent.
• Restrict or object to certain processing of your personal data.
• Receive your personal data in a portable format and have it transmitted to another controller, where technically feasible.
• Withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe we have not handled your data lawfully.

8. Cookies and similar technologies

This site uses only the cookies and storage strictly necessary for it to function and, where enabled, privacy-respecting analytics that do not require consent under current NDPA guidance. We do not use advertising cookies or third-party trackers.

If we introduce non-essential cookies in the future, we will request your consent through a cookie banner before they are set, and you will be able to manage your preferences at any time.

9. Security

We implement reasonable technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These include encryption in transit, access controls, logging, and regular review of our security practices.

No system is perfectly secure, however. If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the NDPC and, where required, you directly, in line with our obligations under the NDPA.

10. Children

This website is not directed at children under the age of 18, and we do not knowingly collect personal data from children. If you believe we may have inadvertently collected such data, please contact us so that we can delete it.

11. Contact us and complaints

If you have any questions about this Privacy Policy, wish to exercise any of your rights under the NDPA, or wish to make a complaint, please contact us at hello@mibty.com. We will respond within the timeframes prescribed by the NDPA.

You also have the right to lodge a complaint with the Nigeria Data Protection Commission. Details of how to do so are available at https://ndpc.gov.ng.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. When we do, we will revise the “effective date” shown at the top of the page. Material changes will be communicated more prominently, including by email where appropriate.